This is the RSS 2.0 feed from www.secnews.physaphae.fr. IT's a simple agragated flow of multiple articles soruces. Liste of sources, can be found on www.secnews.physaphae.fr. 2025-05-10T08:13:02+00:00 www.secnews.physaphae.fr IndustrialCyber - cyber risk firms for industrial LevelBlue, un fournisseur de services de sécurité gérés, de conseil stratégique et de renseignement sur les menaces, a annoncé le lancement de son 2025 ...

---

>LevelBlue, a provider of managed security services, strategic consulting, and threat intelligence, announced the launch of its 2025... ]]> 2025-04-29T08:40:35+00:00 https://industrialcyber.co/news/rsa-2025-levelblue-2025-futures-report-highlights-growing-cyber-threats-and-business-resilience-gaps/ www.secnews.physaphae.fr/article.php?IdArticle=8669381 False Threat None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial ForeScout Technologies Inc. a annoncé lundi qu'il intégrerait la technologie des capteurs de la plate-forme 4D ForeScout avec ...

---

>Forescout Technologies Inc. announced on Monday that it will integrate the Forescout 4D Platform on-premises sensor technology with... ]]> 2025-04-29T08:37:45+00:00 https://industrialcyber.co/news/rsa-2025-forescout-and-nvidia-team-up-to-scale-network-monitoring-across-complex-ot-environments/ www.secnews.physaphae.fr/article.php?IdArticle=8669382 False Industrial None 2.0000000000000000 Global Security Mag - Site de news francais Événements]]> 2025-04-29T08:36:47+00:00 https://www.globalsecuritymag.fr/19-mai-18-h-00-20-h-00-par-visioconference-zoom-lundi-de-la-cybersecurite-apt.html www.secnews.physaphae.fr/article.php?IdArticle=8669363 False Threat None 3.0000000000000000 Global Security Mag - Site de news francais Rapports spéciaux

---

F5 2025 State of Application Strategy Report Reveals Talk Becomes Action as AI Gets to Work • F5 Report Highlights AI-Driven Transformation Amid Operational Complexity • 96% of surveyed IT decision-makers have deployed AI models, up from a quarter in 2023 - Special Reports]]> 2025-04-29T08:32:26+00:00 https://www.globalsecuritymag.fr/f5-2025-state-of-application-strategy-report-reveals-talk-becomes-action-as-ai.html www.secnews.physaphae.fr/article.php?IdArticle=8669364 False None None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial NetFoundry announced on Monday an investment of US$12 million. While this is the first injection of venture capital... ]]> 2025-04-29T08:27:33+00:00 https://industrialcyber.co/news/netfoundry-raises-12-million-to-scale-secure-networking-across-it-iot-ot-replace-legacy-wan-and-sase-architectures/ www.secnews.physaphae.fr/article.php?IdArticle=8669383 False Industrial None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial L'organisation à but non lucratif, Mitre, a annoncé lundi qu'elle avait nommé Brian Abrahamson vice-président et chef de l'exploitation principal ...

---

>Non-profit organization MITRE announced Monday that it has named Brian Abrahamson senior vice president and chief operating officer... ]]> 2025-04-29T08:19:59+00:00 https://industrialcyber.co/news/mitre-appoints-brian-abrahamson-as-coo-to-drive-operational-excellence-support-government-missions/ www.secnews.physaphae.fr/article.php?IdArticle=8669384 False None None 1.00000000000000000000 GB Hacker - Blog de reverseur Microsoft a annoncé que la prise en charge de Hotpatching pour Windows Server 2025 sera généralement disponible en tant que service d'abonnement à partir du 1er juillet 2025. Cette décision élargit une fonctionnalité clé exclusive aux serveurs basés sur Azure pour une utilisation plus large dans les environnements sur site et multicloud via Azure ARC. Qu'est-ce que le hotpatching? Hotpatching est un mécanisme de mise à jour révolutionnaire qui corrige le code en mémoire […]

---

>Microsoft announced that hotpatching support for Windows Server 2025 will become generally available as a subscription service starting July 1, 2025. This move expands a key feature-previously exclusive to Azure-based servers-for broader use in on-premises and multicloud environments via Azure Arc. What is Hotpatching? Hotpatching is a revolutionary update mechanism that patches the in-memory code […] ]]> 2025-04-29T08:17:01+00:00 https://gbhackers.com/windows-server-2025-gets-hotpatching-support/ www.secnews.physaphae.fr/article.php?IdArticle=8669366 False None None 3.0000000000000000 GB Hacker - Blog de reverseur Une vulnérabilité nouvellement divulguée dans le noyau Linux, suivie comme CVE-2025-21756 et surnommée «Attack of the Vsock», a envoyé des ondulations dans la communauté de la cybersécurité. Le défaut permet aux attaquants de dégénérer les privilèges de la racine, ce qui est potentiellement maîtrisé le plein contrôle sur les systèmes Linux affectés. Selon le rapport Hoefler, les chercheurs avertissent que l'exploitation est réalisable et démontrée dans des conditions réelles, […]

---

>A newly disclosed vulnerability in the Linux kernel, tracked as CVE-2025-21756 and dubbed “Attack of the Vsock,” has sent ripples through the cybersecurity community. The flaw enables attackers to escalate privileges to root, potentially gaining full control over affected Linux systems. According to the Hoefler report, Researchers warn that exploitation is feasible and demonstrated in real-world conditions, […] ]]> 2025-04-29T07:07:16+00:00 https://gbhackers.com/critical-linux-kernel-flaw/ www.secnews.physaphae.fr/article.php?IdArticle=8669339 False Vulnerability None 2.0000000000000000 Bleeping Computer - Magazine Américain Google\'s Threat Intelligence Group (GTIG) says attackers exploited 75 zero-day vulnerabilities in the wild last year, over 50% of which were linked to spyware attacks. [...]]]> 2025-04-29T06:00:00+00:00 https://www.bleepingcomputer.com/news/security/google-97-zero-days-exploited-in-2024-over-50-percent-in-spyware-attacks/ www.secnews.physaphae.fr/article.php?IdArticle=8669519 False Vulnerability,Threat None 2.0000000000000000 GB Hacker - Blog de reverseur Une récente augmentation de la cyber-reconnaissance a mis des milliers d'organisations en danger après que Greynoise, une plate-forme mondiale de renseignement sur les menaces, a détecté un pic alarmant dans les tentatives d'accéder aux fichiers de configuration GIT sensibles. Entre le 20 et le 21 avril, Greynoise a observé le nombre quotidien d'IPS unique ciblant ces fichiers en passant par 4 800 - une figure record et un […]

---

>A recent surge in cyber reconnaissance has put thousands of organizations at risk after GreyNoise, a global threat intelligence platform, detected an alarming spike in attempts to access sensitive Git configuration files. Between April 20 and 21, GreyNoise observed the daily count of unique IPs targeting these files soar past 4,800-a record-breaking figure and a […] ]]> 2025-04-29T05:58:37+00:00 https://gbhackers.com/4800-ips-used-to-target-git-configuration-files/ www.secnews.physaphae.fr/article.php?IdArticle=8669319 False Threat None 3.0000000000000000 GB Hacker - Blog de reverseur L'Agence américaine de sécurité de la cybersécurité et de l'infrastructure (CISA) a publié un avis de sécurité urgent après avoir ajouté une vulnérabilité critique du système d'exploitation de Broadcom Brocade à son catalogue connu sur les vulnérabilités exploitées (KEV). Le défaut, suivi comme CVE-2025-1976, affecte le système d'exploitation de tissu en brocart largement déployé de Broadcom et a suscité une préoccupation accrue de la part des équipes de sécurité du gouvernement et des entreprises en raison de son […]

