How a missing Firestore security rule on tl;dv exposed 181,874 meetings from 84,312 users across 35,003 domains, including live calls I could join uninvited, and how six months of disclosure got me nothing but seen receipts.

NCSC now recommends passkeys as the default and password plus two-step verification as the fallback. Traditional codes are still phishable.

Amazon’s using a lot of water, but claims it’s using it efficiently.

The exploit shows the extreme risk of offloading technical support to AI.

In recent weeks, we pointed Mythos and other security-focused LLMs at live code across critical parts of our infrastructure. We share what we observed, the models’ strengths and weaknesses, and what the work around them needs to look like before any of it can scale.

TRIBUNE. Dans une tribune au « Monde », les spécialistes des nouvelles technologies Nicolas Hénin et Robin Berjon reviennent sur l’engouement suscité par le compte X piloté par le Quai d’Orsay, French...

Anthropic’s Claude Mythos Preview has dominated security discussions since its April 7 announcement. Early reporting describes a powerful cybersecurity-focused AI system capable of identifying vulnerabilities at scale and raising serious questions about how quickly organizations can validate, prioritize, and remediate what it finds. The debate that followed has mostly focused on the right

Face aux accidents et attaques conduites contre les câbles sous-marins qui assurent l'essentiel des communications numériques mondiales, l'Europe renforce sa résilience en développant un système sécur...

Legit-looking website, camera-on interviews, jokes about backdoors ... it worked EXCLUSIVE  It all started with a LinkedIn message, as so many employment scams do these days.…

Opt-out instructions included if you're not keen on GitHub watching you in the name of product improvement Users of GitHub's command-line interface (CLI) who value privacy, beware. The Microsoft-owned code-hosting platform has quietly begun collecting pseudonymous client-side telemetry from CLI users and enabled it by default.…

PWNED: Keeping it simple for the developers can lead to very complex headaches later

Le paquet NPM du CLI de Bitwarden publié comme la version 2026.4.0 est en fait un malware qui récupère les secrets, clés SSH et autres identifiants. Cette version a été rapidement étiquetée comme « obsolète » et l’équipe du projet a contacté NPM pour que le paquet soit retiré au plus...

La filiale de services cloud du groupe français Iliad prend la suite du géant américain par mesure de sécurité contre toute ingérence étrangère.

Deliberate overheating brought relief to Juno probe’s camera, twice NASA has revealed that one of the cameras on the Juno craft it sent to Jupiter malfunctioned, and that it fixed it with some very, very, remote hardware hacking.…

Technique transforms the Internet DNS into an unconventional file storage system.

WeTransfer is a file-sharing service from the United States.

Envoyez jusqu'à 50 Go - Gratuit et sans inscription - Gardez vos transferts jusqu'à 30 jours.

Build resilient GitHub Actions workflows with insights from real attacks, missteps to avoid, and security tips GitHub’s docs don’t fully cover.