Tendance des mentions — 20 derniers numéros

Actus en direct (67)

Apple Patches Hide My Email Vulnerability That Leaked Users' Real Addresses via Rejected Spam Mail

404media.co · 2026-07-21 · Score : 17

ALERTE Google Ships Gemini 3.6 Flash and 3.5 Flash Cyber, Says Pre-Training Has Started on Gemini 4

9to5google.com · 2026-07-21 · Score : 29

ALERTE Intel and Fortinet Co-Develop Security Processor 6 on Intel 4, Fortinet First Named External Customer for the Node

newsroom.intel.com · 2026-07-21 · Score : 29

Trend Micro: Russian Hacker 'bandcampro' Outsourced 89% of Botnet Build to Jailbroken Gemini CLI, Migrated C2 in 6 Minutes

thehackernews.com · 2026-07-20 · Score : 25

ALERTE Pillar Security Finds Sandbox Escapes in Cursor, Codex, Gemini CLI, and Antigravity Coding Agents

bleepingcomputer.com · 2026-07-20 · Score : 32

Chicago Cybersecurity Startup Empirical Security Raises $25M Series A for AI-Driven Exploit Prediction

axios.com · 2026-07-20 · Score : 19

Risk Ledger Raises £24M Series B Led by Axiom Equity to Expand AI-Automated Supply-Chain Cyber Reviews Into US

securityweek.com · 2026-07-17 · Score : 16

NUS Paper 'BadWAM' Shows Small Perturbations Desynchronize World-Action Models' Dream From Deed, Crash Task Success 96.5%→43.1%

huggingface.co · 2026-07-16 · Score : 19

ALERTE Hugging Face Discloses AI-Agent-Driven Intrusion — Malicious Dataset Exploited RCE Loader and Template Injection to Harvest Cluster Credentials

huggingface.co · 2026-07-16 · Score : 33

1Password Ships Anthropic Claude Integration on Mac That Lets the AI Agent Sign In to Websites Without Ever Seeing Passwords or 2FA Codes — Credentials Injected Directly Into Login Forms, Never Enter Claude's Context or Anthropic's Systems

9to5mac.com · 2026-07-16 · Score : 22

Microsoft's New Security Chief Hayete Gallot Sends July 14 Staff Memo Announcing She's Cut Hundreds of Roles and Replaced Senior Executives to Force AI-First Cybersecurity Overhaul — Prioritizes Security Copilot and Auto-Response AI Tools After Returning From Google Cloud in February

theinformation.com · 2026-07-14 · Score : 22

ALERTE OpenAI Debuts 'GPT-Red' Automated Red-Teamer That Slashed Prompt-Injection Attack Success on GPT-5.6 to Under 23% From Over 90% on GPT-5 — 84% Success Rate vs 13% for Humans, Found Novel 'Fake Chain of Thought' Attack Class

technologyreview.com · 2026-07-15 · Score : 30

ALERTE Suno Breached via Shai-Hulud npm Worm — Hacker 'ellie.191' Leaks Internal Files Showing Suno Scraped 2M+ YouTube Music Clips, 12,287 Hours of Deezer, 17,615 Hours From Genius, 62,117 Hours From Pond5 and ~1M Hours of Podcasts to Train Its Generative Music Models

404media.co · 2026-07-15 · Score : 28

Israeli AI-Native Identity Access Startup Oak Exits Stealth With $60M Seed Co-Led by Accel, CRV and Greylock — Serial Founders Shai Morag (Ex-Ermetic $265M Sale) and Tal Marom Pitch Real-Time Permission Removal for the AI Agent Era

techcrunch.com · 2026-07-15 · Score : 23

Cybersecurity Stocks Rally After IBM CEO Arvind Krishna Flags 'Rapidly-Evolving Cyber Concerns' in Q2 Preannounce — CrowdStrike +12%, Okta and Netskope +11%, SailPoint/Zscaler/SentinelOne/Palo Alto Networks Each +7% as Investors Read Comments as AI-Attack-Fear Tailwind

cnbc.com · 2026-07-14 · Score : 23

Alibaba's Ant Group Open-Sources SingGuard-NSFA Agent Safety Guardrail — Detects Prompt Injection, Data Theft, Malicious Code and Permission Misuse Across 7 Categories, 185 Scenarios, 133 Languages in 0.8B/2B/4B/9B Sizes at ~50ms Per Judgment

technode.com · 2026-07-13 · Score : 20

Ars Technica: Tracebit Researchers Detail 'Context Bombing' — Defenders Plant Fake Instructions Alongside Honey Secrets to Trip Attackers' LLM Guardrails, Opus 4.8 Goes From 93% Admin-Access Success to 100% Failure

