[Cybersécurité] PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any artifacts linked to TeamPCP from the environ
[Cybersécurité] Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker
A hacktivist group with links to Iran’s intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global medical technology company based in Michigan. News reports o
[Cybersécurité] Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks
[Cybersécurité] Microsoft warns of Exchange zero-day flaw exploited in attacks
On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site scripting (XSS) while
[Cybersécurité] Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own
During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique zero-day vulnerabilities in multiple products, including Windows 11, Microsoft E
[Cybersécurité] Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain admin-level access to websites. […]
[Cybersécurité] Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation
Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an artificial intelligence (AI) system, marking the first time the
[Cybersécurité] Funnel Builder WordPress plugin bug exploited to steal credit cards
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript snippets into WooCommerce checkout pages. […]
[Cybersécurité] Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Wind
[Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of its public dis
![[Cybersécurité] PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems [Cybersécurité] PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems](https://cyber.kiminox.net/wp-content/uploads/2026/05/cybersecurite-pcpjack-credential-stealer-exploits-5-cves-to-spread-worm-like-across-cloud-systems-4210-1793871131-100x100.png)
![[Cybersécurité] Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4209-1780678855-100x100.png)
![[Cybersécurité] Anti-DDoS Firm Heaped Attacks on Brazilian ISPs](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4208-1780679089-100x100.png)
![[Cybersécurité] Microsoft warns of Exchange zero-day flaw exploited in attacks](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4207-1780642622-100x100.png)
![[Cybersécurité] Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4206-1780679315-100x100.png)
![[Cybersécurité] Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4204-1780687598-100x100.png)
![[Cybersécurité] Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4203-1780687716-100x100.png)
![[Cybersécurité] Funnel Builder WordPress plugin bug exploited to steal credit cards](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4202-1780738583-100x100.png)
![[Cybersécurité] Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4201-1780643553-100x100.png)
![[Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure [Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure](https://cyber.kiminox.net/wp-content/uploads/2026/05/cybersecurite-praisonai-cve-2026-44338-auth-bypass-targeted-within-hours-of-disclosure-4200-1793875470-100x100.png)