Parce que… c’est l’épisode 0x667!
Shameless plug
25 et 26 février 2026 - SéQCure 2026CfP31 mars au 2 avril 2026 - Forum INCYBER - Europe 202614 au 17 avril 2026 - Botconf 202628 et 29 avril 2026 - Cybereco Cyberconférence 20269 au 17 mai 2026 - NorthSec 20263 au 5 juin 2026 - SSTIC 202619 septembre 2026 - Bsides MontréalNotes
IAMCPHackers Use Rogue MCP Server to Inject Malicious Code and Control the Cursor’s Built-in BrowserObscure MCP API in Comet Browser Breaches User Trust, Enabling Full Device Control via AI BrowsersMicrosoftMicrosoft Integrated Azure Firewall With AI-powered Security CopilotMicrosoft’s New Windows AI Feature Comes With Warnings About Malware and Data TheftLe crime ne paie pasGenAI Makes it Easier for Cybercriminals to Successfully Lure Victims into ScamsLLM-generated malware improving, but not operational (yet)anthropic’s paper smells like bullshit – djnn@localhostAI as CyberattackerOllama Vulnerabilities Let Attackers Execute Arbitrary Code by Parsing of Malicious Model FilesBeyond IAM Silos: Why the Identity Security Fabric is Essential for Securing AI and Non-Human IdentitiesLa poésie est une arme… pour contourner la sécurité des LLMsAI-Based Obfuscated Malicious Apps Evading AV Detection to Deploy Malicious PayloadBlueWhy bcrypt Can Be Unsafe for Password Hashing ?Chasse aux hostilesAuthorities Seized Thousands of Servers from Rogue Hosting Company Used to Fuel CyberattacksFive Eyes just made life harder for bulletproof hosting providersNSA Issues Guidance for ISPs and Network Defenders to Combat Malicious ActivityMicrosoft Finally Makes Sysmon Native To WindowsMicrosoft Threat Intelligence Briefing Agent Now Integrated into the Defender PortalSecurity 101: Cyber Training Still Fails MiserablyWhat Cybersecurity Can Learn From Car RacingRedMalicious ‘Free’ VPN Extension with 9 Million Installs Hijacks User Traffic and Steals Browsing DataResearchers discover security vulnerability in WhatsAppBrowser Fingerprinting And Why VPNs Won’t Make You AnonymousKevin Boone: The privacy nightmare of browser fingerprintingMulti-threat Android malware Sturnus steals Signal, WhatsApp messagesThreat Actors Allegedly Selling Microsoft Office 0-Day RCE Vulnerability on Hacking ForumsSalesforce flags another third-party security incidentStolen VPN Credentials Most Common Ransomware Attack VectorRansomware Actors Primarily Targeting Retailers This Holiday Season to Deploy Malicious PayloadsDark Web Job Market Evolved - Prioritizes Practical Skills Over Formal EducationPrivacyGoogle Is Collecting Troves of Data From Downgraded Nest ThermostatsEurope is scaling back its landmark privacy and AI lawsEurope’s cookie nightmare is crumblingCanadian privacy regulators say schools share blame for PowerSchool hackThe FBI spied on a Signal group chat of immigration activists, records revealRandomCloud Sovereignty: How Berlin and Paris Are Trying to Draw a European LineCloudflare broke the internet with a bad DB queryThe Cloudflare Outage May Be a Security RoadmapLegal Restrictions on Vulnerability DisclosureCan Chinese-Made Buses Be Hacked? Norway Drove One Down a Mine to Find OutRogue techie pleads guilty in $862K employer attackLa Quadrature du Net: “Deux articles du Parisien hier…” - Mamot - Le Mastodon de La Quadrature du NetGrapheneOS: “@Fritange France is taking sta…” - GrapheneOS MastodonBrianKrebs: “Social engineering – the art …” - Infosec ExchangeCanonical expands total coverage for Ubuntu LTS releases to 15 years with Legacy add-onCollaborateurs
Nicolas-Loïc FortinCrédits
Montage par Intrasecure incLocaux réels par Intrasecure inc