arstechnica.com · 2026-07-14 · Score : 23

ALERTE HN Front Page: 'What xAI's Grok Build CLI Sends to xAI' — Wire-Level Analysis Finds Grok Uploads Entire Repositories to `grok-code-session-traces` Google Cloud Bucket, Not Just Files the Agent Reads

gist.github.com · 2026-07-12 · Score : 29

ALERTE Compromised jscrambler npm 8.14.0 Release Drops Rust Infostealer Targeting Claude Desktop, Cursor, Windsurf, VS Code and Zed Config Files

thehackernews.com · 2026-07-11 · Score : 28

Microsoft Warns Customers AI Will Mean Busier Patch Tuesdays — Discloses 'MDASH' Multi-Model Agentic Scanning Harness Finding More Windows Vulnerabilities

theregister.com · 2026-07-10 · Score : 19

European Commission Unveils EU Action Plan on Cybersecurity and AI — Pre-Market Model Evaluation, 'Structured Access' Blueprint, EU Grand Challenge for Homegrown Cyber-AI

commission.europa.eu · 2026-07-07 · Score : 25

Keyfactor Raises $1B+ From Summit Partners for AI Security and Post-Quantum Machine Identity Platform — Insight, Sixth Street Retain Stakes

securityweek.com · 2026-07-07 · Score : 22

Reuters: CISA's Attack Surface Evaluation Team is Using Anthropic's Mythos to Scan Government Code Repositories — Already Uncovered a 'Large Number' of Vulnerabilities

reuters.com · 2026-07-06 · Score : 23

VentureBeat VB Pulse Survey: Just 1 in 10 Enterprises Can Automatically Catch a Failing AI System in Production — 79% Have Already Paid for an Agent Going Rogue

venturebeat.com · 2026-07-04 · Score : 21

Ex-NSO Founder Shalev Hulio's AI Cyber Startup Dream Opens Four Latin American Offices After $260M Raise at $3B Valuation — Targets Milei's Argentina and Colombia's De la Espriella

thenextweb.com · 2026-07-03 · Score : 26

'DuneSlide' Cursor IDE CVEs Disclosed — Two Zero-Click Prompt Injection Flaws (CVE-2026-50548/50549, CVSS 9.8) Let Attackers Escape Sandbox and RCE Developer Machines

thehackernews.com · 2026-07-01 · Score : 26

Cybersecurity Unicorn Aikido Acquires Israel's Root for $70–100M to Defend Open Source Against AI-Powered Attacks — Patches Vulnerabilities Without Forcing Upgrades

siliconangle.com · 2026-06-30 · Score : 22

Straiker Raises $64M Series A to Secure Autonomous AI Agents Against Prompt Injection and Tool Misuse

axios.com · 2026-06-29 · Score : 23

Google VP of Security Warns EU DMA Plans to Open Android and Search Data Could Enable Widespread Fraud Within Weeks

wired.com · 2026-06-29 · Score : 19

Engadget Investigation: 100,000+ Flock AI License Plate Readers Exposed Live Footage Without Passwords — Dozens of Officers Arrested for Stalking via System

engadget.com · 2026-06-28 · Score : 21

OpenAI Codex Has No Way to Exclude Sensitive Files — HN-Popular GitHub Issue Proposes .codexignore Standard to Block Credentials and Keys From AI Agent Access

github.com · 2026-06-28 · Score : 20

ONNXStego: PoC Tool Hides Encrypted Messages in ONNX Model Weights via Least-Significant Mantissa Bits — Model Validity Preserved

github.com · 2026-06-27 · Score : 17

WSJ: Z.ai's GLM-5.2 Matches Top US Models at Finding Security Bugs — Researchers Demand US Close Open-Model Export Control Gap

wsj.com · 2026-06-28 · Score : 23

Cybersecurity Firms Targeted by Fraudulent OpenAI Organization Invites Designed to Harvest Corporate Data

bleepingcomputer.com · 2026-06-26 · Score : 19

Clean GitHub Repo Tricks AI Coding Agents Into Executing Invisible Malware

bleepingcomputer.com · 2026-06-27 · Score : 23

ALERTE OpenAI GPT-5.6 Safety Card: Sol Shows 3× Higher Self-Reasoning Control Rate, All Three Models Reach 'High' Bio and Cyber Capability for First Time

deploymentsafety.openai.com · 2026-06-26 · Score : 29

Amazon Q Developer CVE-2026-12957 (CVSS 8.5): Malicious Git Repo's MCP Config File Executes Code and Steals Live AWS Credentials — Full Disclosure June 26

thehackernews.com · 2026-06-26 · Score : 22

Gaslight: DPRK-Attributed macOS Backdoor Uses Prompt Injection to Fool LLM-Assisted Malware Analysis — First Documented Use of the Technique Inside Malware Itself

