Tendance des mentions — 20 derniers numéros

Actus en direct (80)

Cybersecurity Unicorn Aikido Acquires Israel's Root for $70–100M to Defend Open Source Against AI-Powered Attacks — Patches Vulnerabilities Without Forcing Upgrades

siliconangle.com · 2026-06-30 · Score : 22

Straiker Raises $64M Series A to Secure Autonomous AI Agents Against Prompt Injection and Tool Misuse

axios.com · 2026-06-29 · Score : 23

Google VP of Security Warns EU DMA Plans to Open Android and Search Data Could Enable Widespread Fraud Within Weeks

wired.com · 2026-06-29 · Score : 19

Engadget Investigation: 100,000+ Flock AI License Plate Readers Exposed Live Footage Without Passwords — Dozens of Officers Arrested for Stalking via System

engadget.com · 2026-06-28 · Score : 21

OpenAI Codex Has No Way to Exclude Sensitive Files — HN-Popular GitHub Issue Proposes .codexignore Standard to Block Credentials and Keys From AI Agent Access

github.com · 2026-06-28 · Score : 20

ONNXStego: PoC Tool Hides Encrypted Messages in ONNX Model Weights via Least-Significant Mantissa Bits — Model Validity Preserved

github.com · 2026-06-27 · Score : 17

WSJ: Z.ai's GLM-5.2 Matches Top US Models at Finding Security Bugs — Researchers Demand US Close Open-Model Export Control Gap

wsj.com · 2026-06-28 · Score : 23

Cybersecurity Firms Targeted by Fraudulent OpenAI Organization Invites Designed to Harvest Corporate Data

bleepingcomputer.com · 2026-06-26 · Score : 19

Clean GitHub Repo Tricks AI Coding Agents Into Executing Invisible Malware

bleepingcomputer.com · 2026-06-27 · Score : 23

ALERTE OpenAI GPT-5.6 Safety Card: Sol Shows 3× Higher Self-Reasoning Control Rate, All Three Models Reach 'High' Bio and Cyber Capability for First Time

deploymentsafety.openai.com · 2026-06-26 · Score : 29

Amazon Q Developer CVE-2026-12957 (CVSS 8.5): Malicious Git Repo's MCP Config File Executes Code and Steals Live AWS Credentials — Full Disclosure June 26

thehackernews.com · 2026-06-26 · Score : 22

Gaslight: DPRK-Attributed macOS Backdoor Uses Prompt Injection to Fool LLM-Assisted Malware Analysis — First Documented Use of the Technique Inside Malware Itself

thehackernews.com · 2026-06-25 · Score : 27

ALERTE Anthropic Accuses Alibaba of Running World's Largest AI Distillation Attack — 29 Million Claude Exchanges via 25,000 Fraudulent Accounts, Letter Sent to US Senators and White House

thenextweb.com · 2026-06-24 · Score : 38

Nature: Membership Inference Attacks Achieve Near-Perfect Success at Identifying Patients in Medical AI Training Sets — Underrepresented Groups at Highest Risk

theregister.com · 2026-06-24 · Score : 19

Cordyceps: CI/CD Flaws in 300+ High-Profile GitHub Repos Let Any Unauthenticated User Steal Credentials and Push Malicious Code — Microsoft Azure Sentinel, Google AI Agent Dev Kit, Apache, Cloudflare, Python PSF Confirmed Affected

thehackernews.com · 2026-06-24 · Score : 25

'By Design' Flaw in MCP Could Enable Widespread AI Supply Chain Attacks — Unsanitized Commands Execute Silently in Agent Pipelines

securityweek.com · 2026-06-24 · Score : 23

Tata Electronics Confirms Cyberattack as World Leaks Gang Publishes 630 GB of Files Allegedly Including Apple Production Docs and Tesla Schematics

cnbc.com · 2026-06-23 · Score : 23

Malicious npm Packages Disguised as PostCSS Utilities Deliver Multi-Stage Windows RAT With Chrome Credential Theft and Registry Persistence

thehackernews.com · 2026-06-23 · Score : 18

Varonis Explores Potential Sale After PE Interest From Blackstone, Thoma Bravo, and Vista Equity — VRNS Surges 14%