---

>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent security advisory after adding a critical Broadcom Brocade Fabric OS vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog. The flaw, tracked as CVE-2025-1976, affects Broadcom’s widely deployed Brocade Fabric OS and has drawn increased concern from government and enterprise security teams due to its […] ]]> 2025-04-29T05:19:41+00:00 https://gbhackers.com/cisa-adds-broadcom-brocade-fabric-os-flaw/ www.secnews.physaphae.fr/article.php?IdArticle=8669320 False Vulnerability None 3.0000000000000000 GB Hacker - Blog de reverseur L'Agence américaine de sécurité de la cybersécurité et de l'infrastructure (CISA) a émis une alerte urgente concernant une faille de sécurité nouvellement divulguée dans le serveur Web Commvault. Cette vulnérabilité, désormais suivie sous le nom de CVE-2025-3928, pourrait permettre aux attaquants éloignés et authentifiés d'obtenir un accès non autorisé aux systèmes, ce qui soulève des préoccupations entre les organisations du monde entier qui utilisent des solutions de protection des données de Commvault \\. CVE-2025-3928: étincelles de vulnérabilité non spécifiées […]

---

>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert concerning a newly disclosed security flaw in the Commvault Web Server. This vulnerability, now tracked as CVE-2025-3928, could allow remote, authenticated attackers to gain unauthorized access to systems, raising concerns across organizations worldwide that use Commvault\'s data protection solutions. CVE-2025-3928: Unspecified Vulnerability Sparks […] ]]> 2025-04-29T05:14:32+00:00 https://gbhackers.com/cisa-issues-warning-on-commvault-web-server-flaw/ www.secnews.physaphae.fr/article.php?IdArticle=8669321 False Vulnerability None 2.0000000000000000 Mandiant - Blog Sécu de Mandiant Résumé exécutif GoogleThreat Intelligence Group (GTIG) tracked 75 zero-day vulnerabilities exploited in the wild in 2024, a decrease from the number we identified in 2023 (98 vulnerabilities), but still an increase from 2022 (63 vulnerabilities). We divided the reviewed vulnerabilities into two main categories: end-user platforms and products (e.g., mobile devices, operating systems, and browsers) and enterprise-focused technologies, such as security software and appliances.  Vendors continue to drive improvements that make some zero-day exploitation harder, demonstrated by both dwindling numbers across multiple categories and reduced observed attacks against previously popular targets. At the same time, commercial surveillance vendors (CSVs) appear to be increasing their operational security practices, potentially leading to decreased attribution and detection. We see zero-day exploitation targeting a greater number and wider variety of enterprise-specific technologies, although these technologies still remain a smaller proportion of overall exploitation when compared to end-user technologies. While the historic focus on the exploitation of popular end-user technologies and their users continues, the shift toward increased targeting of enterprise-focused products will require a wider and more diverse set of vendors to increase proactive security measures in order to reduce future zero-day exploitation attempts. Scope  This report describes what Google Threat Intelligence Group (GTIG) knows about zero-day exploitation in 2024. We discuss how targeted vendors and exploited products drive trends that reflect threat actor goals and shifting exploitation approaches, and then closely examine several examples of zero-day exploitation from 2024 that demonstrate how actors use both historic and novel techniques to exploit vulnerabilities in targeted products. The following content leverages original research conducted by GTIG, combined with breach investigation findings and reporting from reliable open sources, though we cannot independently confirm the reports of every source. Research in this space is dynamic and the numbers may adjust due to the ongoing discovery of past incidents through digital forensic investigations. The numbers presented here reflect our best understanding of current data. GTIG defines a zero-day as a vulnerability that was maliciously exploited in the wild before a patch was made publicly available. GTIG acknowledges that the trends observed and discussed in this report are based on detected and disclosed zero-days. Our analysis represents exploitation tracked by GTIG but may not reflect all zero-day exploitation. aside_block Key Takeaways Zero-day exploitation continues to grow gradually. The 75 zero-day vulnerabilities exploited in 2024 follow a pattern that has emerged ]]> 2025-04-29T05:00:00+00:00 https://cloud.google.com/blog/topics/threat-intelligence/2024-zero-day-trends/ www.secnews.physaphae.fr/article.php?IdArticle=8669387 False Malware,Tool,Vulnerability,Threat,Patching,Mobile,Prediction,Cloud,Commercial APT 37 2.0000000000000000 The Register - Site journalistique Anglais Who could possibly be behind this attack on an ethnic minority China despises? Researchers at Canada\'s Citizen Lab have spotted a phishing campaign and supply chain attack directed at Uyghur people living outside China, and suggest it\'s an example of Beijing\'s attempts to target the ethnic minority group.…]]> 2025-04-29T03:51:01+00:00 https://go.theregister.com/feed/www.theregister.com/2025/04/29/citizen_lab_uyghur_phishing_malware/ www.secnews.physaphae.fr/article.php?IdArticle=8669271 False Malware None 3.0000000000000000 The State of Security - Magazine Américain The FBI is set to report that ransomware was the most pervasive cybersecurity threat to US critical infrastructure during the year of 2024. As Reuters reports, complaints of ransomware attacks against critical sectors have jumped 9% over the previous year. The annual report from the FBI\'s Internet Crime Complaint Center (IC3) will reveal that the likes of manufacturing, healthcare, government facilities, financial services and IT were the top critical infrastructure sectors targeted by digital extortionists. With the impact of ransomware being seen in production lines grinding to a standstill...]]> 2025-04-29T02:57:05+00:00 https://www.tripwire.com/state-of-security/ransomware-attacks-critical-infrastructure-surge-reports-fbi www.secnews.physaphae.fr/article.php?IdArticle=8669356 False Ransomware,Threat,Medical None 3.0000000000000000 The State of Security - Magazine Américain Ransomware has evolved from a distant “I hope it doesn\'t happen to us” threat to an insidious, worldwide crisis. Among the sectors most affected is manufacturing, which has found itself more and more in attackers\' crosshairs. Manufacturing has long viewed itself as immune to digital crime, but ransomware attackers have belied this belief. Industrial operations rely heavily on Industrial Internet of Things (IIoT) devices, so a single breach can grant attackers remote access to critical controllers or sensors, disrupting production and causing tangible physical harm. Faced with the choice...]]> 2025-04-29T02:57:02+00:00 https://www.tripwire.com/state-of-security/growing-threat-ransomware-manufacturing-sector www.secnews.physaphae.fr/article.php?IdArticle=8669357 False Ransomware,Threat,Industrial None 3.0000000000000000 Global Security Mag - Site de news francais Vulnérabilités]]> 2025-04-29T02:00:00+00:00 https://www.globalsecuritymag.fr/ciblage-et-compromission-d-entites-francaises-au-moyen-du-mode-operatoire-d.html www.secnews.physaphae.fr/article.php?IdArticle=8669491 False None None 2.0000000000000000 Global Security Mag - Site de news francais Vulnérabilités]]> 2025-04-29T02:00:00+00:00 https://www.globalsecuritymag.fr/%F0%9F%87%AC%F0%9F%87%A7-targeting-and-compromise-of-french-entities-using-the-apt28-intrusion.html www.secnews.physaphae.fr/article.php?IdArticle=8669457 False None None 2.0000000000000000 ProofPoint - Cyber Firms 2025-04-29T01:51:00+00:00 https://www.proofpoint.com/us/blog/email-and-cloud-threats/human-factor-report-series-social-engineering www.secnews.physaphae.fr/article.php?IdArticle=8669763 False Malware,Threat,Prediction,Technical None 2.0000000000000000 Recorded Future - FLux Recorded Future At the RSA Conference, former CISA chief Chris Krebs said recent efforts by China-linked hacking groups makes it more important than ever to grow the federal cyber workforce.]]> 2025-04-29T00:11:53+00:00 https://therecord.media/krebs-outrage-efforts-to-shrink-federal-cyber-workforce www.secnews.physaphae.fr/article.php?IdArticle=8669229 False Conference None 2.0000000000000000 Silicon - Site de News Francais 2025-04-29T00:00:00+00:00 https://www.silicon.fr/Thematique/cybersecurite-1371/Breves/cas-snowflake-symbole-resurgence-infostealers-473484.htm#utm_source=IndexThematique&utm_medium=Rss&utm_campaign= www.secnews.physaphae.fr/article.php?IdArticle=8669360 False None None 3.0000000000000000 HackRead - Chercher Cyber Postal codes now play a key role in cybersecurity, fraud prevention, and digital identity verification, raising new concerns…]]> 2025-04-28T23:56:56+00:00 https://hackread.com/postal-code-data-impact-cybersecurity-fraud-prevention/ www.secnews.physaphae.fr/article.php?IdArticle=8669212 False None None 3.0000000000000000 The Register - Site journalistique Anglais Sometimes, silence is the best option An Oklahoma City cybersecurity professional accused of installing spyware on a hospital PC confirmed on LinkedIn key details of the drama.…]]> 2025-04-28T23:28:54+00:00 https://go.theregister.com/feed/www.theregister.com/2025/04/28/infosec_ceo_accused_of_installing_malware/ www.secnews.physaphae.fr/article.php?IdArticle=8669211 False Malware None 3.0000000000000000 CyberScoop - scoopnewsgroup.com special Cyber Les législateurs disent que la loi sur les routeurs est essentielle pour comprendre les vulnérabilités des appareils exploités par les pirates chinois et autres adversaires.