thehackernews.com · 2026-06-25 · Score : 27

ALERTE Anthropic Accuses Alibaba of Running World's Largest AI Distillation Attack — 29 Million Claude Exchanges via 25,000 Fraudulent Accounts, Letter Sent to US Senators and White House

thenextweb.com · 2026-06-24 · Score : 38

Nature: Membership Inference Attacks Achieve Near-Perfect Success at Identifying Patients in Medical AI Training Sets — Underrepresented Groups at Highest Risk

theregister.com · 2026-06-24 · Score : 19

Cordyceps: CI/CD Flaws in 300+ High-Profile GitHub Repos Let Any Unauthenticated User Steal Credentials and Push Malicious Code — Microsoft Azure Sentinel, Google AI Agent Dev Kit, Apache, Cloudflare, Python PSF Confirmed Affected

thehackernews.com · 2026-06-24 · Score : 25

'By Design' Flaw in MCP Could Enable Widespread AI Supply Chain Attacks — Unsanitized Commands Execute Silently in Agent Pipelines

securityweek.com · 2026-06-24 · Score : 23

Tata Electronics Confirms Cyberattack as World Leaks Gang Publishes 630 GB of Files Allegedly Including Apple Production Docs and Tesla Schematics

cnbc.com · 2026-06-23 · Score : 23

Malicious npm Packages Disguised as PostCSS Utilities Deliver Multi-Stage Windows RAT With Chrome Credential Theft and Registry Persistence

thehackernews.com · 2026-06-23 · Score : 18

Varonis Explores Potential Sale After PE Interest From Blackstone, Thoma Bravo, and Vista Equity — VRNS Surges 14%

bloomberg.com · 2026-06-23 · Score : 17

Two Scattered Spider Members Plead Guilty on Day 1 of UK Trial — TfL Hack, US Healthcare Breaches, $115M in Ransom Collectively Attributed

krebsonsecurity.com · 2026-06-23 · Score : 17

Trump Signs Executive Order Accelerating Federal Post-Quantum Cryptography Migration to 2030 Deadline — Four Years Earlier Than Prior Target

thehackernews.com · 2026-06-22 · Score : 18

Fake AI Agent Skill Bypasses All Marketplace Scanners and Reaches 26,000 Agents — Full Agent Access Could Read Files and Hit Internal Systems

thehackernews.com · 2026-06-23 · Score : 25

LastPass Notifies Customers Personal Data and Support Case Records Were Stolen in Klue Breach

techcrunch.com · 2026-06-23 · Score : 26

ShapedPlugin Premium WordPress Plugins Backdoored via Build Pipeline in Supply Chain Attack — 400,000+ Sites Exposed, CVSS 10.0, Credentials and WooCommerce Order Data Exfiltrated

thehackernews.com · 2026-06-22 · Score : 24

DifyTap: Four CVEs in Dify AI Workflow Platform Allow Cross-Tenant Exfiltration of Private AI Conversations — CVSS 9.4 Path Traversal Remains Unpatched at Disclosure

thehackernews.com · 2026-06-22 · Score : 22

LiteLLM AI Gateway CVE-2026-42271 Added to CISA KEV — Unauthenticated RCE Chain Via MCP Endpoints Exposes All Configured OpenAI and Anthropic API Keys

thehackernews.com · 2026-06-22 · Score : 23

Leaked Files Reveal Russia's 'Project 2026' — State-Sponsored Operation to Manipulate AI Chatbot and Search Engine Training Data

bloomberg.com · 2026-06-23 · Score : 23

23 ClawHub Plugins Squatted Official OpenClaw Namespaces — Code-Executing AI Agent Tools Impersonated Trusted @openclaw/ Scope

helpnetsecurity.com · 2026-06-22 · Score : 21

64% of Analyzed iOS Apps Expose LLM API Credentials — 282 of 444 Apps Vulnerable, Only 28% Patched After 90-Day Disclosure

helpnetsecurity.com · 2026-06-22 · Score : 25

OpenAI Launches GPT-5.5-Cyber and Patch the Planet Initiative to Secure Open-Source Software With Trail of Bits and 30+ Projects

wired.com · 2026-06-22 · Score : 23

Squidbleed (CVE-2026-47729): Claude Mythos AI Finds 29-Year-Old Squid Proxy Memory Leak Exposing User HTTP Credentials

thehackernews.com · 2026-06-22 · Score : 22

Bloomberg Opinion: Japan Is Right to Fear AI 'Black Ships' — Country Absorbed 22% of All Global Cyberattacks in 2024, More Than Any Other Nation

bloomberg.com · 2026-06-21 · Score : 16

AryStinger Botnet Hijacks 4,000 D-Link Routers as Remotely Controlled Proxy Network for Malicious Traffic