bloomberg.com · 2026-06-23 · Score : 17

Two Scattered Spider Members Plead Guilty on Day 1 of UK Trial — TfL Hack, US Healthcare Breaches, $115M in Ransom Collectively Attributed

krebsonsecurity.com · 2026-06-23 · Score : 17

Trump Signs Executive Order Accelerating Federal Post-Quantum Cryptography Migration to 2030 Deadline — Four Years Earlier Than Prior Target

thehackernews.com · 2026-06-22 · Score : 18

Fake AI Agent Skill Bypasses All Marketplace Scanners and Reaches 26,000 Agents — Full Agent Access Could Read Files and Hit Internal Systems

thehackernews.com · 2026-06-23 · Score : 25

LastPass Notifies Customers Personal Data and Support Case Records Were Stolen in Klue Breach

techcrunch.com · 2026-06-23 · Score : 26

ShapedPlugin Premium WordPress Plugins Backdoored via Build Pipeline in Supply Chain Attack — 400,000+ Sites Exposed, CVSS 10.0, Credentials and WooCommerce Order Data Exfiltrated

thehackernews.com · 2026-06-22 · Score : 24

DifyTap: Four CVEs in Dify AI Workflow Platform Allow Cross-Tenant Exfiltration of Private AI Conversations — CVSS 9.4 Path Traversal Remains Unpatched at Disclosure

thehackernews.com · 2026-06-22 · Score : 22

LiteLLM AI Gateway CVE-2026-42271 Added to CISA KEV — Unauthenticated RCE Chain Via MCP Endpoints Exposes All Configured OpenAI and Anthropic API Keys

thehackernews.com · 2026-06-22 · Score : 23

Leaked Files Reveal Russia's 'Project 2026' — State-Sponsored Operation to Manipulate AI Chatbot and Search Engine Training Data

bloomberg.com · 2026-06-23 · Score : 23

23 ClawHub Plugins Squatted Official OpenClaw Namespaces — Code-Executing AI Agent Tools Impersonated Trusted @openclaw/ Scope

helpnetsecurity.com · 2026-06-22 · Score : 21

64% of Analyzed iOS Apps Expose LLM API Credentials — 282 of 444 Apps Vulnerable, Only 28% Patched After 90-Day Disclosure

helpnetsecurity.com · 2026-06-22 · Score : 25

OpenAI Launches GPT-5.5-Cyber and Patch the Planet Initiative to Secure Open-Source Software With Trail of Bits and 30+ Projects

wired.com · 2026-06-22 · Score : 23

Squidbleed (CVE-2026-47729): Claude Mythos AI Finds 29-Year-Old Squid Proxy Memory Leak Exposing User HTTP Credentials

thehackernews.com · 2026-06-22 · Score : 22

Bloomberg Opinion: Japan Is Right to Fear AI 'Black Ships' — Country Absorbed 22% of All Global Cyberattacks in 2024, More Than Any Other Nation

bloomberg.com · 2026-06-21 · Score : 16

AryStinger Botnet Hijacks 4,000 D-Link Routers as Remotely Controlled Proxy Network for Malicious Traffic

bleepingcomputer.com · 2026-06-21 · Score : 17

New Prinz Eugen Ransomware Prioritizes Recent Files for Encryption, Uses Go and ChaCha20-Poly1305 — Standard Bank Among Five Known Victims

bleepingcomputer.com · 2026-06-20 · Score : 21

Gravity SMTP WordPress Plugin CVE-2026-4020 Exploited in 17 Million Attempts to Steal API Keys Across 100,000 Sites

thehackernews.com · 2026-06-20 · Score : 15

Microsoft Attributes Mastra AI Framework npm Supply Chain Attack to North Korean Sapphire Sleet Hackers

bleepingcomputer.com · 2026-06-20 · Score : 24

7,000 Langflow Servers Under Active Exploit — LangGraph SQL Injection and LangChain Path Traversal Expose Shared Attack Surface Across Three Major AI Agent Frameworks

venturebeat.com · 2026-06-19 · Score : 23

Shadow AI's Real Risk Is Access Control, Not Data Leakage: 65% of Enterprise AI Agent Credentials Are Dormant But Active

