Les menaces cyber des 30 derniers jours pour l'éducation et le secteur public (358 articles).
Résumés et correctifs assistés par IA, sources citées.
Informationnel · Security Affairs ·
Chainalysis says an outside party reached internal tools this month and took customer names, emails, and user IDs, while passwords and investigation records remained protected.
Informationnel · Help Net Security ·
DeepSeek has shared an experimental Super-Agent codebase that observes team conversations and issues repository-related requests, prompting review before any K-12 trial.
Informationnel · Help Net Security ·
Vinay Thakker of KloudStax warns that AI coding assistants need scoped identities and proxy-enforced limits to curb data exfiltration and secret misuse.
Élevé · The Record ·
U.S. agencies allege that North Korean TraderTraitor actors stole funds from a crypto platform and are urging the industry to block related transactions.
Élevé · BleepingComputer ·
The FBI has tied a record cryptocurrency theft involving Binance to North Korea’s TraderTraitor crew, with reported losses of $6.3 billion.
Élevé · Security Affairs ·
The FBI on October 29, 2026, blamed North Korea for a $6 billion theft from Binance and urged organizations to halt related transactions.
Informationnel · Security Affairs ·
A Security Affairs newsletter compilation examines how artificial intelligence is changing cybersecurity, with no CVE or specific vulnerability attached.
Informationnel · Security Affairs ·
Security Affairs' September 2022 roundup covers Android spyware aimed at WeChat and Telegram, a Mac backdoor, and Magento CMS infections across 953 online stores.
Élevé · BleepingComputer ·
Alpine Linux rebuilt its GitLab server and reset credentials after hackers tried to execute remote code against development infrastructure on Oct. 20–21, with no CVE cited.
Informationnel · BleepingComputer ·
OpenAI has raised usage ceilings across ChatGPT, ChatGPT Work, and Codex while linking features more closely, with no security vulnerability reported.
Élevé · Security Affairs ·
Security Affairs' weekly bulletin reports that attackers are actively exploiting known vulnerabilities in Ivanti Connect Secure and Drupal Commerce, with CISA adding both to its exploited-vulnerability catalog.
Élevé · Security Affairs ·
Attackers can use concealed text messages to crash Android phone service, disrupting calls and potentially blocking emergency dialing, with no CVE assigned.
Informationnel · SecurityWeek ·
Northstar Security has emerged from stealth with $7 million and a focus on mapping how combinations of risks affect AI agents.
Élevé · Hackread ·
Federal investigators have connected hundreds of digital-wallet addresses to a North Korean state-linked group and a multibillion-dollar theft, prompting requests to block transfers.
Moyen · Help Net Security ·
Binance disclosed a $6.3 billion digital-asset theft, while r/opensource moderators announced a ban on open-source AI projects; Help Net Security covered both.
Moyen · The Hacker News ·
An attacker who can reach the HTTPS API and obtain a public certificate may authenticate as a trusted client, gaining cluster and VM access in Canonical LXD and MicroCloud.
Élevé · The Hacker News ·
Attackers tampered with a page-speed script tied to Polymarket and DebugBear, closing out user positions and draining funds from hundreds of wallets before refunds were issued.
Moyen · The Hacker News ·
Three U.S. federal agencies have publicly attributed a multi-billion-dollar theft of virtual assets from Binance in 2026 to North Korea-backed intrusion clusters tracked under at least six different names.
Informationnel · Sucuri Blog ·
Sucuri's October 2026 monthly summary highlights WordPress security updates and patch roundup guidance, with no CVEs cited, urging admins to reduce compromise risk.
Informationnel · BleepingComputer ·
Northflank has warned customers that a security incident exposed credentials, including AI API keys, and that some keys were used without authorization.
Élevé · Hackread ·
Attackers compromised a third-party script on Polymarket's prediction market platform, taking user funds as the company promised compensation and moved to stop further losses.
Moyen · BleepingComputer ·
Reddit is moving toward requiring users to sign in, reducing what visitors can see without an account and limiting automated collection across the platform.
Informationnel · BleepingComputer ·
A capacity-building push focuses on teaching security skills, preparing aspiring vulnerability researchers, and adapting learning for an AI-driven era.
Élevé · BleepingComputer ·
Chainalysis says unknown intruders reached internal systems and tools, exposing customer names, email addresses, user IDs and organizational roles; no CVE was cited.