[Cybersécurité] Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks
[Cybersécurité] Microsoft warns of Exchange zero-day flaw exploited in attacks
On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site scripting (XSS) while
[Cybersécurité] Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own
During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique zero-day vulnerabilities in multiple products, including Windows 11, Microsoft E
[Cybersécurité] Patch Tuesday, April 2026 Edition
Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly di
[Cybersécurité] Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain admin-level access to websites. […]
[Cybersécurité] Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation
Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an artificial intelligence (AI) system, marking the first time the
[Cybersécurité] Funnel Builder WordPress plugin bug exploited to steal credit cards
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript snippets into WooCommerce checkout pages. […]
[Cybersécurité] Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Wind
[Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of its public dis
[Cybersécurité] OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation
OpenAI has launched Daybreak, a new cybersecurity initiative that brings together frontier artificial intelligence (AI) model capabilities and Codex Security to help organizations identify and patch v
![[Cybersécurité] Anti-DDoS Firm Heaped Attacks on Brazilian ISPs](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4208-1780679089-100x100.png)
![[Cybersécurité] Microsoft warns of Exchange zero-day flaw exploited in attacks](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4207-1780642622-100x100.png)
![[Cybersécurité] Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4206-1780679315-100x100.png)
![[Cybersécurité] Patch Tuesday, April 2026 Edition](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4205-1780687503-100x100.png)
![[Cybersécurité] Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4204-1780687598-100x100.png)
![[Cybersécurité] Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4203-1780687716-100x100.png)
![[Cybersécurité] Funnel Builder WordPress plugin bug exploited to steal credit cards](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4202-1780738583-100x100.png)
![[Cybersécurité] Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4201-1780643553-100x100.png)
![[Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4200-1780738679-100x100.png)
![[Cybersécurité] OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4199-1781537944-100x100.png)