---

>Lawmakers say the ROUTERS Act is critical to understanding vulnerabilities in devices exploited by Chinese hackers and other adversaries. ]]> 2025-04-28T22:09:14+00:00 https://cyberscoop.com/routers-act-commerce-study-modems-chinese-hackers/ www.secnews.physaphae.fr/article.php?IdArticle=8669194 False Vulnerability,Studies None 2.0000000000000000 The Register - Site journalistique Anglais

---

Whistleblowing, email is evidential mail, HR is not your friend, and more discussed by CxO panel RSAC  Chief security officers should negotiate personal liability insurance and a golden parachute when they start a new job – in case things go sideways and management tries to scapegoat them for a network breach.… ]]> 2025-04-28T21:57:37+00:00 https://go.theregister.com/feed/www.theregister.com/2025/04/28/ciso_rsa_whistleblowing/ www.secnews.physaphae.fr/article.php?IdArticle=8669174 False None None 3.0000000000000000 The Register - Site journalistique Anglais Homeland Security boss Noem added as last-minute keynote, mind you RSAC  There\'s a notable absence from this year\'s RSA Conference that kicked off today in San Francisco: The NSA\'s State of the Hack panel.…]]> 2025-04-28T21:41:35+00:00 https://go.theregister.com/feed/www.theregister.com/2025/04/28/nsa_cisa_bosses_notably_absent/ www.secnews.physaphae.fr/article.php?IdArticle=8669175 False Hack,Conference None 2.0000000000000000 Dark Reading - Informationweek Branch CVE-2025-31324 is a maximum severity bug that attackers exploited weeks before SAP released a patch for it.]]> 2025-04-28T21:26:28+00:00 https://www.darkreading.com/cyberattacks-data-breaches/sap-netweaver-visual-composer-flaw-active-exploitation www.secnews.physaphae.fr/article.php?IdArticle=8669177 False None None 3.0000000000000000 CyberScoop - scoopnewsgroup.com special Cyber La lettre, publiée par la Fondation Frontier Electronic, appelle l'ordre exécutif de Trump \\ «représailles».

---

>The letter, released through the Electronic Frontier Foundation, calls Trump\'s executive order “retaliatory.” ]]> 2025-04-28T20:57:55+00:00 https://cyberscoop.com/eff-letter-chris-krebs-donald-trump-executive-order/ www.secnews.physaphae.fr/article.php?IdArticle=8669158 False None None 2.0000000000000000 Global Security Mag - Site de news francais Revues de produits

---

Oasis Security Launches Automated Provisioning For Non-Human Identities New feature automates the creation of secret-based and federated NHIs, ensuring every NHI is fully secured from day one - Product Reviews]]> 2025-04-28T19:49:54+00:00 https://www.globalsecuritymag.fr/oasis-security-launched-oasis-nhi-provisioning.html www.secnews.physaphae.fr/article.php?IdArticle=8669138 False None None 2.0000000000000000 Schneier on Security - Chercheur Cryptologue Américain redonne les données : Windscribe, un service VPN de confidentialité utilisé à l'échelle mondiale, a annoncé aujourd'hui que son fondateur, Yegor Sak, a été entièrement acquitté par un tribunal d'Athènes, en Grèce, à la suite d'une bataille juridique de deux ans au cours de laquelle SAK a été personnellement accusé en lien avec une prétendue infraction sur Internet par un utilisateur inconnu du service. L'affaire était centrée sur un serveur appartenant à Windscribe en Finlande qui aurait été utilisé pour briser un système en Grèce. Les autorités grecques, en coopération avec Interpol, ont retracé l'adresse IP à l'infrastructure de Windscribe et, contrairement aux procédures internationales standard, ont procédé à des procédures pénales contre SAK lui-même, plutôt que de poursuivre des informations par le biais de canaux d'entreprise standard ...

---

The company doesn’t keep logs, so couldn’t turn over data: Windscribe, a globally used privacy-first VPN service, announced today that its founder, Yegor Sak, has been fully acquitted by a court in Athens, Greece, following a two-year legal battle in which Sak was personally charged in connection with an alleged internet offence by an unknown user of the service. The case centred around a Windscribe-owned server in Finland that was allegedly used to breach a system in Greece. Greek authorities, in cooperation with INTERPOL, traced the IP address to Windscribe’s infrastructure and, unlike standard international procedures, proceeded to initiate criminal proceedings against Sak himself, rather than pursuing information through standard corporate channels...]]> 2025-04-28T18:17:27+00:00 https://www.schneier.com/blog/archives/2025/04/windscribe-acquitted-on-charges-of-not-collecting-users-data.html www.secnews.physaphae.fr/article.php?IdArticle=8669121 False None None 3.0000000000000000 Recorded Future - FLux Recorded Future Urban One, the largest media company primarily serving African Americans, disclosed a data breach to regulators. A ransomware group said it had attacked the company.]]> 2025-04-28T17:55:43+00:00 https://therecord.media/urban-one-data-breach-african-amercian-media www.secnews.physaphae.fr/article.php?IdArticle=8669100 False Ransomware,Data Breach None 2.0000000000000000 Korben - Bloger francais 2025-04-28T17:49:39+00:00 https://korben.info/test-du-devolo-wifi-6-3600-5g-lte-internet-rapide-partout-vraiment.html www.secnews.physaphae.fr/article.php?IdArticle=8669075 False None None 2.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) What happens when cybercriminals no longer need deep skills to breach your defenses? Today\'s attackers are armed with powerful tools that do the heavy lifting - from AI-powered phishing kits to large botnets ready to strike. And they\'re not just after big corporations. Anyone can be a target when fake identities, hijacked infrastructure, and insider tricks are used to slip past security]]> 2025-04-28T17:48:00+00:00 https://thehackernews.com/2025/04/weekly-recap-critical-sap-exploit-ai.html www.secnews.physaphae.fr/article.php?IdArticle=8669011 False Tool,Threat None 2.0000000000000000 HackRead - Chercher Cyber BreachForums posts a PGP-signed message explaining the sudden April 2025 shutdown. Admins cite MyBB 0day vulnerability impacting the…]]> 2025-04-28T17:47:14+00:00 https://hackread.com/breachforums-displays-message-shutdown-mybb-0day-flaw/ www.secnews.physaphae.fr/article.php?IdArticle=8669101 False Vulnerability,Threat None 3.0000000000000000 GB Hacker - Blog de reverseur L'unité de réponse aux menaces de l'Esentire (TRU) début mars 2025, une cyberattaque sophistiquée tirant parti des logiciels malveillants socgholis, également connus sous le nom de FakeUpdates, a été découvert de ciblage des réseaux d'entreprise. Cette attaque, orchestrée par des affiliés du groupe RansomHub-A Ransomware-As-A-Service (RAAS) émergeant en 2024, démontrent une approche calculée pour infiltrer des organisations de haut niveau. Les logiciels malveillants socgholish en tant que vecteur initial RansomHub commercialisent son illicite […]

