{"id":197,"date":"2025-10-05T07:33:37","date_gmt":"2025-10-05T05:33:37","guid":{"rendered":"https:\/\/synap-sys.fr\/?page_id=197"},"modified":"2026-07-17T16:20:22","modified_gmt":"2026-07-17T14:20:22","slug":"news","status":"publish","type":"page","link":"https:\/\/synap-sys.fr\/en\/news\/","title":{"rendered":"Cyber News"},"content":{"rendered":"\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h6 class=\"wp-block-heading\" style=\"font-size:16px\">\ud83d\udd10 <strong>Failles de s\u00e9curit\u00e9 et vuln\u00e9rabilit\u00e9s<\/strong><\/h6>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">CERT-FR (Centre gouvernemental de veille, d\u2019alerte et de r\u00e9ponse aux attaques informatiques)<\/p>\n\n\n<ul class=\"has-dates has-excerpts alignleft rss-texte-perso wp-block-rss\"><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.cert.ssi.gouv.fr\/avis\/CERTFR-2026-AVI-0971\/'>Vuln\u00e9rabilit\u00e9 dans Mozilla Firefox pour Android (05 ao\u00fbt 2026)<\/a><\/div><time datetime=\"2026-08-05T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">5 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Mozilla Firefox pour Android. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.cert.ssi.gouv.fr\/avis\/CERTFR-2026-AVI-0969\/'>Multiples vuln\u00e9rabilit\u00e9s dans HPE Aruba Networking EdgeConnect SD-WAN Orchestrator (05 ao\u00fbt 2026)<\/a><\/div><time datetime=\"2026-08-05T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">5 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans HPE Aruba Networking EdgeConnect SD-WAN Orchestrator. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une atteinte \u00e0 l&#039;int\u00e9grit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.cert.ssi.gouv.fr\/avis\/CERTFR-2026-AVI-0968\/'>Multiples vuln\u00e9rabilit\u00e9s dans les produits Veeam (05 ao\u00fbt 2026)<\/a><\/div><time datetime=\"2026-08-05T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">5 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Veeam. Certaines d&#039;entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.cert.ssi.gouv.fr\/avis\/CERTFR-2026-AVI-0970\/'>Multiples vuln\u00e9rabilit\u00e9s dans Google Pixel (05 ao\u00fbt 2026)<\/a><\/div><time datetime=\"2026-08-05T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">5 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Pixel. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l&#039;\u00e9diteur.<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.cert.ssi.gouv.fr\/avis\/CERTFR-2026-AVI-0967\/'>Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge (04 ao\u00fbt 2026)<\/a><\/div><time datetime=\"2026-08-04T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">4 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l&#039;\u00e9diteur.<\/div><\/li><\/ul>\n\n\n<p class=\"wp-block-paragraph\">Exploit Database (Offensive Security)<\/p>\n\n\n<ul class=\"has-dates has-excerpts rss-texte-perso wp-block-rss\"><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.exploit-db.com\/exploits\/52626'>[webapps] Joomla Page Builder CK  3.5.10 &#8211;  Arbitrary File Upload<\/a><\/div><time datetime=\"2026-07-08T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">8 July 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Joomla Page Builder CK 3.5.10 &#8211; Arbitrary File Upload<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.exploit-db.com\/exploits\/52627'>[webapps] Langflow 1.9.0 &#8211; RCE<\/a><\/div><time datetime=\"2026-07-08T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">8 July 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Langflow 1.9.0 &#8211; RCE<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.exploit-db.com\/exploits\/52628'>[webapps] Atarim WordPress Plugin  4.2.2 &#8211; Sensitive Information Exposure<\/a><\/div><time datetime=\"2026-07-08T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">8 July 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Atarim WordPress Plugin 4.2.2 &#8211; Sensitive Information Exposure<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.exploit-db.com\/exploits\/52629'>[webapps] Krayin CRM v2.2.x &#8211; Authenticated Remote Code Execution<\/a><\/div><time datetime=\"2026-07-08T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">8 July 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Krayin CRM v2.2.x &#8211; Authenticated Remote Code Execution<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/www.exploit-db.com\/exploits\/52624'>[local] ProtonVPN v4.4.1 &#8211; Unquoted Service Path<\/a><\/div><time datetime=\"2026-07-07T02:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">7 July 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">ProtonVPN v4.4.1 &#8211; Unquoted Service Path<\/div><\/li><\/ul><\/div><\/div>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\">\ud83d\udee1\ufe0f <strong>Attaques en cours et campagnes actives<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">The Hacker News<\/p>\n\n\n<ul class=\"has-dates has-excerpts rss-texte-perso wp-block-rss\"><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/thehackernews.com\/2026\/08\/over-250-clickfix-domains-use-browser.html'>Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures<\/a><\/div><time datetime=\"2026-08-05T20:44:31+00:00\" class=\"wp-block-rss__item-publish-date\">5 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft Threat Intelligence tracked on infrastructure it had been watching for weeks. The server-side gate hides the malicious page from crawlers and sandboxes while presenting selected Mac users with a fake [&hellip;]<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/thehackernews.com\/2026\/08\/openai-disrupts-poipet-scam-network.html'>OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes<\/a><\/div><time datetime=\"2026-08-05T20:33:47+00:00\" class=\"wp-block-rss__item-publish-date\">5 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to facilitate a wide range of investment, romance, gambling, and law enforcement impersonation schemes. To that end, it banned a coordinated network