IA
When Amazon SES becomes a sophisticated phishing engine
In recent weeks, a particularly worrying phenomenon has been observed: malicious actors are taking advantage of the legitimate service of Amazon Simple Email Service (SES) as infr…
Category of intelligence
IA
News about artificial intelligence, machine learning and automation
IA
Phishing posing as the SSA and taking advantage of RMM tools for persistence: the VENOMOUS # HELPER campaign that affects more than 80 organizations
An active phishing campaign detected since at least April 2025 is exploiting confidence in legitimate remote management tools to achieve and maintain persistent access to corporat…
IA
When a unit becomes a vector of theft: the attack on PyTorch Lightning in PyPI exposes credentials and secrets
A legitimate and widely used package in the Python ecosystem, PyTorch Lightning, was manipulated in a malicious publication in PyPI and delivered a credentials charger to browsers…
IA
The IA eliminates the technical barrier: automated attacks that anyone can execute and the defense that must be reinvented
In 2025 we saw scenes that previously appeared to be taken from novels or from old hackers' records: adolescents without technical training capable of removing millions of records…
IA
Security Alert: CVE-2026-41940 turns cPanel / WHM into an intrusion vector against governments and MSPs
On May 2, 2026, researchers at Ctrl-Alt-Intel detected an active campaign that explores critical vulnerability in cPanel / WHM, registered as CVE-2026-41940, to unify authenticati…
IA
Crypto scam industrializes: transnational networks, trafficking and malware at the service of fraud
The recent international raid that evicted nine scam centres linked to investment fraud in cryptomonedas and which led to the arrest of hundreds of suspects is less an isolated fa…
IA
Defender's false alert that erased DigiCert's root certificates and unleashed chaos on Windows
In recent days many Windows administrators and users saw alerts linking legitimate DigiCert certificates to detection Trojan: Win32 / Cerdigent.A! dha from Microsoft Defender; in …
IA
Copy Fail: the critical vulnerability of the Linux kernel (CVE-2026-31431) already exploited that could give root access and break the container insulation
The US Agency for Infrastructure and Cybersecurity. United States. ( CISA) has included in its catalog Known Exploited Vulnerabilities (KEV) a critical vulnerability recently disc…
IA
ConsentFix v3 the tactic that steals tokens taking advantage of the pregranted trust in OAuth
A new attack vector known in forums such as ConsentFix v3 is showing a recurring weakness in architectures that trust OAuth flows: it is not always the password or MFA that determ…