---

>The eSentire\'s Threat Response Unit (TRU) in early March 2025, a sophisticated cyberattack leveraging SocGholish malware, also known as FakeUpdates, was uncovered targeting corporate networks. This attack, orchestrated by affiliates of RansomHub-a notorious Ransomware-as-a-Service (RaaS) group emerging in 2024-demonstrates a calculated approach to infiltrate high-profile organizations. SocGholish Malware as Initial Vector RansomHub markets its illicit […] ]]> 2025-04-28T17:27:20+00:00 https://gbhackers.com/ransomhub-ransomware-deploys-malware/ www.secnews.physaphae.fr/article.php?IdArticle=8669103 False Ransomware,Malware,Threat None 2.0000000000000000 eSecurityPlanet - Blog Les experts en cybersécurité avertissent les propriétaires de sites Web après que les pirates ont commencé à exploiter activement deux vulnérabilités critiques dans Craft CMS, un système de gestion de contenu, laissant des centaines de serveurs compromis. Les défauts - CVE-2024-58136 et CVE-2025-32432 - ont été découverts par l'équipe SensePost d'Orange Cyberdefense \\ lors d'une enquête médico-légale à la mi-février. Leurs recherches ont révélé que les attaquants utilisent ces bogues […]

---

>Cybersecurity experts are warning website owners after hackers began actively exploiting two critical vulnerabilities in Craft CMS, a content management system, leaving hundreds of servers compromised. The flaws - CVE-2024-58136 and CVE-2025-32432 - were discovered by Orange Cyberdefense\'s SensePost team during a forensic investigation in mid-February. Their research revealed that attackers are using these bugs […] ]]> 2025-04-28T17:21:33+00:00 https://www.esecurityplanet.com/cybersecurity/craft-cms-flaws-exploited/ www.secnews.physaphae.fr/article.php?IdArticle=8669097 False Vulnerability None 3.0000000000000000 GB Hacker - Blog de reverseur Le système de chasse aux menaces du laboratoire NSFOCUS FUIY \\ a identifié 19 campagnes d'attaque de menace persistante avancées (APT) sophistiquées, ciblant principalement les régions à travers l'Asie du Sud, l'Asie de l'Est, l'Europe de l'Est et l'Amérique du Sud. Ces incursions ont mis en évidence une continuation d'activités de cyber-espionnage ciblées et de sabotage, se concentrant principalement sur les agences gouvernementales, les infrastructures critiques et les secteurs industriels de premier plan par le biais d'un […]

---

>The NSFOCUS Fuying Laboratory\'s global threat hunting system identified 19 sophisticated Advanced Persistent Threat (APT) attack campaigns, predominantly targeting regions across South Asia, East Asia, Eastern Europe, and South America. These incursions highlighted a continuation of targeted cyber espionage and sabotage activities, primarily focusing on government agencies, critical infrastructure, and prominent industry sectors through a […] ]]> 2025-04-28T17:19:53+00:00 https://gbhackers.com/19-apt-hackers-target-asia-based-company-servers/ www.secnews.physaphae.fr/article.php?IdArticle=8669104 False Vulnerability,Threat None 2.0000000000000000 GB Hacker - Blog de reverseur Le Centre des plaintes sur la criminalité Internet du FBI \\ (IC3) a déclaré une perte record de 16,6 milliards de dollars (environ 1,38 crore lakh) en raison de crimes cyberlativés en 2024, marquant une augmentation stupéfiante de 33% par rapport à l'année précédente. Créée il y a 25 ans, IC3 est devenue le centre principal pour signaler la cyber fraude et les menaces, traitant plus de 9 millions […]

---

>The FBI\'s Internet Crime Complaint Center (IC3) has reported a record-breaking loss of $16.6 billion (approximately ₹1.38 lakh crore) due to cyber-enabled crimes in 2024, marking a staggering 33% increase from the previous year. Established 25 years ago, IC3 has evolved into the primary hub for reporting cyber fraud and threats, processing over 9 million […] ]]> 2025-04-28T17:13:19+00:00 https://gbhackers.com/fbi-reports-%e2%82%b91-38-lakh-crore-loss-in-2024/ www.secnews.physaphae.fr/article.php?IdArticle=8669105 False None None 2.0000000000000000 GB Hacker - Blog de reverseur Les chercheurs en cybersécurité du groupe Intel du rapport DFIR ont découvert un répertoire ouvert hébergé au 194.48.154.79:80, qui serait exploité par une affiliée du groupe de ransomware FOG, qui a émergé à la mi-2024. Ce serveur accessible au public a révélé un arsenal sophistiqué d'outils et de scripts adaptés à la reconnaissance, à l'exploitation, au vol d'identification, au mouvement latéral et à la persistance. Le […]

---

>Cybersecurity researchers from The DFIR Report\'s Threat Intel Group uncovered an open directory hosted at 194.48.154.79:80, believed to be operated by an affiliate of the Fog ransomware group, which emerged in mid-2024. This publicly accessible server revealed a sophisticated arsenal of tools and scripts tailored for reconnaissance, exploitation, credential theft, lateral movement, and persistence. The […] ]]> 2025-04-28T17:02:21+00:00 https://gbhackers.com/fog-ransomware-reveals-active-directory-exploitation/ www.secnews.physaphae.fr/article.php?IdArticle=8669079 False Ransomware,Tool,Threat None 3.0000000000000000 UnderNews - Site de news "pirate" francais Les chercheurs de Proofpoint ont identifié un nouvel acteur de menace BEC (Business Email Compromise), nommé TA2900, ciblant les paiements de loyer en France. Tribune – Ce groupe envoie des e-mails en français prétendant que le paiement du loyer n’a pas été reçu, incitant les victimes à effectuer un paiement immédiat sur un nouveau compte bancaire. Les […] The post Alerte fraude cyber en France : Les cybercriminels se font passer pour votre concierge first appeared on UnderNews.]]> 2025-04-28T16:59:19+00:00 https://www.undernews.fr/alertes-securite/alerte-fraude-cyber-en-france-les-cybercriminels-se-font-passer-pour-votre-concierge.html www.secnews.physaphae.fr/article.php?IdArticle=8669098 False None None 3.0000000000000000 UnderNews - Site de news "pirate" francais À l'occasion du World Password Day, Sophos, l'un des premiers éditeurs mondiaux de solutions de sécurité innovantes conçues pour neutraliser les cyberattaques, insiste sur les limites du mot de passe et des méthodes d'authentification basées sur la connaissance. Tribune – En effet, les techniques, tactiques et procédures (TTP) sophistiquées des cyberattaquants en 2025 leur permettent de […] The post World Password Day : Sophos prône la fin du mot de passe first appeared on UnderNews.]]> 2025-04-28T16:48:40+00:00 https://www.undernews.fr/authentification-biometrie/world-password-day-sophos-prone-la-fin-du-mot-de-passe.html www.secnews.physaphae.fr/article.php?IdArticle=8669073 False None None 2.0000000000000000 GB Hacker - Blog de reverseur Un Troie (RAT) à l'accès à distance (RAT) nouvellement analysé est devenu une menace de cybersécurité significative, utilisant la discorde comme sa plate-forme de commande et de contrôle (C2). Déguisée en un script bénin, ce logiciel malveillant transforme l'outil de communication populaire en un centre pour des opérations malveillantes, permettant aux attaquants de contrôler à distance les systèmes infectés par une facilité alarmante. En exploitant le trafic crypté de Discord \\ […]

---

>A newly analyzed Python-based Remote Access Trojan (RAT) has emerged as a significant cybersecurity threat, utilizing Discord as its command-and-control (C2) platform. Disguised as a benign script, this malware transforms the popular communication tool into a hub for malicious operations, allowing attackers to remotely control infected systems with alarming ease. By exploiting Discord\'s encrypted traffic […] ]]> 2025-04-28T16:46:30+00:00 https://gbhackers.com/python-based-discord-rat-enables-remote-control-and-disruption/ www.secnews.physaphae.fr/article.php?IdArticle=8669080 False Malware,Tool,Threat None 3.0000000000000000 CyberScoop - scoopnewsgroup.com special Cyber «C'est pratiquement tabou» pour que les cyber-entreprises parlent d'être ciblées, mais Sentinelabs a déclaré dans un nouveau rapport qu'il avait observé de multiples menaces.

