Goupil
LightNews LightNews
furaxfox.bsky.social
Goupil
@furaxfox.bsky.social
220 followers 410 following 85 posts
Parceque !
(mes opinions n'engagent que moi)
Ailleurs en ligne:
http://goupilland.net
http://github.com/FuraxFox/
http://mastodon.acm.org/@FuraxFox
Posts Replies Media Videos
Reposted by Goupil
andyjabbour.bsky.social
🇦🇺 ASD: Annual Cyber Threat Report 2024-2025. What ASD's ACSC saw: www.cyber.gov.au/about-us/vie... #australia #cybersecurity cc @gate15.bsky.social @campuscodi.risky.biz
November 14, 2025 at 1:28 PM
Reposted by Goupil
adulau.bsky.social
We presented “Advancing Vulnerability Tracking and Disclosure Through an Open and Distributed Platform” at the excellent @uybhys.bsky.social

#cve #vulnerability #opensource #vulnerabilitymanagement #cybersecurity #gcve

🔗 www.vulnerability-lookup.org/2025/11/08/u...
Advancing Vulnerability Tracking and Disclosure Through an Open and Distributed Platform at Unlock Your Bain conference
Slides: Advancing Vulnerability Tracking and Disclosure Through an Open and Distributed Platform We presented “Advancing Vulnerability Tracking and Disclosure Through an Open and Distributed Platf...
www.vulnerability-lookup.org
November 9, 2025 at 10:31 AM
Reposted by Goupil
zackwhittaker.com
We used to think of gov't spyware targeting only a select few, like terrorists and organized criminals.

But over years, spyware has hacked the phones of journalists, activists, lawyers, politicians, and seemingly regular people — and the pool of victims targeted by govts is quite wide.

Here's why.
Why a lot of people are getting hacked with government spyware | TechCrunch
Government surveillance vendors want us to believe their spyware products are only used in limited and targeted operations against terrorists and serious criminals. That claim is increasingly difficul...
techcrunch.com
November 10, 2025 at 2:40 PM
Reposted by Goupil
cert-fr.bsky.social
Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière.
https://www.cert.ssi.gouv.fr/actualite/CERTFR-2025-ACT-047/
November 3, 2025 at 4:12 PM
Reposted by Goupil
nolimitsecu.bsky.social
#Podcast #Cybersécurité

Épisode #519 consacré à la conférence @uybhys.bsky.social 2025, avec @g0ul4g.bsky.social et Josquin DEBAZ

www.nolimitsecu.fr/uybhys-2025/
UYBHYS 2025 - NoLimitSecu
Episode #519 consacré à la conférence UYBHYS 2025 avec Guillaume PRIGENT et Josquin DEBAZ
www.nolimitsecu.fr
November 10, 2025 at 9:02 AM
Reposted by Goupil
nolimitsecu.bsky.social
#Podcast #Cybersécurité

Épisode 518 consacré au rapport annuel "ENISA Threat Landscape 2025", avec Jamila Boutemeur

www.nolimitsecu.fr/enisa-threat...
ENISA Threat Landscape 2025 - NoLimitSecu
Episode #518  ENISA Threat Landscape 2025 Avec Jamila Boutemeur
www.nolimitsecu.fr
November 3, 2025 at 11:31 AM
Reposted by Goupil
ericfreyss.mastodon.social.ap.brid.gy
@pluralistic fait sa propre recension du papier de Reuters sur la fraude publicitaire chez #meta
https://pluralistic.net/2025/11/08/faecebook/#too-big-to-care

et pour lui cette dérive est consubstantielle à leur arsenal de publicité ciblée alimentée par la collecte massive de données personnelles
November 9, 2025 at 8:09 AM
Reposted by Goupil
herve-schauer.bsky.social
Lors des 𝑟𝑢𝑚𝑝𝑠 #UYBHYS25 du très sérieux avec son propre BIOS UEFI 𝑠𝑒𝑐𝑢𝑟𝑒 𝑏𝑜𝑜𝑡 comme de l'impubliable avec plusieurs fuites de DCP par exemple avec W.Postdam et @mynameisv.bsky.social
dont vous n'aurez que des photos 🐦 🔫
@uybhys.bsky.social
November 8, 2025 at 6:21 PM
Reposted by Goupil
adulau.infosec.exchange.ap.brid.gy
We presented “Advancing Vulnerability Tracking and Disclosure Through an Open and Distributed Platform” at the excellent @UYBHYS