thehackernews.com · 2026-06-19 · Score : 15

Apple Patches High-Severity Beats Studio Buds Bluetooth Flaw That Let Nearby Attackers Eavesdrop via Microphone

thehackernews.com · 2026-06-19 · Score : 15

AutoJack Attack Lets One Malicious Webpage Hijack AutoGen Studio AI Agent for Host-Level Remote Code Execution

thehackernews.com · 2026-06-19 · Score : 23

Splunk Enterprise CVE-2026-20253 Exploited Within Eight Days of Disclosure — CISA Adds to KEV Catalog With Three-Day Federal Deadline

securityweek.com · 2026-06-19 · Score : 24

Gentlemen Ransomware Gang's Proprietary EDR-Killing Framework GentleKiller Targets 400+ Processes Across 48 Security Vendors, ESET Finds

bleepingcomputer.com · 2026-06-18 · Score : 18

Operation Endgame Disrupts SocGholish Botnet Linked to Evil Corp — 106 Servers Seized, 15,000 Sites Cleaned in International Law Enforcement Sweep

helpnetsecurity.com · 2026-06-18 · Score : 21

Cisco Patches Critical CVSS 9.1 RCE Flaw in Identity Services Engine — Root Escalation With Admin Credentials

securityweek.com · 2026-06-18 · Score : 18

FortiBleed Leak Exposes VPN Credentials for 73,932 Fortinet Firewalls Across 194 Countries

bleepingcomputer.com · 2026-06-18 · Score : 22

Dream Security Raises $260M at $3 Billion Valuation to Build Sovereign AI and National Cyber Defense for Governments

securityweek.com · 2026-06-18 · Score : 21

Microsoft Details Active Windows Clipboard-Hijacking Campaign Using USB LNK Worms and Bundled Portable Tor for Stealthy C2

thehackernews.com · 2026-06-18 · Score : 17

INC Ransomware-as-a-Service Claims 830-Plus Victims Since 2023, Rewrites Encryptors in Rust for Cross-Platform Evasion

thehackernews.com · 2026-06-18 · Score : 18

F5 Patches Two Critical NGINX Flaws (CVSS 9.2) Enabling Unauthenticated Remote Code Execution via HTTP/3 and HTTP/2

thehackernews.com · 2026-06-18 · Score : 23

DragonForce Deploys Backdoor.Turn via Microsoft Teams TURN Relay — First Documented Abuse of TURN Infrastructure for Malicious C2

thehackernews.com · 2026-06-18 · Score : 25

Accenture Acquires Dragos Majority Stake Plus runZero and NetRise for $4.18B to Build Industrial Cybersecurity Platform

securityweek · 2026-06-18 · Score : 25

Atlassian Publishes 100 Security Bulletins Addressing Critical CVEs in Axios, Apache Tomcat, and Netty Across All Data Center Products

securityweek.com · 2026-06-18 · Score : 16

Klue OAuth Breach Lets 'Icarus' Threat Actor Raid Customer Salesforce CRM Data at 1,000 Queries per 15 Minutes

bleepingcomputer.com · 2026-06-18 · Score : 23

NastyC2 npm Supply-Chain: Three Malicious Developer Packages Deliver Rust-Based Post-Exploitation Framework With 80+ Commands Comparable to Cobalt Strike

thehackernews.com · 2026-06-18 · Score : 22

NeuralTrust Closes $20M Seed — Europe's Largest-Ever Cybersecurity Seed Round — to Secure and Govern Enterprise AI Agents

tech.eu · 2026-06-17 · Score : 18

Tenet Security Emerges From Stealth With $6M Seed to Stop Rogue AI Agents Before They Execute

securityweek.com · 2026-06-17 · Score : 16

Crypto Clipper Campaign Weaponizes AI-Generated Narrators and Coordinated Fake Reviews to Build Legitimacy for Wallet-Stealing Bots

thehackernews.com · 2026-06-17 · Score : 15

Microsoft Confirms RoguePlanet Defender Zero-Day CVE-2026-50656 (CVSS 7.8): SYSTEM Shell on Fully Patched Windows, No Patch Available