---

>“It\'s practically taboo” for cyber firms to talk about being targeted, but SentinelLabs said in a new report that it has observed multiple threats. ]]> 2025-04-28T16:41:22+00:00 https://cyberscoop.com/cybersecurity-vendors-are-under-attack-sentinelone-says/ www.secnews.physaphae.fr/article.php?IdArticle=8669076 False None None 3.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) Not every security vulnerability is high risk on its own - but in the hands of an advanced attacker, even small weaknesses can escalate into major breaches. These five real vulnerabilities, uncovered by Intruder\'s bug-hunting team, reveal how attackers turn overlooked flaws into serious security incidents. 1. Stealing AWS Credentials with a Redirect Server-Side Request Forgery (SSRF) is a]]> 2025-04-28T16:30:00+00:00 https://thehackernews.com/2025/04/how-breaches-start-breaking-down-5-real.html www.secnews.physaphae.fr/article.php?IdArticle=8668950 False Vulnerability None 2.0000000000000000 Bleeping Computer - Magazine Américain Ongoing outages at British retail giant Marks & Spencer are caused by a ransomware attack believed to be conducted by a hacking collective known as "Scattered Spider" BleepingComputer has learned from multiple sources. [...]]]> 2025-04-28T16:28:54+00:00 https://www.bleepingcomputer.com/news/security/marks-and-spencer-breach-linked-to-scattered-spider-ransomware-attack/ www.secnews.physaphae.fr/article.php?IdArticle=8669157 False Ransomware None 2.0000000000000000 GB Hacker - Blog de reverseur Une attaque de cardage à plusieurs étapes a été découverte de ciblage d'un site Web de commerce électronique Magento exécutant une version 1.9.2.4. Cette version, non étayée par Adobe depuis juin 2020, a laissé le site vulnérable en raison de défauts de sécurité non corrigées. Les logiciels malveillants ont utilisé un fichier .gif trompeur, des données d'accès à la session de navigateur, et un serveur proxy inversé malveillant pour voler la carte de crédit […]

---

>A multi-stage carding attack has been uncovered targeting a Magento eCommerce website running an outdated version 1.9.2.4. This version, unsupported by Adobe since June 2020, left the site vulnerable due to unpatched security flaws. The malware employed a deceptive .gif file, tampered browser sessionStorage data, and a malicious reverse proxy server to steal credit card […] ]]> 2025-04-28T15:44:27+00:00 https://gbhackers.com/advanced-multi-stage-carding-attack-hits-magento-site/ www.secnews.physaphae.fr/article.php?IdArticle=8669056 False Malware None 3.0000000000000000 Bleeping Computer - Magazine Américain Hitachi Vantara, a subsidiary of Japanese multinational conglomerate Hitachi, was forced to take servers offline over the weekend to contain an Akira ransomware attack. [...]]]> 2025-04-28T15:39:09+00:00 https://www.bleepingcomputer.com/news/security/hitachi-vantara-takes-servers-offline-after-akira-ransomware-attack/ www.secnews.physaphae.fr/article.php?IdArticle=8669140 False Ransomware None 2.0000000000000000 GB Hacker - Blog de reverseur Une nouvelle cyber-menace, surnommée Hannibal Stealer, a fait surface comme une variante rebaptisée et fissurée des voleurs nets et tx, initialement promus par le groupe d'ingénierie inversé \\ 'llcppc_reverse. \' développé en C # et en levant le cadre .NET, ce logiciel malveillant de l'information présente un risque significatif en ciblant un large éventail de données sensibles. Hannibal Stealer se concentre […]

---

>A new cyber threat, dubbed Hannibal Stealer, has surfaced as a rebranded and cracked variant of the Sharp and TX stealers, originally promoted by the reverse engineering group \'llcppc_reverse.\' Developed in C# and leveraging the .NET Framework, this information-stealing malware poses a significant risk by targeting a wide array of sensitive data. Hannibal Stealer focuses […] ]]> 2025-04-28T15:35:39+00:00 https://gbhackers.com/hannibal-stealer-cracked-variant-of-sharp-and-tx-malware/ www.secnews.physaphae.fr/article.php?IdArticle=8669057 False Malware,Threat None 2.0000000000000000 Recorded Future - FLux Recorded Future A highly tailored malware campaign was aimed at senior members of the World Uyghur Congress exile group, according to researchers at the Citizen Lab.]]> 2025-04-28T15:31:49+00:00 https://therecord.media/uyghurs-spearphishing-campaign-citizen-lab www.secnews.physaphae.fr/article.php?IdArticle=8669055 False Malware None 2.0000000000000000 GB Hacker - Blog de reverseur Les chercheurs Thai Do et Minh Pham ont exposé de multiples vulnérabilités critiques dans le Rack Ruby Framework, une pierre angulaire d'applications Web basées sur Ruby avec plus d'un milliard de téléchargements globaux. Identifiés comme CVE-2025-25184, CVE-2025-27111 et CVE-2025-27610, ces défauts présentent des risques importants aux applications construites sur des cadres comme Ruby sur Rails et Sinatra. Rack, agissant comme un […] modulaire []