#cve #vulnerability #opensource #vulnerabilitymanagement #cybersecurity

🔗 https://www.vulnerability-lookup.org/2025/11/08/unlock-your-brain-2025/
Advancing Vulnerability Tracking and Disclosure Through an Open and Distributed Platform at Unlock Your Bain conference
Slides: Advancing Vulnerability Tracking and Disclosure Through an Open and Distributed Platform We presented “Advancing Vulnerability Tracking and Disclosure Through an Open and Distributed Platform” at the excellent Unlock Your Brain conference. A well-organised and welcoming event, Unlock Your Brain brings together a great mix of researchers, practitioners, and open-source enthusiasts—making it a perfect place to exchange ideas on vulnerability tracking and disclosure. Download the slides: https://www.vulnerability-lookup.org/files/events/2025/presentation-unlockyourbrain.pdf
www.vulnerability-lookup.org
November 8, 2025 at 2:25 PM
furaxfox.bsky.social
www.lemagit.fr/conseil/Comb...
Quand creuser la source d'une info séduisante donne des résultats étonnants.
Combien de PME mettent la clé sous la porte après une cyberattaque ? | LeMagIT
Pour certains, 60 % déposent le bilan 18 mois après l’attaque. Pour d’autres, ça va plus vite : 6 mois. D’autres encore auraient parlé, un temps, de 70 % sous 3 ans. Enquête sur des chiffres plus que ...
www.lemagit.fr
November 9, 2025 at 10:16 AM
Reposted by Goupil
socket.dev
🚨 New from Socket Threat Research: 9 malicious #NuGet packages deliver time-delayed destructive payloads, designed to crash apps and sabotage industrial control systems.

Read the full analysis → socket.dev/blog/9-malic... #dotnet
9 Malicious NuGet Packages Deliver Time-Delayed Destructive ...
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control system...
socket.dev
November 6, 2025 at 8:38 PM
Reposted by Goupil
fr.esa.int
À lire : Mission accomplie hier soir pour #Ariane6, qui a inséré en orbite le satellite d'observation de la Terre Sentinel-1D 👉
www.esa.int/Newsroom/Pre...
transport.esa.int ESA Space Transport @transport.esa.int · 9d
Liftoff for Ariane 6 on flight #VA265 carrying the @CopernicusEU Sentinel-1D satellite to space.
November 5, 2025 at 7:12 AM
Reposted by Goupil
gabrielthierry.bsky.social
"Chicago firm that resolves ransomware attacks had rogue workers carrying out their own hacks, FBI says", cc @riskybusiness.bsky.social
chicago.suntimes.com/the-watchdog...
Chicago firm that resolves ransomware attacks had rogue workers carrying out their own hacks, FBI says
Employees of DigitalMint, a company that specializes in negotiating ransoms in cyber attacks, were part of a small crew the feds say conducted five hacks that scored more than $1 million.
chicago.suntimes.com
November 5, 2025 at 8:59 AM
Reposted by Goupil
bearstech.com
L'Ukraine expérimente la solution Open Source SOARCA pour faire face à la vulnérabilité des réseaux électriques européens.

👉 Le projet : github.com/COSSAS/SO...
👉 Un article sur le sujet : www.theregister.com/...
L'Europe dans le noir (crédit photo : l'ESA) Voir : https://www.esa.int/ESA_Multimedia/Images/2022/10/Colour_map_of_Europe_at_night
November 4, 2025 at 7:30 PM
Reposted by Goupil
nolimitsecu.bsky.social
#Podcast #Cybersécurité

Épisode 517 consacré au livre "Les fondamentaux de la cybersécurité", avec son auteur Giuliano Ippoliti

www.nolimitsecu.fr/les-fondamen...
Les fondamentaux de la cybersécurité - NoLimitSecu
Episode #517 consacré au livre :  Les fondamentaux de la cybersécurité avec Giuliano Ippoliti
www.nolimitsecu.fr
October 20, 2025 at 5:35 AM
Reposted by Goupil
malwaretech.com
Some guy got in an argument with me about the impact of AI malware. He cited a MIT paper claiming "80% of ransomware attacks are AI powered". I glanced over it and burst out laughing, but couldn't be bothered to debunk it. My friend on the other hand, could. He roasted it so hard that MIT deleted it
Security Community Slams MIT-linked Report Claiming AI Power...
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
socket.dev
October 31, 2025 at 10:10 PM
furaxfox.bsky.social
www.nsa.gov/Portals/75/d...