thehackernews.com · 2026-06-17 · Score : 20

Magnitude Emerges From Stealth With $10M Seed Led by Ballistic Ventures to Apply Autonomous AI Agents to Third-Party Risk Management in AI-Heavy Supply Chains

securityweek.com · 2026-06-16 · Score : 16

CISA Adds LiteSpeed cPanel Plugin Privilege-Escalation Flaw CVE-2026-54420 to Known Exploited Vulnerabilities Catalog, 48-Hour Federal Patch Deadline Issued

thehackernews.com · 2026-06-16 · Score : 17

CISA Adds Maximum-Severity Joomla JCE Flaw (CVSS 10.0) to Known Exploited Vulnerabilities Catalog — Unauthenticated PHP Code Execution Active in the Wild

thehackernews.com · 2026-06-17 · Score : 26

15 Malicious JetBrains Marketplace Plugins Steal AI Provider API Keys From 70,000+ Developers — DeepSeek and OpenAI Integrations Used as Cover

thehackernews.com · 2026-06-17 · Score : 27

ALERTE 144 Mastra AI Framework npm Packages Backdoored via Hijacked Contributor Account — 1.1M Weekly Downloads Exposed to Info-Stealing Dropper

thehackernews.com · 2026-06-17 · Score : 33

FulcrumSec Claims 1.3TB Theft From Novo Nordisk Including Private AI Models — $25M Ransom Refused, Private Data Sales Threatened

securityweek.com · 2026-06-16 · Score : 25

Google Vertex AI SDK 'Pickle in the Middle': Unit 42 Discloses Bucket-Squatting Flaw That Let Attackers Hijack ML Model Uploads for Cross-Tenant RCE — Fully Patched in SDK v1.148.0

thehackernews.com · 2026-06-16 · Score : 24

China-Linked FishMonger Group Expands SprySOCKS Backdoor to Windows With Kernel-Level Stealth Drivers That Hide Processes, Network Connections, and Registry Keys

thehackernews.com · 2026-06-16 · Score : 20

North Korea's Contagious Interview Campaign Targeted 100 Organizations via VS Code, Cursor, and npm — $12M in Crypto Stolen, 26,584 Wallets Exfiltrated From Developer Systems

thehackernews.com · 2026-06-15 · Score : 22

ShinyHunters Claims 297GB Theft From Council of Europe via Oracle PeopleSoft Zero-Day — June 16 Leak Deadline Issued for 429,000 Documents Including Employee Medical and Banking Data

bleepingcomputer.com · 2026-06-15 · Score : 23

Chinese Espionage Group UNC6508 Spent Two Years Inside North American Medical and Military Research Networks via REDCap Backdoor, Abusing Google Workspace for Silent Exfiltration

bleepingcomputer.com · 2026-06-15 · Score : 26

Attackers Actively Exploit Three Fortinet FortiSandbox Flaws Rated CVSS 9.1 — Unauthenticated Code Execution on Security Sandboxes

The Hacker News · 2026-06-16 · Score : 22

SearchLeak: One-Click Attack Chains Three Microsoft 365 Copilot Bugs to Exfiltrate Emails, MFA Codes, and Files

The Hacker News · 2026-06-15 · Score : 23

ALERTE 100+ Cybersecurity Leaders Demand US Reverse Fable 5 Ban — 'Fix This Code' Prompt Was the Trigger, Not a Jailbreak

The Register · 2026-06-15 · Score : 28

FIRST Projects AI Autonomous Discovery Will Push 2026 CVE Count to 66,000 — Human Patching Capacity Now the Binding Constraint