of ChatGPT accounts likely originating from Southeast Asia and operating from the city of Poipet, a [&hellip;]<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/thehackernews.com\/2026\/08\/poison-claude-sells-discounted-claude.html'>Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt<\/a><\/div><time datetime=\"2026-08-05T17:36:03+00:00\" class=\"wp-block-rss__item-publish-date\">5 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intelligence (AI) models on underground cybercrime forums and messaging platforms. One such service, Poison Claude, claims to offer access to Anthropic&#039;s large language models (LLMs), including Opus 4.8, Opus 4.7, Opus 4.6, and Sonnet 4.6. &quot;Advertisements for Poison Claude<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/thehackernews.com\/2026\/08\/paperclip-ai-flaws-let-attackers-run.html'>Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports<\/a><\/div><time datetime=\"2026-08-05T17:14:05+00:00\" class=\"wp-block-rss__item-publish-date\">5 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Two security flaws in Paperclip could let attackers execute commands on a network server or a developer&#039;s computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious agent and starting it. A third flaw could expose sensitive data and control-plane details through application [&hellip;]<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/thehackernews.com\/2026\/08\/veeam-terraform-mcp-django-patch.html'>Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug<\/a><\/div><time datetime=\"2026-08-05T16:27:30+00:00\" class=\"wp-block-rss__item-publish-date\">5 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam&#039;s console that hands over a managed agent&#039;s credentials, rated 9.5 A cross-tenant flaw in HashiCorp&#039;s MCP server that lets one user&#039;s Terraform token be reused [&hellip;]<\/div><\/li><\/ul><\/div><\/div>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h6 class=\"wp-block-heading\" style=\"font-size:16px\">\ud83d\udee0\ufe0f <strong>Microsoft Security Update Guide (Patch Tuesday &amp; autres mises \u00e0 jour)<\/strong><\/h6>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:14px\">Ce flux liste les bulletins de s\u00e9curit\u00e9 (CVE, correctifs mensuels) publi\u00e9s par Microsoft. C\u2019est <em>la source officielle<\/em> pour les mises \u00e0 jour de s\u00e9curit\u00e9 Windows, Office, Azure, etc.<\/p>\n\n\n<ul class=\"has-dates has-excerpts rss-texte-perso wp-block-rss\"><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-50493'>CVE-2026-50493 DirectX Graphics Kernel Elevation of Privilege Vulnerability<\/a><\/div><time datetime=\"2026-08-03T16:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">3 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Acknowledgement Updated<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-50341'>CVE-2026-50341 Windows NTFS Information Disclosure Vulnerability<\/a><\/div><time datetime=\"2026-08-03T16:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">3 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Acknowledgement Updated<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-50416'>CVE-2026-50416 Win32k Information Disclosure Vulnerability<\/a><\/div><time datetime=\"2026-08-03T16:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">3 August 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Acknowledgement Updated<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-24304'>CVE-2026-24304 Azure Cosmos DB Remote Code Execution Vulnerability<\/a><\/div><time datetime=\"2026-07-30T16:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">30 July 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.<\/div><\/li><li class='wp-block-rss__item'><div class='wp-block-rss__item-title'><a href='https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-24304'>CVE-2026-24304 Azure Resource Manager Elevation of Privilege Vulnerability<\/a><\/div><time datetime=\"2026-07-30T16:00:00+00:00\" class=\"wp-block-rss__item-publish-date\">30 July 2026<\/time> <div class=\"wp-block-rss__item-excerpt\">Informational Change. CVE ID stays the same.<\/div><\/li><\/ul><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ud83d\udd10 Failles de s\u00e9curit\u00e9 et vuln\u00e9rabilit\u00e9s CERT-FR (Centre gouvernemental de veille, d\u2019alerte et de r\u00e9ponse aux attaques informatiques) Exploit Database (Offensive Security) \ud83d\udee1\ufe0f Attaques en cours et campagnes actives The Hacker News \ud83d\udee0\ufe0f Microsoft Security Update Guide (Patch Tuesday &amp; autres mises \u00e0 jour) Ce flux liste les bulletins de s\u00e9curit\u00e9 (CVE, correctifs mensuels) publi\u00e9s &#8230; <a title=\"Cyber News\" class=\"read-more\" href=\"https:\/\/synap-sys.fr\/en\/news\/\" aria-label=\"Read more about Cyber News\">Read more<\/a><\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"slim_seo":{"title":"synap-sys | Cyber News : veille s\u00e9curit\u00e9 et vuln\u00e9rabilit\u00e9s","description":"Actualit\u00e9 cybers\u00e9curit\u00e9 sur synap-sys : failles de s\u00e9curit\u00e9, vuln\u00e9rabilit\u00e9s, attaques en cours, patchs Microsoft et veille CERT-FR. Restez inform\u00e9 !","canonical":"https:\/\/synap-sys.fr\/news\/"},"footnotes":""},"class_list":["post-197","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/synap-sys.fr\/en\/wp-json\/wp\/v2\/pages\/197","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/synap-sys.fr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/synap-sys.fr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/synap-sys.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/synap-sys.fr\/en\/wp-json\/wp\/v2\/comments?post=197"}],"version-history":[{"count":16,"href":"https:\/\/synap-sys.fr\/en\/wp-json\/wp\/v2\/pages\/197\/revisions"}],"predecessor-version":[{"id":355,"href":"https:\/\/synap-sys.fr\/en\/wp-json\/wp\/v2\/pages\/197\/revisions\/355"}],"wp:attachment":[{"href":"https:\/\/synap-sys.fr\/en\/wp-json\/wp\/v2\/media?parent=197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}