Restez informé des cybermenaces
Les dernières informations cyber, issues de la presse spécialisée française et internationale.
Technostress : une faille pour l’ingénierie sociale
Technostress et ingénierie sociale : comment la surcharge numérique peut fragiliser la vigilance face aux manipulations.
Zataz.com 23/10/2026
Fraude bancaire : deux mails pour installer la peur
Alerte ZATAZ : deux faux mails bancaires, des milliers d'euros en jeu et une fraude téléphonique décryptée.
Zataz.com 23/10/2026
Sites du gouvernement paralysés : l’avertissement d’OpenAI sur les prochaines failles de sécurité majeures (ce n’était que le début)
Deux failles critiques de PHP, une brique d’internet, a forcé de nombreux sites web à devenir inaccessibles pour faire une maintenance. Ces failles ont pu être découvertes grâce à l’IA d’OpenAI, qui prévient que d’autres failles de ce type vont être trouvées.
Presse-citron 22/10/2026
Impôts, Météo France, Wikipédia : de nombreux sites sont inaccessibles en France, que se passe-t-il ?
De très nombreux sites sont inaccessibles, que se passe-t-il ?
Presse-citron 21/10/2026
Une ministre française ciblée par un logiciel espion
Agnès Pannier-Runacher ciblée par un logiciel espion : trois alertes Apple et une enquête judiciaire en cours.
Zataz.com 21/10/2026
Sabotage à distance, pannes géantes… Les experts alarmés par la vulnérabilité des panneaux solaires européens face aux cyberattaques
L'explosion du solaire photovoltaïque en Europe offre une porte d'entrée rêvée aux cybercriminels. Les experts tirent la sonnette d’alarme alors que la situation géopolitique se dégrade.
Presse-citron 20/10/2026
Une nouvelle IA française arrive fin novembre : après Mistral, c’est OVHCloud qui se lance dans la course
Le patron d’OVHCloud révèle que le spécialiste français du cloud computing développe aussi son propre grand modèle de langage. La v1 de cette nouvelle IA pourrait être lancée fin novembre.
Presse-citron 20/10/2026
OpenAI disables internet access during model training while Anthropic issues another mea culpa
We've totally got things under control
Theregister.com 24/10/2026
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 20…
Internet 23/10/2026
PHP shares mitigation for new RCE vulnerability with no patch
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch. [...]
BleepingComputer 23/10/2026
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe. The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS R…
Securityweek.com 23/10/2026
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining i…
Internet 23/10/2026
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously t…
Internet 23/10/2026
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown
INTERPOL’s Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered $105 million across 21 countries. INTERPOL announced the results of Operation Serengeti III, a multinational cybercrime crackdown that led to 1,462 arre…
Securityaffairs.com 23/10/2026
Your thoughts on the proposed Bill C-22?
Your thoughts on the proposed Bill C-22? - posted in General Chat: Hello. In my country, which is Canada, theres been a proposed law called Bill C-22. It has to do with technology and potentially mass surveillance by the government, and I thought Id post her…
BleepingComputer 23/10/2026
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with …
Internet 22/10/2026
PHP2Shell puts dozens of UK government services out of service
Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise
Theregister.com 22/10/2026
When the attacker becomes the user: Rethinking account takeover
SPONSORED FEATURE: AI makes phishing easier than ever
Theregister.com 22/10/2026
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects…
Internet 22/10/2026
Amazon says PHP2Shell exploitation began 4 days before patches
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. [...]
BleepingComputer 22/10/2026
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following the …
Internet 22/10/2026
OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks. The AI company said the incident took place…
Internet 21/10/2026
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...]
BleepingComputer 21/10/2026
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the PHP team says only updating fully protects …
Internet 21/10/2026
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India's largest, said in a stock-e…
Internet 21/10/2026
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization. According to a report published by Russian cybersecurity firm Solar, the activity has been attributed to a threat cluster dubbed Partisan Zmiy,…
Internet 21/10/2026
Google Cloud Outage in London Disrupts Revolut Banking Services
Google Cloud’s London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this morning, according to Google’s status page, and the disruption…
Securityaffairs.com 20/10/2026
'Password1' and a forgotten test account land Welsh outfits in hot water
ICO reprimands Ogi Networks and Data Cymru after ransomware breach exposes info of 3,300 people, mostly children
Theregister.com 20/10/2026
Ahold Delhaize Restoring Services Disrupted by Cyberattack
The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. The post Ahold Delhaize Restoring Services Disrupted by Cyberattack appeared first on SecurityWeek.
Securityweek.com 20/10/2026
Bullhorn sees red after cyberattack knocks recruitment platform offline
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
Theregister.com 20/10/2026
Ahold Delhaize: Cyberattack affects services across US and Europe
Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores across Europe and the United States. [...]
BleepingComputer 20/10/2026
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO). The Symantec Threat Hunter Team, whi…
Internet 20/10/2026
AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive
A data breach exposed AfD emails, while an anonymous site published AI summaries of 421,000 messages, raising questions about authenticity and privacy. Germany’s Alternative für Deutschland (AfD) confirmed on October 19 that its hosting provider was hacked in…
Securityaffairs.com 20/10/2026
UK finance watchdog wants firms to report AI failures and close calls
FCA seeks clear accountability as financial services embrace increasingly autonomous agents
Theregister.com 20/10/2026
Why cyber resilience is now a boardroom priority for UK public services
PARTNER CONTENT: PARTNER CONTENT: What happens after the inflection point?
Theregister.com 20/10/2026
Security vendor might have leaked our GitLab token
Security vendor might have leaked our GitLab token - posted in General Security: We are a small EU software company looking for practical advice and lawyer referrals (specifically US/Delaware commercial or cyber-litigation counsel who work with EU companies) …
BleepingComputer 20/10/2026