---

>Researchers Thai Do and Minh Pham have exposed multiple critical vulnerabilities in the Rack Ruby framework, a cornerstone of Ruby-based web applications with over a billion global downloads. Identified as CVE-2025-25184, CVE-2025-27111, and CVE-2025-27610, these flaws pose significant risks to applications built on frameworks like Ruby on Rails and Sinatra. Rack, acting as a modular […] ]]> 2025-04-28T15:06:31+00:00 https://gbhackers.com/rack-ruby-framework-vulnerabilities/ www.secnews.physaphae.fr/article.php?IdArticle=8669038 False Vulnerability None 2.0000000000000000 Zataz - Magazine Francais de secu 2025-04-28T14:39:00+00:00 https://www.zataz.com/decouverte-defacements-web-et-cybercriminalite-du-week-end/ www.secnews.physaphae.fr/article.php?IdArticle=8669036 False None None 2.0000000000000000 Global Security Mag - Site de news francais Malwares]]> 2025-04-28T14:37:49+00:00 https://www.globalsecuritymag.fr/alerte-fraude-cyber-en-france-les-cybercriminels-se-font-passer-pour-votre.html www.secnews.physaphae.fr/article.php?IdArticle=8669032 False None None 2.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) Government and telecommunications sectors in Southeast Asia have become the target of a "sophisticated" campaign undertaken by a new advanced persistent threat (APT) group called Earth Kurma since June 2024. The attacks, per Trend Micro, have leveraged custom malware, rootkits, and cloud storage services for data exfiltration. The Philippines, Vietnam, Thailand, and Malaysia are among the]]> 2025-04-28T14:37:00+00:00 https://thehackernews.com/2025/04/earth-kurma-targets-southeast-asia-with.html www.secnews.physaphae.fr/article.php?IdArticle=8668906 False Malware,Tool,Threat,Prediction,Cloud None 2.0000000000000000 Recorded Future - FLux Recorded Future A Ukrainian cloud provider said it had restored services after a power outage disrupted operations for customers including government agencies and major companies over the weekend.]]> 2025-04-28T14:20:27+00:00 https://therecord.media/ukraine-state-and-banking-services-restored www.secnews.physaphae.fr/article.php?IdArticle=8669035 False Cloud None 2.0000000000000000 Dark Reading - Informationweek Branch Attackers are leveraging the benefits of new technology and the availability of commodity tools, credentials, and other resources to develop sophisticated attacks more quickly than ever, putting defenders on their heels.]]> 2025-04-28T14:20:12+00:00 https://www.darkreading.com/remote-workforce/ai-automation-dark-web-fuel-evolving-threat-landscape www.secnews.physaphae.fr/article.php?IdArticle=8669034 False Tool,Threat None 2.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine Members of the World Uyghur Congress living in exile were targeted with a spear phishing campaign deploying surveillance malware, according to the Citizen Lab]]> 2025-04-28T14:15:00+00:00 https://www.infosecurity-magazine.com/news/uyghur-diaspora-surveillance/ www.secnews.physaphae.fr/article.php?IdArticle=8669037 False Malware None 2.0000000000000000 Global Security Mag - Site de news francais Product Reviews]]> 2025-04-28T14:04:53+00:00 https://www.globalsecuritymag.fr/cybermindz-unveils-alert-fatigue-primer.html www.secnews.physaphae.fr/article.php?IdArticle=8669033 False None None 3.0000000000000000 Dark Reading - Informationweek Branch Security teams are under more pressure than ever - and cybersecurity debt is adding fuel to the fire. While it can\'t be eliminated overnight, it can be managed.]]> 2025-04-28T14:00:00+00:00 https://www.darkreading.com/vulnerabilities-threats/forget-stack-focus-control www.secnews.physaphae.fr/article.php?IdArticle=8669008 False None None 2.0000000000000000 Bleeping Computer - Magazine Américain Employee benefits administration firm VeriSource Services is warning that a data breach exposed the personal information of four million people.  [...]]]> 2025-04-28T13:54:47+00:00 https://www.bleepingcomputer.com/news/security/verisource-now-says-february-data-breach-impacts-4-million-people/ www.secnews.physaphae.fr/article.php?IdArticle=8669096 False Data Breach None 2.0000000000000000 ANSSI - Flux Étatique Francais anssiadm lun 28/04/2025 - 13:43 L'édition 2025 du France Cybersecurity challenge (FCSC) qui a débuté le 18 avril s'est achevée ce dimanche 27 avril, après 10 jours de compétition et une participation record. Plus de 2000 hackers réunis pour relever le défi Le FCSC 2025 a réuni plus de 2000 hackers éthiques qui se sont affrontés à travers une centaine d'épreuves spécialement élaborées par les experts de l'ANSSI. Grande nouveauté cette année avec l'introduction pour la première fois d'épreuves de rapidité (" speedrun "), une journée entière pour tester la créativité et l'expertise des participants sur de tout nouveaux challenges. Retrouvez le classement complet de cette édition 2025 sur FCSC 2025. En route vers l'European Cybersecurity challenge (ECSC) Pour rappel, la compétition fait également office de point de départ pour les 14 joueurs de 14 à 25 ans (10 titulaires et 4 remplaçants) qui seront prochainement sélectionnés pour représenter la France lors de l'European Cybersecurity Challenge (ECSC). En plus de leurs résultats respectifs lors du FCSC, ces joueurs seront recrutés via un système d'entretiens par les coachs de l'ANSSI pour leurs expertises, leur talent, leurs qualités humaines et leur sens du collectif. Cette année, la Team France se rendra à Varsovie, du 6 au 10 octobre 2025. ]]> 2025-04-28T13:43:29+00:00 https://cyber.gouv.fr/actualites/le-france-cybersecurity-challenge-sacheve www.secnews.physaphae.fr/article.php?IdArticle=8669027 False None None 2.0000000000000000 The Register - Site journalistique Anglais It took a 1 year+ probe, plenty of client calls for VeriSource to understand just how much of a yikes it has on its hands Houston-based VeriSource Services\' long-running probe into a February 2024 digital break-in shows the data of 4 million people – not just a few hundred thousand as it first claimed - was accessed by an "unknown actor".…]]> 2025-04-28T13:40:05+00:00 https://go.theregister.com/feed/www.theregister.com/2025/04/28/verisource_data_spill_estimate_up/ www.secnews.physaphae.fr/article.php?IdArticle=8669009 False None None 2.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) Cybersecurity researchers are warning about a large-scale phishing campaign targeting WooCommerce users with a fake security alert urging them to download a "critical patch" but deploy a backdoor instead. WordPress security company Patchstack described the activity as sophisticated and a variant of another campaign observed in December 2023 that employed a fake CVE ploy to breach sites running]]> 2025-04-28T13:36:00+00:00 https://thehackernews.com/2025/04/woocommerce-users-targeted-by-fake.html www.secnews.physaphae.fr/article.php?IdArticle=8668877 False None None 2.0000000000000000 Global Security Mag - Site de news francais Revues de produits

---

Bugcrowd Launches the Industry\'s First Crowdsourced Red Team as a Service - A Scalable, Intelligence-Led Offense Against Today\'s Threats and Preparedness for Zero Day Attacks Bugcrowd Redefines Red Teaming offering with crowdsourced scale, delivering real-world attack simulations to test an organization\'s readiness in the event of an attack - Product Reviews]]> 2025-04-28T13:32:31+00:00 https://www.globalsecuritymag.fr/bugcrowd-launches-the-industry-s-first-crowdsourced-red-team-as-a-service.html www.secnews.physaphae.fr/article.php?IdArticle=8669004 False Threat None 2.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine 50% of mobile devices run outdated operating systems, increasing vulnerability to cyber-attacks, according to the latest report from Zimperium]]> 2025-04-28T13:30:00+00:00 https://www.infosecurity-magazine.com/news/50-mobile-devices-run-outdated/ www.secnews.physaphae.fr/article.php?IdArticle=8669010 False Vulnerability,Mobile None 3.0000000000000000 Global Security Mag - Site de news francais Produits]]> 2025-04-28T13:29:27+00:00 https://www.globalsecuritymag.fr/ibm-propose-des-systemes-de-securite-autonomes-dotes-d-une-ia-agentique-de.html www.secnews.physaphae.fr/article.php?IdArticle=8669005 False Threat None 2.0000000000000000 Global Security Mag - Site de news francais Rapports spéciaux

---

Mobile Becomes The Chosen Attack Vector for Enterprises, Zimperium Researchers Find Key Findings: ● Mobile continues to be the preferred vector for attackers ● Smishing has rapidly grown to comprise over two-thirds of mobile phishing attacks ● Vishing and Smishing tactics grew by 28% and 22%, respectively ● Over 25% of mobile devices can\'t upgrade to the latest OS versions ● Over 60% of iOS and up to 34% of Android apps lack basic code protection. ● Nearly 60% of iOS and 43% of Android apps vulnerable to PII data leakage - Special Reports]]> 2025-04-28T13:27:08+00:00 https://www.globalsecuritymag.fr/mobile-becomes-the-chosen-attack-vector-for-enterprises-zimperium-researchers.html www.secnews.physaphae.fr/article.php?IdArticle=8669006 False Mobile None 3.0000000000000000 GB Hacker - Blog de reverseur SAP a révélé une vulnérabilité critique de zéro-jour, identifiée comme CVE-2025-31324, dans son composant de compositeur visuel NetWeaver. Cette vulnérabilité, avec un score de gravité CVSSV3 maximal de 10,0, découle d'un contrôle d'autorisation manquant dans le module de téléchargeur de métadonnées de Visual Composer. Lorsqu'il est exploité, il permet aux attaquants non authentifiés de télécharger des fichiers malveillants arbitraires via des demandes de poste spécialement conçues à […]

---

>SAP disclosed a critical zero-day vulnerability, identified as CVE-2025-31324, in its NetWeaver Visual Composer component. This vulnerability, with a maximum CVSSv3 severity score of 10.0, stems from a missing authorization check within the Metadata Uploader module of Visual Composer. When exploited, it allows unauthenticated attackers to upload arbitrary malicious files via specially crafted POST requests to […] ]]> 2025-04-28T13:23:37+00:00 https://gbhackers.com/sap-netweaver-0-day-flaw/ www.secnews.physaphae.fr/article.php?IdArticle=8669012 False Vulnerability,Threat None 2.0000000000000000 Global Security Mag - Site de news francais Points de Vue]]> 2025-04-28T13:16:35+00:00 https://www.globalsecuritymag.fr/erreurs-courantes-a-eviter-dans-la-gestion-des-secrets.html www.secnews.physaphae.fr/article.php?IdArticle=8669007 False None None 3.0000000000000000 HackRead - Chercher Cyber Toronto, Canada, 28th April 2025, CyberNewsWire]]> 2025-04-28T13:05:46+00:00 https://hackread.com/court-dismisses-criminal-charges-against-vpn-executive-no-log-policy/ www.secnews.physaphae.fr/article.php?IdArticle=8669102 False None None 2.0000000000000000 HackRead - Chercher Cyber Toronto, Canada, 28th April 2025, CyberNewsWire]]> 2025-04-28T13:05:46+00:00 https://hackread.com/court-dismisses-criminal-charges-against-vpn-executive-affirms-no-log-policy/ www.secnews.physaphae.fr/article.php?IdArticle=8668979 False None None 3.0000000000000000 BBC - BBC News - Technology The retail giant\'s online business remains suspended with no indication yet when it will be restored.]]> 2025-04-28T13:04:41+00:00 https://www.bbc.com/news/articles/cyvq0q14y03o www.secnews.physaphae.fr/article.php?IdArticle=8668972 False None None 2.0000000000000000 Checkpoint - Fabricant Materiel Securite Nous sommes fiers d'annoncer que Check Point CloudGuard a été nommé lauréat du Silver Stevie Award dans la catégorie de la meilleure solution de sécurité cloud aux American Business Awards 2025! Cette reconnaissance prestigieuse reflète l'impact de CloudGuard \\ pour permettre une protection sécurisée, évolutive et automatisée dans des environnements de cloud complexes. Dans une année où l'IA et l'hyperconnectivité redéfinissent le paysage des menaces, CloudGuard s'est démarqué de son puissant mélange de prévention des menaces, de gestion de la posture et de visibilité en temps réel. Le projet de comparaison des WAF a évalué les WAFS de premier plan et a constaté que le point de contrôle CloudGuard WAF a le taux de sécurité le plus élevé qui a 99,368% américain, et le plus bas faux […]

