Catégorie : Cybersecurity
[Cybersécurité] Feds Disrupt IoT Botnets Behind Huge DDoS Attacks
The U.S. Justice Department joined authorities in Canada and Germany in dismantling the online infrastructure behind four highly disruptive botnets that compromised more than three million hacked Inte
[Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of its public dis
[Cybersécurité] Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Wind
[Cybersécurité] Funnel Builder WordPress plugin bug exploited to steal credit cards
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript snippets into WooCommerce checkout pages. […]
[Cybersécurité] Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation
Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an artificial intelligence (AI) system, marking the first time the
[Cybersécurité] Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain admin-level access to websites. […]
[Cybersécurité] Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own
During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique zero-day vulnerabilities in multiple products, including Windows 11, Microsoft E
[Cybersécurité] ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
Everything is still on fire.
This week feels dumb in the worst way — bad links, weak checks, fake help desks, shady forum posts, and people turning supply chain attacks into some cursed little game fo
[Cybersécurité] On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild.
The vulnerability, tracked as CVE-202
[Cybersécurité] cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor
A threat actor named Mr_Rot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised environments.
The attack ex
![[Cybersécurité] Feds Disrupt IoT Botnets Behind Huge DDoS Attacks](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4218-1793598342-100x100.png)
![[Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure [Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure](https://cyber.kiminox.net/wp-content/uploads/2026/05/cybersecurite-praisonai-cve-2026-44338-auth-bypass-targeted-within-hours-of-disclosure-4200-1793875470-100x100.png)
![[Cybersécurité] Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4201-1780643553-100x100.png)
![[Cybersécurité] Funnel Builder WordPress plugin bug exploited to steal credit cards](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4202-1780738583-100x100.png)
![[Cybersécurité] Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4203-1780687716-100x100.png)
![[Cybersécurité] Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4204-1780687598-100x100.png)
![[Cybersécurité] Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4206-1780679315-100x100.png)
![[Cybersécurité] ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories](https://cyber.kiminox.net/wp-content/uploads/2024/10/cybersecurity_img2-100x100.png)