Guillaume BEAUPELLET

Critical Vulnerabilities Uncovered in Open Source CasaOS Cloud Software

Two critical security flaws discovered in the open-source CasaOS personal cloud software could be successfully exploited by attackers to achieve arbitrary code execution and take over susceptible systems. The vulnerabilities, tracked as CVE-2023-37265 and CVE-2023-37266, both carry a CVSS score of 9.8 out of a maximum of 10. Sonar security researcher Thomas Chauchefoin, who discovered the bugs,

Une App de capture vidéo pour iPad et un téléprompteur chez Elgato

Elgato, le constructeur désormais dans le giron de Corsair, étoffe son catalogue avec une nouvelle application de capture de vidéo pour iPad et un téléprompteur.

Informatique quantique ou IA, d’où viendra la menace ?

Quels risques induisent l’informatique quantique et les systèmes d’IA. Éric Brier (S3NS/Thales) a donné son point de vue lors des Assises de la cybersécurité.

Webinar: Locking Down Financial and Accounting Data — Best Data Security Strategies

Financial data is much more than just a collection of numbers; it is a crucial component of any business and a prime target for cybercriminals. It’s important to understand that financial records can be a veritable treasure trove for digital pirates. A security breach not only puts customers’ personal information in jeopardy but also enables […]

CERTFR-2023-ALE-011 : Vulnérabilité dans Cisco IOS XE (17 octobre 2023)

Le 16 octobre 2023, Cisco a publié un avis de sécurité concernant la vulnérabilité CVE-2023-20198 affectant l’interface Web de gestion d’IOS XE (webui). Cette vulnérabilité permet à un attaquant non authentifié de créer un

Experts Warn of Severe Flaws Affecting Milesight Routers and Titan SFTP Servers

A severity flaw impacting industrial cellular routers from Milesight may have been actively exploited in real-world attacks, new findings from VulnCheck reveal. Tracked as CVE-2023-43261 (CVSS score: 7.5), the vulnerability has been described as a case of information disclosure that affects UR5X, UR32L, UR32, UR35, and UR41 routers before version 35.3.0.7 that could enable attackers to access

Exploring the Realm of Malicious Generative AI: A New Digital Security Challenge

Recently, the cybersecurity landscape has been confronted with a daunting new reality – the rise of malicious Generative AI, like FraudGPT and WormGPT. These rogue creations, lurking in the dark corners of the internet, pose a distinctive threat to the world of digital security. In this article, we will look at the nature of Generative […]