---

>We\'re proud to announce that Check Point CloudGuard has been named a Silver Stevie Award winner in the Best Cloud Security Solution category at the 2025 American Business Awards! This prestigious recognition reflects CloudGuard\'s impact in enabling secure, scalable, and automated protection across complex cloud environments. In a year when AI and hyperconnectivity are redefining the threat landscape, CloudGuard stood out for its powerful blend of threat prevention, posture management, and real-time visibility. The WAF Comparison Project evaluated leading WAFs and found that Check Point CloudGuard WAF has the highest security rate of that has us 99.368%, and lowest false […] ]]> 2025-04-28T13:00:58+00:00 https://blog.checkpoint.com/company-and-culture/check-point-cloudguard-waf-wins-american-business-award-for-cyber-security/ www.secnews.physaphae.fr/article.php?IdArticle=8669003 False Threat,Cloud None 2.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine According to the 2025 Global Threat Landscape Report from FortiGuard, threat actors are executing 36,000 scans per second]]> 2025-04-28T13:00:00+00:00 https://www.infosecurity-magazine.com/news/increase-automated-scanning/ www.secnews.physaphae.fr/article.php?IdArticle=8668986 False Threat None 3.0000000000000000 Fortinet - Fabricant Materiel Securite Read into how the adversary advantage is accelerating, which means organizations must change how they measure and manage risk.]]> 2025-04-28T13:00:00+00:00 https://www.fortinet.com/blog/threat-research/key-takeaways-from-the-2025-global-threat-landscape-report www.secnews.physaphae.fr/article.php?IdArticle=8669030 False Threat None 3.0000000000000000 Zataz - Magazine Francais de secu 2025-04-28T12:55:07+00:00 https://www.zataz.com/comment-securiser-les-serveurs-windows-independants/ www.secnews.physaphae.fr/article.php?IdArticle=8668982 False None None 2.0000000000000000 Nextron - Blog Secu 2025-04-28T12:49:59+00:00 https://www.nextron-systems.com/2025/04/28/active-exploitation-of-sap-netweaver-systems-our-recommendation-for-local-scans/ www.secnews.physaphae.fr/article.php?IdArticle=8668970 False None None 2.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zero-day attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities - CVE-2024-58136 (CVSS score: 9.0) - An improper protection of alternate path flaw in the Yii PHP]]> 2025-04-28T12:43:00+00:00 https://thehackernews.com/2025/04/hackers-exploit-critical-craft-cms.html www.secnews.physaphae.fr/article.php?IdArticle=8668855 False Vulnerability,Threat None 3.0000000000000000 IndustrialCyber - cyber risk firms for industrial Rockwell Automation a annoncé lundi son service de surveillance et de réponse à la sécurité, qui est spécialement conçu pour fournir en temps réel continu ...

---

>Rockwell Automation announced on Monday its Security Monitoring and Response service, which is purpose-built to deliver continuous, real-time... ]]> 2025-04-28T12:33:09+00:00 https://industrialcyber.co/news/rsa-2025-rockwell-launches-security-monitoring-and-response-service-to-boost-ot-cybersecurity/ www.secnews.physaphae.fr/article.php?IdArticle=8668983 False Industrial None 2.0000000000000000 Recorded Future - FLux Recorded Future About 20 percent of the logistics workers for U.K. retail giant M&S were told they could stay home as the company responded to a cyberattack.]]> 2025-04-28T12:31:14+00:00 https://therecord.media/marks-and-spencer-cyberattack-warehouse-disruptions www.secnews.physaphae.fr/article.php?IdArticle=8668974 False None None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial The Center for Strategic & International Studies (CSIS) has released the 2025 Space Threat Assessment, noting that the... ]]> 2025-04-28T12:29:04+00:00 https://industrialcyber.co/reports/csis-2025-space-threat-assessment-cyberattacks-on-space-systems-persist-tracking-harder-amid-infrastructure-threats/ www.secnews.physaphae.fr/article.php?IdArticle=8668984 False Threat,Studies None 2.0000000000000000 The Register - Site journalistique Anglais Image board hints that rumors of a poorly maintained back end may be true Clearweb cesspit 4chan is back up and running, but says the damage caused by a cyberattack earlier this month was "catastrophic."…]]> 2025-04-28T12:27:12+00:00 https://go.theregister.com/feed/www.theregister.com/2025/04/28/4chan_back_onlin/ www.secnews.physaphae.fr/article.php?IdArticle=8668981 False None None 2.0000000000000000 Palo Alto Network - Site Constructeur Présentation du portefeuille "sécurisé AI par conception" pour les entreprises pour construire et adopter l'IA en toute sécurité, améliorer les interactions des clients et la productivité des employés.

---

>Introducing "Secure AI by Design" portfolio for enterprises to build and adopt AI securely, enhancing customer interactions and employee productivity. ]]> 2025-04-28T12:26:22+00:00 https://www.paloaltonetworks.com/blog/2025/04/deploy-with-prisma-airs/ www.secnews.physaphae.fr/article.php?IdArticle=8668977 False None None 2.0000000000000000 IndustrialCyber - cyber risk firms for industrial NetRise, vendor of software supply chain security, announced on Monday the launch of a new product, NetRise ZeroLens. ... ]]> 2025-04-28T12:23:44+00:00 https://industrialcyber.co/news/netrise-launches-zerolens-to-deliver-proactive-vulnerability-detection-through-binary-composition-analysis/ www.secnews.physaphae.fr/article.php?IdArticle=8668985 False Vulnerability None 2.0000000000000000 Recorded Future - FLux Recorded Future An Iranian state official said the country repelled "widespread and complex cyber attacks" on unspecified infrastructure over the weekend.]]> 2025-04-28T12:23:32+00:00 https://therecord.media/iran-cyberattack-national-infrastructure www.secnews.physaphae.fr/article.php?IdArticle=8668975 False None None 3.0000000000000000 SecurityWeek - Security News Verisource Services indique que les informations personnelles de 4 millions de personnes ont été compromises dans une cyberattaque de février 2024.

---

>VeriSource Services says the personal information of 4 million people was compromised in a February 2024 cyberattack. ]]> 2025-04-28T12:23:09+00:00 https://www.securityweek.com/4-million-affected-by-data-breach-at-verisource-services/ www.secnews.physaphae.fr/article.php?IdArticle=8668976 False Data Breach None 2.0000000000000000 Dark Reading - Informationweek Branch The Department of Justice announced compliance rules for the Data Security Program that will require organizations to reexamine how they do business and with whom.]]> 2025-04-28T12:20:53+00:00 https://www.darkreading.com/cyber-risk/doj-data-security-program-data-sharing-challenge www.secnews.physaphae.fr/article.php?IdArticle=8668973 False None None 2.0000000000000000 HackRead - Chercher Cyber Darcula phishing platform adds AI to create multilingual scam pages easily. Netcraft warns of rising risks from Darcula-Suite…]]> 2025-04-28T12:18:30+00:00 https://hackread.com/darcula-phishing-kit-uses-ai-to-evade-detection/ www.secnews.physaphae.fr/article.php?IdArticle=8668980 False None None 2.0000000000000000 Palo Alto Network - Site Constructeur Autoriser les utilisateurs avec Prisma Access Browser 2.0: Sécurité des données améliorée, protection alimentée par l'IA et IA de précision pour arrêter les menaces avancées.

