Parce que… c’est l’épisode 0x738!
Shameless plug
14 au 17 avril 2026 - Botconf 202620 au 22 avril 2026 - ITSecCode rabais de 15%: Seqcure1528 et 29 avril 2026 - Cybereco Cyberconférence 20269 au 17 mai 2026 - NorthSec 20263 au 5 juin 2026 - SSTIC 202619 septembre 2026 - Bsides Montréal1 au 3 décembre 2026 - Forum INCYBER - Canada 202624 et 25 février 2027 - SéQCure 2027Notes
IA ou dans le prisme de la machineLa chasse est ouverteVulnerability Research Is CookedClaude AI Discovers Zero-Day RCE Vulnerabilities in Vim and EmacsAmazon security boss: AI makes pentesting 40% more efficientC’est la fuite de ClaudeClaude Code’s source reveals extent of system accessWhat The Claude Code Leak Means for Engineering Teams in Regulated IndustriesAnthropic Issues Copyright Takedown Requests To Remove 8,000+ Copies of Claude Code Source Code - SlashdotLalalalalalalaClaude Code bypasses safety rule if given too many commandsOpenAI ChatGPT fixes DNS data smuggling flawJe te l’avais dit RogersNetflix, Meta, IBM speakers discuss AI and their workdaysMCP Is Great. You’re Just Using It Wrong.Have I Been Pwned: Cuties AI Data BreachVibe Coding Failures: Documented AI Code IncidentsAI Can Clone Open-Source Software In MinutesPenalties Stack Up As AI Spreads Through the Legal SystemAI models will deceive you to save their own kindLa guerre, la guerre, c’est pas une raison pour se faire mal!Je te tiens par ton datacenterIran Strikes Leave Amazon Availability Zones “Hard Down” in Bahrain and Dubai, Per Internal AWS CommunicationKevin Beaumont: “If Iran ever gets somebody to fly a plane into AWS us-east1 the global economy would probably stop.” - CyberplaceIran Deploys ‘Pseudo-Ransomware,’ Revives Pay2Key OperationsIran targets M365 accounts with password-spraying attacksThe real danger of military AI isn’t killer robots; it’s worse human judgementSouveraineté ou vive le numérique libre!Rien ne va plus dans le royaumeEuro-Office veut remplacer Microsoft 365, mais OnlyOffice crie au volOnlyOffice Suspends Nextcloud Partnership For Forking Its Project Without ApprovalUS router ban is ‘industrial policy’ not better infosec‘Fatal decision’: EU slammed for caving to US pressure on digital rulesPrivacy ou cachez ces informations que je ne saurais voirPour le Proton et le pireProton launches new “Meet” privacy-focused conferencing platformProton Meet Isn’t What They Told You It WasQuad9 Enables DNS Over HTTP/3 and DNS Over QUICLinkedIn Is Illegally Searching Your ComputerA Secure Chat App’s Encryption Is So Bad It Is ‘Meaningless’Quantum computing bombshells that are not April FoolsColorado’s New Speed Camera System Makes Waze Nearly UselessI am the lawTout est une question d’ageApple Now Requires Device-Level Age Verification in the UK. Could the US Be Next?Age verification on Systemd and FlatpakGroup Pushing Age Verification Requirements For AI Sneakily Backed By OpenAIIs “Hackback” Official US Cybersecurity Strategy?Piratage : Google, Cloudflare et Cisco contraints de bloquer des sites pirates en FranceRed ou tout ce qui est briséSupply chain Trivy et ciePost Mortem: axios npm supply chain compromise · Issue #10636 · axios/axiosThe Axios supply chain attack used individually targeted social engineeringEuro-hack[Technical Post-Mortem: IAM Exploitation via SSO Token Abuse — EU Europa / ShinyHunters
CyberAlert](https://cyberalert.com.pl/articles/shinyhunters-eu-europa-breach-analysis.html)
CERT-EU: European Commission hack exposes data of 30 EU entitiesCERT-EU - European Commission cloud breach: a supply-chain compromisePiratage du fichier des armes – 41 000 détenteurs exposésUsers say Adobe Creative Cloud rewrote hosts file to detect installed appMan admits to locking thousands of Windows devices in extortion plotNew Rowhammer attacks give complete control of machines running Nvidia GPUsMary Jo Foley: What the heck is going on with Microsoft lately?The White House App Is Riddled With Cybersecurity VulnerabilitiesThe Hack That Exposed Syria’s Sweeping Security FailuresCBP facility codes sure seem to have leaked via online flashcardsSomeone at BrowserStack is Leaking Users’ Email AddressBlue ou tout ce qui améliore notre postureApple’s Camera Indicator LightsApple expands iOS 18 updates to more iPhones to block DarkSword attacksMicrosoft now force upgrades unmanaged Windows 11 24H2 PCsCollaborateurs
Nicolas-Loïc FortinCrédits
Montage par Intrasecure incLocaux réels par Cardo Brussels
View all episodes
