Description

Parce que… c’est l’épisode 0x626!

Shameless plug

• 10 et 11 septembre 2025 - GoSec 2025
  • Code rabais de 15% - GSPOL25
• 13 septembre 2025 - BSides Montreal 2025
• 12 au 17 octobre 2025 - Objective by the sea v8
• 14 et 15 octobre 2025 - ATT&CKcon 6.0
• 14 et 15 octobre 2025 - Forum inCyber Canada
  • Code rabais de 30% - CA25KDUX92
• 10 au 12 novembre 2025 - IAQ - Le Rendez-vous IA Québec
• 17 au 20 novembre 2025 - European Cyber Week
• 25 et 26 février 2026 - SéQCure 2026

Description

Notes

• Divers
  • How Has IoT Security Changed Over the Past 5 Years?
  • Hackers Leverage Raw Disk Reads to Bypass EDR Solutions and Access Highly Sensitive Files
  • Qantas penalizes executives for July cyberattack
  • CVE-2025-6785 - Tesla Model 3 Physical CAN Bus Injection
  • Android drops mega patch bomb - 120 fixes, two already exploited
  • Automated Sextortion Spyware Takes Webcam Pics of Victims Watching Porn
  • SIM Swapping Attacks on the Rise – How eSIM can Make SIM Swapping Harder
  • Europe Putin the blame on Russia after GPS jamming disrupts president’s plane
  • Almost Every State Has Its Own Deepfakes Law Now
  • No, Google did not warn 2.5 billion Gmail users to reset passwords
• IA
  • Hackers Use AI Platforms to Steal Microsoft 365 Credentials in Phishing Campaign
  • AI code assistants make developers more efficient at creating security problems
  • Comment manipuler psychologiquement une IA ? Les techniques qui marchent vraiment
  • LegalPWN - Pour piéger les IA avec les petites lignes
  • Indirect Prompt Injection Attacks Against LLM Assistants
  • BruteForceAI - L’IA qui cracke vos mots de passe
  • Hackers Leverage Hexstrike-AI Tool to Exploit Zero Day Vulnerabilities Within 10 Minutes
  • Ollama - 14 000 serveurs IA laissés en libre-service sur Internet
• Europe et souveraineté
  • EUVD: first step toward Europe’s cybersecurity sovereignty?
  • Switzerland Launches Apertus: A Public, Open-Source AI Model Built for Privacy
  • EU court’s dismissal of US data transfer challenge raises privacy advocates’ ire
  • SAP to invest over 20 billion euros in ‘sovereign cloud’ in boost to Europe’s AI ambitions
• Chaine d’approchées
  • Blast Radius of Salesloft Drift Attacks Remains Uncertain
  • Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1
  • How big will this Drift get? Cloudflare cops to Salesloft Drift breach
  • The impact of the Salesloft Drift breach on Cloudflare and our customers
  • Zscaler Confirms Data Breach – Hackers Compromised Salesforce Instance and Stole Customer Data

Collaborateurs

• Nicolas-Loïc Fortin

Crédits

• Montage par Intrasecure inc
• Locaux réels par Intrasecure inc