---

>Empower users with Prisma Access Browser 2.0: enhanced data security, AI-powered protection and Precision AI to stop advanced threats. ]]> 2025-04-28T12:17:59+00:00 https://www.paloaltonetworks.com/blog/2025/04/embracing-future-work-innovations-prisma-sase/ www.secnews.physaphae.fr/article.php?IdArticle=8668978 False None None 2.0000000000000000 GB Hacker - Blog de reverseur Microsoft prépare tranquillement la prochaine mise à jour de son système d'exploitation phare, Windows 11h2, avec de nouvelles preuves pointant vers une version de septembre-octobre 2025. Contrairement aux très attendues Windows 11 24h2 - La mise à jour majeure arrivant en 2024 - la version 25H2 se forme comme une affaire plus modeste, en se concentrant sur des améliorations incrémentielles et des changements sous le capuchon plutôt que sur la tidure […]

---

>Microsoft is quietly preparing the next update to its flagship operating system, Windows 11 25H2, with new evidence pointing toward a September–October 2025 release. Unlike the much-anticipated Windows 11 24H2-the major update arriving in 2024-the 25H2 release is shaping up to be a more modest affair, focusing on incremental improvements and under-the-hood changes rather than headline-grabbing […] ]]> 2025-04-28T12:03:35+00:00 https://gbhackers.com/windows-11-25h2-expected-to-launch/ www.secnews.physaphae.fr/article.php?IdArticle=8668951 False None None 3.0000000000000000 Cisco - Security Firm Blog Foundation AI\'s first release - Llama-3.1-FoundationAI-SecurityLLM-base-8B - is designed to improve response time, expand capacity, and proactively reduce risk.]]> 2025-04-28T11:55:00+00:00 https://blogs.cisco.com/security/foundation-sec-cisco-foundation-ai-first-open-source-security-model/ www.secnews.physaphae.fr/article.php?IdArticle=8668943 False None None 2.0000000000000000 Cisco - Security Firm Blog Foundation AI is a Cisco organization dedicated to bridging the gap between the promise of AI and its practical application in cybersecurity.]]> 2025-04-28T11:55:00+00:00 https://blogs.cisco.com/security/foundation-ai-building-the-intelligent-future-of-cybersecurity/ www.secnews.physaphae.fr/article.php?IdArticle=8668944 False None None 2.0000000000000000 Cisco - Security Firm Blog Clear verdict. Decisive action. AI speed. Cisco XDR turns noise into clarity and alerts into action-enabling confident, timely response at scale.]]> 2025-04-28T11:55:00+00:00 https://blogs.cisco.com/security/cisco-xdr-just-changed-the-game-again/ www.secnews.physaphae.fr/article.php?IdArticle=8668942 False None None 2.0000000000000000 Palo Alto Network - Site Constructeur XSIAM s'étend de la réponse réactive à la défense proactive, transformant la gestion de l'exposition et la sécurité des e-mails avec des données unifiées, l'IA et l'automatisation.

---

>XSIAM is expanding from reactive response to proactive defense, transforming exposure management and email security with unified data, AI and automation. ]]> 2025-04-28T11:50:48+00:00 https://www.paloaltonetworks.com/blog/2025/04/introducing-cortex-xsiam-3-dot-0/ www.secnews.physaphae.fr/article.php?IdArticle=8668946 False None None 2.0000000000000000 Netskope - etskope est une société de logiciels américaine fournissant une plate-forme de sécurité informatique Le rythme de l'innovation dans l'IA générative n'a rien été moins loin de l'explosif. Ce qui a commencé avec les utilisateurs expérimentant des applications publiques comme Chatgpt a rapidement évolué vers une adoption généralisée d'entreprise. Les fonctionnalités de l'IA sont désormais intégrées de manière transparente dans les outils commerciaux de tous les jours, tels que les plateformes de service client comme Hidlyly, des logiciels RH comme le réseau et même les médias sociaux […]

---

>The pace of innovation in generative AI has been nothing short of explosive. What began with users experimenting with public apps like ChatGPT has rapidly evolved into widespread enterprise adoption. AI features are now seamlessly embedded into everyday business tools, such as customer service platforms like Gladly, HR software like Lattice, and even social media […] ]]> 2025-04-28T11:40:00+00:00 https://www.netskope.com/blog/mastering-ai-adoption-with-end-to-end-security-everywhere www.secnews.physaphae.fr/article.php?IdArticle=8668945 False Tool ChatGPT 2.0000000000000000 GB Hacker - Blog de reverseur La Chine a accusé des agences de renseignement américaines d'avoir effectué une cyberattaque sophistiquée contre l'un de ses principaux fournisseurs de cryptographie commerciaux, entraînant le vol de grandes quantités de données sensibles. Les allégations ont été annoncées dans un rapport publié lundi par l'équipe technique / coordination des interventions d'urgence du réseau informatique de Chine \\ (CNCERT), intensifiant les tensions numériques entre les […]

---

>China has accused U.S. intelligence agencies of carrying out a sophisticated cyberattack against one of its foremost commercial cryptography providers, resulting in the theft of vast amounts of sensitive data. The allegations were announced in a report published Monday by China\'s National Computer Network Emergency Response Technical Team/Coordination Center (CNCERT), intensifying digital tensions between the […] ]]> 2025-04-28T11:35:05+00:00 https://gbhackers.com/china-claims-u-s-cyberattack-targeted-encryption-company/ www.secnews.physaphae.fr/article.php?IdArticle=8668952 False Technical,Commercial None 3.0000000000000000 The Register - Site journalistique Anglais Comment  It\'s easy to miss £125 million ($166 million). It could happen to anyone. Take Paul Patterson, for example. In January 2024, the director of Fujitsu Services Ltd emailed the UK government\'s commercial arm to confirm the Japanese tech services provider would pause bidding for public sector work after the Post Office Horizon scandal became public knowledge.… ]]> 2025-04-28T11:27:07+00:00 https://go.theregister.com/feed/www.theregister.com/2025/04/28/fujitsu_promised_not_to_bid_uk_public_sector/ www.secnews.physaphae.fr/article.php?IdArticle=8668948 False Commercial None 3.0000000000000000 HackRead - Chercher Cyber JokerOTP dismantled after 28,000 phishing attacks across 13 countries; UK and Dutch police arrest two suspects linked to £7.5M cyber fraud.]]> 2025-04-28T11:18:04+00:00 https://hackread.com/jokerotp-dismantled-28000-phishing-attacks-2-arrested/ www.secnews.physaphae.fr/article.php?IdArticle=8668947 False Legislation None 2.0000000000000000 Zataz - Magazine Francais de secu 2025-04-28T11:12:58+00:00 https://www.zataz.com/escroqueries-fovi-les-professions-du-droit-en-ligne-de-mire/ www.secnews.physaphae.fr/article.php?IdArticle=8668949 False None None 2.0000000000000000 ProofPoint - Cyber Firms 2025-04-28T11:03:18+00:00 https://www.proofpoint.com/us/blog/threat-insight/security-brief-french-bec-threat-actor-targets-property-payments www.secnews.physaphae.fr/article.php?IdArticle=8669268 False Malware,Threat None 3.0000000000000000 Ars Technica - Risk Assessment Security Hacktivism New ChoiceJacking attack allows malicious chargers to steal data from phones.]]> 2025-04-28T11:00:59+00:00 https://arstechnica.com/security/2025/04/ios-and-android-juice-jacking-defenses-have-been-trivial-to-bypass-for-years/ www.secnews.physaphae.fr/article.php?IdArticle=8668968 False Mobile None 2.0000000000000000