Help Net Security · 2026-06-15 · Score : 19

CDN Supply-Chain Attack Compromises Awesome Motive Plugins — Malicious JS in OptinMonster, TrustPulse, and PushEngage Creates Rogue Admin Accounts on 1.2 Million WordPress Sites

bleepingcomputer.com · 2026-06-15 · Score : 26

NewCore Emerges From Stealth With $66M to Build AI-Native Identity and Access Management for Enterprise Agents

techcrunch.com · 2026-06-15 · Score : 21

LiteLLM Three-CVE Chain (CVSS 9.9): Any Low-Privilege User Can Take Over AI Gateway Server and Execute Arbitrary Code

thehackernews.com · 2026-06-15 · Score : 27

China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH Since 2016, Hiding for Nearly a Decade by Corrupting the Authentication Layer Itself

thehackernews.com · 2026-06-12 · Score : 20

Over 400 Arch Linux AUR Packages Hijacked in 'Atomic Arch' Supply Chain Attack — Rust Credential Stealer and eBPF Rootkit Target Developer Keys, Tokens, and SSH Credentials

thehackernews.com · 2026-06-12 · Score : 23

ALERTE Trump Signs Executive Order Promoting Advanced AI Innovation and Security

whitehouse.gov · 2026-06-02 · Score : 28

HN: 'Graphs That Explain the State of AI in 2026' — Data-Driven Benchmark and Attack-Trend Snapshot Draws High Engagement

news.ycombinator.com · 2026-05-09 · Score : 16

Numéros de la newsletter (30)

#2 Washington bloqueou um laboratório de IA. A China colocou 56 empresas na lista negra.

2026-06-22 · 1 mentions

#2 Washington bloqueó a un laboratorio de IA. China puso a 56 empresas en la lista negra.

2026-06-22 · 1 mentions

#508 The Cutting Edge, Across the Board

2026-06-28 · 1 mentions

#507 Anthropic Says Alibaba Stole 29 Million Conversations With Claude

2026-06-25 · 1 mentions

#506 Washington Blocked One AI Lab. China Blacklisted 56 Companies.

2026-06-22 · 2 mentions

AI Safety, Security & Ethics: train one trait, get alignment free

2026-06-21 · 1 mentions

AI Regulation: export-control law just became an AI kill switch

2026-06-21 · 3 mentions

#3 Votre IA peut désormais dépenser votre argent — Visa l'a branchée sur ChatGPT

2026-06-11 · 1 mentions

#504 America blocked its best AI. China just raised $7.4 billion.

2026-06-17 · 1 mentions

#497 AI's labor war just went global

2026-05-29 · 2 mentions

#496 Anthropic's Pentagon model is now everyone's model

2026-05-27 · 2 mentions

AI Regulation: Trump killed his own AI oversight order at the door

2026-05-26 · 2 mentions

AI Careers: Meta cuts 8,000, reshuffles 7,000 into AI

2026-05-26 · 1 mentions

AI Careers: 11,000 jobs cut in a day, one role is booming

2026-05-21 · 1 mentions

#493 Meta hired $145B in capex and fired 8,000 people

2026-05-19 · 3 mentions

AI safety: do-not-release model leaked, supply chain on fire

2026-04-25 · 1 mentions

#486 Apple is replacing Tim Cook because of AI

2026-04-22 · 3 mentions

AI Applications: The agent is not a product anymore

2026-04-18 · 1 mentions

AI Safety: Treasury called an emergency AI meeting

2026-04-18 · 2 mentions

Generative AI: Anthropic just retook the frontier, quietly

2026-04-18 · 1 mentions

#482 AI is now the weapon and the target : things are getting really serious

2026-04-10 · 7 mentions

#481 Musk wants Altman fired, Anthropic passes OpenAI, Meta goes closed

2026-04-09 · 3 mentions

#480 Monday Edition : npm compromised by North Korea, Iran targets AI data centers, and nobody wants OpenAI stock

2026-04-06 · 1 mentions

#478 The machines are hacking back — and so is everyone else

2026-04-03 · 7 mentions

#476 Weekly Intelligence Briefing: Tech, AI & Policy

2026-03-27 · 1 mentions

#430 Issue #430 : Here’s why Google pitched its $32B Wiz acquisition as ‘multicloud’

2025-03-20 · 2 mentions

#463 Issue #463: All about The

2026-02-02 · 2 mentions

#465 Issue #465: the DOOM edition : 5 ways AI could destroy everything

2026-02-12 · 1 mentions

#467 Issue #467: Anthropic has receipts. And nobody wants to pay for AI.

2026-02-26 · 1 mentions

#471 The AI civil war? Anthropic blasted and Open AI sees users flee

2026-03-11 · 1 mentions