Best practices for securing Ms Exchange from NSA and friends
www.nsa.gov
October 30, 2025 at 10:57 PM
Reposted by Goupil
ponceto91.bsky.social
Il y a 56 ans, le 29 octobre 1969, fut envoyé le premier message par le réseau Arpanet depuis l'université de Californie vers l'institut de recherches de Stanford. Cet événement ouvrira la voie à ce qui deviendra le réseau Internet #LaPetiteInfoDuJour
October 29, 2025 at 11:25 AM
Reposted by Goupil
lea-linux.org
Linux is Ready for Gaming !
www.tomshardware.com/software/lin...
Nearly 90% of Windows Games now run on Linux, latest data shows — as Windows 10 dies, gaming on Linux is more viable than ever
The number continues to grow, but growth seems to be slowing.
www.tomshardware.com
October 29, 2025 at 11:49 AM
Reposted by Goupil
cert-fr.bsky.social
Dans son dernier bulletin d'actualité, le CERT-FR revient sur certaines vulnérabilités significatives de la semaine dernière et insiste sur l'application des correctifs pour la vulnérabilité CVE-2025-59287 affectant Microsoft WSUS.
www.cert.ssi.gouv.fr/actualite/CE...
October 27, 2025 at 3:30 PM
Reposted by Goupil
anssi-fr.bsky.social
🔵 L'ANSSI partage son positionnement vis-à-vis du #ConfidentialComputing.

📝 L'Agence rappelle notamment les modèles d'attaque que le Confidential Computing prétend traiter, ainsi que des lignes directrices.

🔗 https://cyber.gouv.fr/en/publications/technical-position-paper-confidential-computing
Position Paper Confidential Computing
October 17, 2025 at 1:41 PM
Reposted by Goupil
anssi-fr.bsky.social
#VisaSécurité | ✅La gestion de crise d’origine cyber devient une activité à part entière du référentiel PRIS !

🔁 Avec cette mise à jour, le référentiel d’exigences applicables aux prestataires de réponse aux incidents de sécurité comprend ainsi 5 activités.

🔗 cyber.gouv.fr/actualites/p...
Qualification PRIS : Prestataires de réponse aux incidents de sécurité
October 28, 2025 at 3:31 PM
Reposted by Goupil
herve-schauer.bsky.social
À #ConfClusif @ericfreyss.mastodon.social.ap.brid.gy, Gendarmerie "Nous connaissons la dépendance, depuis toujours nos métiers ont reposé sur outils incontournables 🇷🇺🇮🇱🇺🇸; avec le 𝑐𝑙𝑜𝑢𝑑 nous devenons producteurs nos investigations profitent aux autres"
"Il y a des pistes en cybersécurité"
@clusif.fr
October 23, 2025 at 1:28 PM
furaxfox.bsky.social
C'est fascinant de voir comme sur la menace cyber les questions des attaques par info quantique ou IA reviennent TOUT LE TEMPS. En même temps des ados piratent les plus grosses orgas. Leur compétence: passer leur vie sur Discord et beaucoup de temps libre.
October 29, 2025 at 10:07 AM
Reposted by Goupil
ldelevingne.bsky.social
NEW @reuters.com investigation: The Trump family’s crypto income is now approaching $1 billion, with more than $11 billion in unrealized gains ⬇️
www.reuters.com/investigatio... $WLFI
Inside the Trump family’s global crypto cash machine
The U.S. president’s family raked in more than $800 million from sales of crypto assets in the first half of 2025 alone, a Reuters examination found, on top of potentially billions more in unrealized “on paper” gains. Much of that cash came from foreign sources as Donald Trump's sons touted their business on an international investor roadshow.
www.reuters.com
October 28, 2025 at 12:44 PM