Parce que… c’est l’épisode 0x671!
Shameless plug
25 et 26 février 2026 - SéQCure 2026CfP31 mars au 2 avril 2026 - Forum INCYBER - Europe 202614 au 17 avril 2026 - Botconf 202628 et 29 avril 2026 - Cybereco Cyberconférence 20269 au 17 mai 2026 - NorthSec 20263 au 5 juin 2026 - SSTIC 202619 septembre 2026 - Bsides MontréalNotes
IAVibe coding: What is it good for? Absolutely nothingThe slow rise of SBOMs meets the rapid advance of AIMalveillantHow Malware Authors Incorporate LLMs to Evade DetectionKawaiiGPT - Free WormGPT Variant Leveraging DeepSeek, Gemini, and Kimi-K2 AI ModelsLLMs Tools Like GPT-3.5-Turbo and GPT-4 Fuels the Development of Fully Autonomous MalwareAmazon Is Using Specialized AI Agents for Deep Bug HuntingOpenAI dumps Mixpanel after analytics breach hits API usersGibberifierSouverainetéEurope Is Bending the Knee to the US on Tech PolicyNATO taps Google for air-gapped sovereign cloudCanadian data order risks blowing a hole in EU sovereigntyUnderwater Cables That Carry the Internet Are in TroubleSocial media giants liable for financial scams under new EU lawSwitzerland: Data Protection Officers Recommend Broad Cloud Ban for AuthoritiesPluralistic: (Digital) Elbows Up (28 Nov 2025) – Pluralistic: Daily links from Cory DoctorowRedThreats Actors Leverage Python-based Malware to Inject Process into a Legitimate Windows BinaryNew Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure IntrusionsClickFixHackers Tricks macOS Users to Execute Command in Terminal to Deliver FlexibleFerret MalwareBeware of Weaponized Google Meet page that uses ClickFix to deliver Malicious PayloadClickFix attack uses fake Windows Update screen to push malwareMalicious Blender model files deliver StealC infostealing malwareHashiCorp Vault Vulnerability Allow Attackers to Authenticate to Vault Without Valid CredentialsCheap Device Bypasses AMD, Intel Memory EncryptionAdvanced Security Isn’t Stopping Old Phishing TacticsDes outils de formatage de code ont exposé des milliers de mots de passeOver 390 Abandoned iCalendar Sync Domains Could Expose ~4 Million Devices to Security RisksPublic GitLab repositories exposed more than 17,000 secretsBlueLeonardo unveils ‘Michelangelo Dome’ AI-powered shield systemEx-CISA officials, CISOs aim to stop the spread of hackloreMobile phones : Threat landscape since 2015Air Force practices operating from cut-off bases in fierce future warAirbus: We were hours from pausing production in SpainMicrosoft to secure Entra ID sign-ins from script injection attacksPrivacyMind-reading devices can now predict preconscious thoughts: is it time to worry?One Tech Tip: Modern cars are spying on you. Here’s what you can do about itProton Meet: Secure, end-to-end encrypted video conferencingChat Control - 3 ans de débats pour accoucher d’un truc qui ne sert à rienGrapheneOS: “We no longer have any active s…” - GrapheneOS MastodonGrapheneOS bails on OVHcloud over France’s privacy stanceEuropean Parliament for mandatory age verification for social mediaCollaborateurs
Nicolas-Loïc FortinCrédits
Montage par Intrasecure incLocaux réels par Intrasecure inc