Recent iPhone models have additional hardware-based security protection for sensitive regions of the kernel memory. We discovered that to bypass this hardware-based security protection, the attackers used another hardware feature of Apple-designed SoCs.

MongoDB is warning that its corporate systems were breached and that customer data was exposed in a cyberattack that was detected by the company earlier this week.

WordPress version 6.4.2 fixes a vulnerability that could allow attackers to execute arbitrary PHP code.

Ongoing investigation found evidence of stolen employee creds and social engineering

Google Cloud addresses medium-severity security flaw! Attackers with Kubernetes cluster access could escalate privileges.

https://www.cert.ssi.gouv.fr/cti/CERTFR-2023-CTI-010/

Les Etats-membres de l'UE et le Parlement européen se sont accordés sur un texte pour encadrer l'utilisation et le développement de l'intelligence artificielle. Une législation inédite à l'échelle mondiale.

https://amp-theguardian-com.cdn.ampproject.org/c/s/amp.theguardian.com/business/2023/dec/04/sellafield-nuclear-site-hacked-groups-russia-china

INFO LE POINT. À partir du 8 décembre, les membres du gouvernement devront utiliser les applications de messagerie françaises Tchap ou Olvid.

First American Financial Corporation, the second-largest title insurance company in the United States, took some of its systems offline today to contain the impact of a cyberattack.

https://asset-group.github.io/disclosures/5ghoul/

Une attaque d'ampleur massive a actuellement lieu et pourrait concerner toutes les applications décentralisées de l'écosytème.

WordPress administrators are being emailed fake WordPress security advisories for a fictitious vulnerability tracked as CVE-2023-45124 to infect sites with a malicious plugin.