Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 25, 2026.
Become a free member and compose your press board
526–540 of 1067
Connexions suspectes chez Ring : ce serait un bug, mais les utilisateurs n'y croient pas !
Le 28 mai 2025, des utilisateurs Ring ont vu des connexions inconnues à leurs comptes. D'après la filiale d'Amazon, c'est un bug, mais les utilisateurs doutent.
Microsoft Fix Targets Attacks on SharePoint Zero-Day – Krebs on Security
Microsoft Fix Targets Attacks on SharePoint Zero-Day – Krebs on Security
3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics
JavaScript cryptojackers hit 3,500+ sites using stealth WebSocket miners and Magecart-linked infrastructure.
Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access
HPE fixed two flaws in Instant On Access Points that could allow admin access and command injection. Patch now to stay secure.
PoisonSeed : l'attaque MFA qui fait (un peu) pschitt
Une technique d'attaque attribuée au groupe PoisonSeed fut d'abord décrite comme un coutournement du MFA... avant d'être recatégorisée en affaiblissement.
DOGE Denizen Marko Elez Leaked API Key for xAI – Krebs on Security
DOGE Denizen Marko Elez Leaked API Key for xAI – Krebs on Security
GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUs
NVIDIA urges ECC activation to mitigate GPUHammer, a RowHammer exploit threatening AI accuracy and data integrity on GPUs.
Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHub
GitGuardian uncovers 260,000 leaked Laravel APP_KEYs on GitHub, exposing over 600 apps to remote code execution.
Oligo Security strives to fill application-layer gaps in MITRE ATT&CK framework
Application Attack Matrix is a community effort designed to help defenders and organizations better understand and define how attackers use and exploit weaknesses in applications.
Big Tech’s Mixed Response to U.S. Treasury Sanctions – Krebs on Security
Big Tech’s Mixed Response to U.S. Treasury Sanctions – Krebs on Security
U.S. Sanctions Russian Bulletproof Hosting Provider for Supporting Cybercriminals Behind Ransomware
U.S. sanctions Russian BPH provider Aeza Group for hosting ransomware attacks, dark web drugs, and cybercrime.
Péages Ulys : l'arnaque par SMS qui profite des départs en vacances
Une vague d'arnaques aux péages Ulys, basée sur des SMS, exploite le contexte favorable des départs en vacances et la confusion avec les péages en flux-libre.
Sort