8 casos · pág. 1/1
On 19 October 2026 an attacker used a hijacked GitHub account of an OVHcloud contributor to overwrite the download archives of five existing OVHcloud CLI releases (v0.11.0 to v0.15.0) with a build designed to steal secrets from the disk of any machine that ran it (thehackernews.com, bleepingcomputer.com). The files were live for about 94 …
CERT-FR bulletin CERTFR-2026-ACT-044 covers significant vulnerabilities for week 42 of 2026 and recalls three recent CERT-FR alerts. These are a security incident targeting remote controllers of refrigeration installations, recommendations for the secure use of XWEB supervisors, and a vulnerability in Ivanti Connect Secure (ICS) tracked a…
CERT-FR advisory CERTFR-2026-AVI-1330, published 16 October 2026, reports multiple vulnerabilities in Traefik. Per the advisory, they allow an attacker to compromise data confidentiality and bypass the security policy. All Traefik versions prior to v3.7.15 are affected. The advisory is based on two vendor security bulletins, GHSA-28hp-c82…
In September 2024 the French national pension fund Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries. The dataset was added to Have I Been Pwned on 20 Oct 2026 and contains 70.4k unique email addresses. Exposed data includes names, dates of birth, physical addresses, phone numbers, income leve…
A still-unknown actor hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores, spiking temperatures, spoiling food and sparking fires. The incident fits a broader trend of extortionists and other attackers going after physical systems to maximise real-world pressure on victims. Earlier examples…
The FBI has publicly called on remaining ShinyHunters members to surrender. Cyber division assistant director Brett Leatherman released a video thanking Dutch police for arresting a 24-year-old in Amsterdam. The FBI calls him "one of the alleged leaders" of the group, while Dutch police say only that he played a role. He is also suspected…
Censys observed a 71% drop in internet-exposed Danfoss StoreView control panels in France in three days after the October 11 cyber-attack on hundreds of French supermarkets. The attack targeted refrigeration controllers that Danfoss confirmed were mostly older models without security updates (AK-SM800, AK-SC355) or newer models on outdate…
Bitdefender documented Midnight Mimosa, an Android malware campaign that embeds a platform-signed malicious system app in the firmware of low-cost, MediaTek-based handsets and counterfeit flagship models before they reach buyers. Thousands of infected devices were observed in more than 150 countries over roughly two years. The implant dri…
