@ReneRobichaud

FR-EN #CyberSecurity #Security #InfoSec #CeptBiro #ISO #Risk #VulnerabilityManagement #Audit Working @CeptBiro https://nitter.cf/t.co/xpKUxPZSjE - Tweets are my own

 Canada
ceptbiro.com
Joined December 2009
  • Tweets88.5K
  • Following1.5K
  • Followers3.8K
51Media
iTorrents .org compromis pour distribuer un malware Windows à la place des films it-connect.fr/moviereaper-ma…

iTorrents.org compromis pour distribuer un malware Windows à la place des films

Des pirates ont compromis le dépôt itorrents.org pour diffuser MovieReaper, un malware déguisé en films comme The Odyssey. Kaspersky présente cette menace.

it-connect.fr
42
AI malware can rewrite itself to evade detection cyberguy.com/security/ai-mal…

AI malware can rewrite itself to evade detection - CyberGuy

Google found AI malware that can rewrite itself to evade detection as newer attacks show how quickly cyberthreats are learning and adapting.

cyberguy.com
17
Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels securityweek.com/cyberattack…

Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.

securityweek.com
30
Brevo supply-chain attack injected ClickFix scripts on customer sites bleepingcomputer.com/news/se…

Brevo supply-chain attack injected ClickFix scripts on customer sites

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware.

bleepingcomputer.com
51
Specops Verified ID : votre identité réelle devient un facteur d’authentification it-connect.fr/specops-verifi…

Specops Verified ID : votre identité réelle devient un facteur d'authentification

Découvrez Specops Verified ID, qui vérifie l'identité des utilisateurs par scan d'une pièce d'identité et liveness détection contre le vishing et les deepfakes.

it-connect.fr
15
Chinese espionage groups swarm to exploit triple-link chain of zero-days cyberscoop.com/china-espiona…

Chinese espionage groups swarm to exploit triple-link chain of zero-days

Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen.

cyberscoop.com
15
OpenAI reports 6 more AI “misalignment” incidents after Hugging Face breach globalnews.ca/news/12062854/…

OpenAI reports 6 more AI “misalignment” incidents after Hugging Face breach - National | Globalne...

OpenAI said on Wednesday it saw six reports of unexpected, concerning or unauthorized AI model behavior, and it would begin regularly publishing reports of these incidents.

globalnews.ca
1
101
“Zero-Code Cloaking”: Attackers Weaponize Google Search and Hacked .ac.th Domain to Bypass Ad Moderation gbhackers.com/zero-code-cloa…

“Zero-Code Cloaking”: Attackers Weaponize Google Search and Hacked .ac.th Domain to Bypass Ad...

Security researchers at ADEX have documented a cloaking technique that requires no cloaking code at all.

gbhackers.com
15
Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows securityweek.com/ransomware-…

Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows

Research shows attacks on manufacturers rose 40% in early 2026, as ransomware groups increasingly exploit the supply-chain disruption caused by operational shutdowns.

securityweek.com
2
23
Ces VPN censés protéger votre vie privée embarquent des traqueurs et peuvent vous géolocaliser clubic.com/actualite-630166-…

Ces VPN censés protéger votre vie privée embarquent des traqueurs et peuvent vous géolocaliser

Une enquête menée par Proton dresse un portrait peu rassurant des VPN mobiles. Traqueurs publicitaires, accès à la localisation et éditeurs difficiles à identifier concernent plusieurs applications...

clubic.com
19
AI Threat Landscape Digest: July–August 2026 research.checkpoint.com/2026…

AI Threat Landscape Digest: July–August 2026 - Check Point Research

The defining development of the period came not from attackers but from the AI labs themselves, whose models broke out of controlled evaluations and reached real systems. In the wild, the criminal...

research.checkpoint.com
7
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone thehackernews.com/2026/09/cr…

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Unbound 1.26.1 fixes a critical DNSSEC heap overflow that malicious zones can trigger, with possible remote code execution.

thehackernews.com
19
GPT4Free Privacy Risks Expose AI Prompts to Third-Party Servers and Hidden Logs gbhackers.com/gpt4free-priva…

GPT4Free Privacy Risks Expose AI Prompts to Third-Party Servers and Hidden Logs

Users of the GPT4Free hosted platform might believe they are directly interacting with the selected artificial intelligence model in its web interface.

gbhackers.com
7
North Korean IT Workers Use AI and Remote Desktop Tools to Fake Technical Interviews cybersecuritynews.com/north-…

North Korean IT Workers Use AI and Remote Desktop Tools to Fake Technical Interviews

North Korean operators use AI, remote tools, and hired stand-ins to fake job candidates and gain access to company systems.

cybersecuritynews.com
15
US takes down NightmareStresser DDoS-for-hire platform bleepingcomputer.com/news/se…

US takes down NightmareStresser DDoS-for-hire platform

The U.S. Federal Bureau of Investigation (FBI) seized the domains used by NightmareStresser, one of the world's longest-running distributed denial-of-service (DDoS) platforms.

bleepingcomputer.com
24
BIND 9.20.29 Fixes 14 Security Flaws Enabling DNSSEC Bypass and Denial-of-Service Attacks gbhackers.com/bind-9-20-29-f…

BIND 9.20.29 Fixes 14 Security Flaws Enabling DNSSEC Bypass and Denial-of-Service Attacks

The Internet Systems Consortium (ISC) has released BIND 9.20.29, which addresses 14 security vulnerabilities.

gbhackers.com
19
Critical Docker Sandbox Vulnerabilities Enable Malicious Guests to Escape Isolated microVM Workspaces cybersecuritynews.com/critic…

Critical Docker Sandbox Vulnerabilities Enable Malicious Guests to Escape Isolated microVM Worksp...

Docker patched two serious Sandbox vulnerabilities that could let malicious guest workloads escape their isolated workspace and access sensitive host resources.

cybersecuritynews.com
7
Hackers Exploit Critical Cisco ISE Flaw to Bypass Authentication and Gain Root Access gbhackers.com/hackers-exploi…

Hackers Exploit Critical Cisco ISE Flaw to Bypass Authentication and Gain Root Access

Cisco has issued an urgent security advisory regarding a critical authentication-bypass vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC).

gbhackers.com
10
Une IA a piraté une entreprise toute seule, cette fois en Espagne, et c'est carrément la CNIL locale qui le révèle ! clubic.com/actualite-630112-…

Une IA a piraté une entreprise toute seule, cette fois en Espagne, et c'est carrément la CNIL...

Une entreprise a été piratée de bout en bout par une intelligence artificielle livrée à elle-même, comme le révèle la CNIL espagnole, qui évoque un premier cas du genre officiellement recensé en...

clubic.com
20
Microsoft shares workaround for Windows domain login issues bleepingcomputer.com/news/mi…

Microsoft shares workaround for Windows domain login issues

Microsoft shared a temporary fix on Wednesday for a known issue that prevents Windows 11 users from logging in with valid domain credentials after installing the September 2026 security updates.

bleepingcomputer.com
11
Load more