bleepingcomputer.com · 2026-06-21 · Score : 17

New Prinz Eugen Ransomware Prioritizes Recent Files for Encryption, Uses Go and ChaCha20-Poly1305 — Standard Bank Among Five Known Victims

bleepingcomputer.com · 2026-06-20 · Score : 21

Gravity SMTP WordPress Plugin CVE-2026-4020 Exploited in 17 Million Attempts to Steal API Keys Across 100,000 Sites

thehackernews.com · 2026-06-20 · Score : 15

Microsoft Attributes Mastra AI Framework npm Supply Chain Attack to North Korean Sapphire Sleet Hackers

bleepingcomputer.com · 2026-06-20 · Score : 24

7,000 Langflow Servers Under Active Exploit — LangGraph SQL Injection and LangChain Path Traversal Expose Shared Attack Surface Across Three Major AI Agent Frameworks

venturebeat.com · 2026-06-19 · Score : 23

Shadow AI's Real Risk Is Access Control, Not Data Leakage: 65% of Enterprise AI Agent Credentials Are Dormant But Active

thehackernews.com · 2026-06-19 · Score : 15

Apple Patches High-Severity Beats Studio Buds Bluetooth Flaw That Let Nearby Attackers Eavesdrop via Microphone

thehackernews.com · 2026-06-19 · Score : 15

ALERTE Trump Signs Executive Order Promoting Advanced AI Innovation and Security

whitehouse.gov · 2026-06-02 · Score : 28

HN: 'Graphs That Explain the State of AI in 2026' — Data-Driven Benchmark and Attack-Trend Snapshot Draws High Engagement

news.ycombinator.com · 2026-05-09 · Score : 16

Numéros de la newsletter (29)

#515 China's AI is redrawing the AI race

2026-07-20 · 2 mentions

#508 The Cutting Edge, Across the Board

2026-06-28 · 1 mentions

#507 Anthropic Says Alibaba Stole 29 Million Conversations With Claude

2026-06-25 · 1 mentions

#506 Washington Blocked One AI Lab. China Blacklisted 56 Companies.

2026-06-22 · 2 mentions

AI Safety, Security & Ethics: train one trait, get alignment free

2026-06-21 · 1 mentions

AI Regulation: export-control law just became an AI kill switch

2026-06-21 · 3 mentions

#504 America blocked its best AI. China just raised $7.4 billion.

2026-06-17 · 1 mentions

#497 AI's labor war just went global

2026-05-29 · 2 mentions

#496 Anthropic's Pentagon model is now everyone's model

2026-05-27 · 2 mentions

AI Regulation: Trump killed his own AI oversight order at the door

2026-05-26 · 2 mentions

AI Careers: Meta cuts 8,000, reshuffles 7,000 into AI

2026-05-26 · 1 mentions

AI Regulation: the White House reverses course on AI safety

2026-05-21 · 2 mentions

AI Careers: 11,000 jobs cut in a day, one role is booming

2026-05-21 · 1 mentions

#493 Meta hired $145B in capex and fired 8,000 people

2026-05-19 · 3 mentions

AI safety: do-not-release model leaked, supply chain on fire

2026-04-25 · 1 mentions

#486 Apple is replacing Tim Cook because of AI

2026-04-22 · 3 mentions

AI Applications: The agent is not a product anymore

2026-04-18 · 1 mentions

AI Safety: Treasury called an emergency AI meeting

2026-04-18 · 2 mentions

Generative AI: Anthropic just retook the frontier, quietly

2026-04-18 · 1 mentions

#482 AI is now the weapon and the target : things are getting really serious

2026-04-10 · 7 mentions

#481 Musk wants Altman fired, Anthropic passes OpenAI, Meta goes closed

2026-04-09 · 3 mentions

#480 Monday Edition : npm compromised by North Korea, Iran targets AI data centers, and nobody wants OpenAI stock

2026-04-06 · 1 mentions

#478 The machines are hacking back — and so is everyone else

2026-04-03 · 7 mentions

#476 Weekly Intelligence Briefing: Tech, AI & Policy

2026-03-27 · 1 mentions

#430 Issue #430 : Here’s why Google pitched its $32B Wiz acquisition as ‘multicloud’

2025-03-20 · 2 mentions

#463 Issue #463: All about The

2026-02-02 · 2 mentions

#465 Issue #465: the DOOM edition : 5 ways AI could destroy everything

2026-02-12 · 1 mentions

#467 Issue #467: Anthropic has receipts. And nobody wants to pay for AI.

2026-02-26 · 1 mentions

#471 The AI civil war? Anthropic blasted and Open AI sees users flee

2026-03-11 · 1 mentions