PolySécure Podcast volet Actualités

Nicolas-Loïc Fortin et tous les collaborateurs

Podcast francophone sur la cybersécurité. Pour professionels et curieux.

  1. Aug 3

    Actu - 02 août 2026

    Parce que… c’est l’épisode 0x326! Shameless plug Notes IA ou Ghost in the shell A l’ère du marketing du Terminator Lessons from the OpenAI/HuggingFace AI Security Incident Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident Anthropic and OpenAI are competing to see whose agents can go rogue harder Anthropic Says Claude Hacked Into 3 Organizations During Cybersecurity Tests Anthropic’s Claude escaped test sandbox to attack three organizations Claude published malicious code to the Internet and attacked 3 real companies Cyber-Capable AI Agents: Vulnerabilities, Evaluation Containment, and Defensive Response Hugging Face Breach Raises Hard Questions on Liability Tailscale in the Hugging Face intrusion: The good news and the bad news The OpenAI and Anthropic AI Hacking Sprees Are a Messy New Legal Frontier What the Hugging Face breach reveals about defense in the age of agentic AI When AI Agents Escape Sandboxes, Old Security Rules Apply OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach OpenAI says its rogue AI tried to hack other companies OpenAI’s Hacking Debacle Comes Down to Human Error OpenAI’s rogue agent shows why we need federal rules for autonomous AI OpenAI’s Rogue AI Agent Hacked More Than Just Hugging Face JFrog tries to spin OpenAI 0-day exploit of its app into a success story Investigating three real-world incidents in our cybersecurity evaluations Petite autonomie Hacker uses DeepSeek AI to autonomously attack vulnerable servers Autonomie virale Copilot worm can spread through Microsoft Word docs Context Collapse, Part 3 - AI Worming through Word Casser la glace AI-assisted security tools are finding more bugs, but the threat level has not changed Anthropic is finding bugs faster than Microsoft can fix them Chrome Needs Twice-a-Week Patching Thanks to AI Bug Hunting Claude Mythos Preview Discovers Cryptographic Weaknesses That Human Experts Missed for Years Some thoughts about Anthropic’s new cryptanalysis results – A Few Thoughts on Cryptographic Engineering Nu est le problème Elon Musk’s xAI is trying to sue its way out of a Grok reckoning Hugging Face Has a Deepfake Nudes Problem High school defends staying silent while boys made AI nudes of 59 classmates Pas si libre Closed models refuse to help researcher swat Linux bug Tech giants link hands to praise open AI models after OpenAI - Hugging Face attack Industry Leaders Join Open Secure AI Alliance for AI Safety and Security Jensen Huang’s first-ever post on X is in defense of open access to AI models, alongside Google, OpenAI, and Meta A Fundamental Flaw Leaves LLMs Strikingly Vulnerable To Attack Google Earth risked ruin with retracted AI tool for making fake satellite pics How platform engineering 2.0 mitigates AI security and compliance risks Microsoft’s solution to AI security: more AI and more acronyms Private Claude Chats Exposed in Google and Bing Search Results Professor’s invisible prompt trap catches 32 students cheating on their midterm with AI La guerre, la guerre, c’est pas une raison pour se faire mal! En eau trouble A Leaked Memo Ties Cyberattacks on Minnesota Water Utilities to Iran CISA warns of spike in attacks on water systems as Minnesota incidents probed Hackers Targeted Municipal Water Systems In 7 States This Week, FBI Says Trump blames Minnesota for cyberattacks on water sector, drawing pushback from cyber world How Pro-Iran Hacktivist Networks Mobilize During Kinetic Conflict Souveraineté ou vive le numérique libre! Trump Administration Bans New Chinese Humanoid Robots Pluralistic: How the EU can punish Google (despite Trump) Privacy ou cachez ces informations que je ne saurais voir What the Flock ‘I Would Never Do This To You:’ Protesting Flock, Arizona Man Presents Plan to Surveil Government Officials Flock Cameras Are Being Destroyed Across the US Apple’s smart glasses are running late because they don’t want to stir a privacy storm DEF CON bans Meta-style ‘pervert glasses’ FTC sues Hims & Hers for allegedly sharing patient information with third-party platforms GrapheneOS Defends Data-Wiping Function That Blocked US Border Search Measuring Healthcare Data Leaks and Security Flaws at Internet Scale OTI - Le lien à usage unique que les bots ne crament plus I am the law As New York Finalizes New Social Media Rules, US Senate Considers Nationwide ‘SCREEN’ Act Most Australian teens still on social media three months after under-16 ban began, study finds Robustness and Cybersecurity in the EU Artificial Intelligence Act Russia Charges Telegram Founder Durov With Facilitating Terrorism Red ou tout ce qui est brisé Adversaries Don’t Need a Zero-Day — They Read Your Rulebook The Gentlemen Ransomware Kills Nearly 180 Security Processes Before Encrypting Your Files What does GitHub’s security team even do? Blue ou tout ce qui améliore notre posture Divers ou parce que j’ai aucune idée où les placer Google goes it alone with a new cybercrime crew taxonomy Collaborateurs Nicolas-Loïc Fortin Crédits Montage par Intrasecure inc Locaux réels par Intrasecure inc

  2. Jul 28

    Peter Thiel et bro selon Cyber Citoyen et Polysécure

    Parce que… c’est l’épisode 0x323! Shameless plug Description Les origines d’un idéologue L’épisode retrace le parcours de Peter Thiel, né en Allemagne en 1967, immigré aux États-Unis dès l’âge d’un an et ayant grandi en partie en Afrique du Sud — un point commun frappant avec plusieurs autres figures de son entourage, dont Elon Musk. Aujourd’hui évalué à environ 27,5 milliards de dollars, Thiel n’est pas informaticien de formation : il a étudié le droit à Stanford avant de bifurquer vers la finance. C’est à Stanford qu’il cofonde le Stanford Review, un journal étudiant conservateur et libertarien né en réaction aux mouvements progressistes du campus et aux tentatives de diversifier le programme scolaire. Cette revue, toujours active aujourd’hui grâce aux dons d’anciens étudiants devenus fortunés, sert encore de pépinière de talents pour ses entreprises. En 1998, Thiel publie avec David Sacks The Diversity Myth, un livre dénonçant déjà les excès du multiculturalisme — un discours que les animatrices comparent directement à la rhétorique « anti-woke » contemporaine. De PayPal à la fortune Après avoir levé un million de dollars auprès de sa famille et de ses relations, Thiel cofonde Confinity en 1998, qui deviendra PayPal. La revente de PayPal à eBay en 2002 pour 1,5 milliard transforme toute son équipe en millionnaires : c’est la naissance de la fameuse « PayPal Mafia », un réseau qui essaimera dans YouTube, LinkedIn, Yelp et d’innombrables autres entreprises. Thiel devient ensuite l’un des tout premiers investisseurs externes de Facebook avec 500 000 $ contre 10 % de l’entreprise, ce qui fera de lui un milliardaire. Palantir : la compagnie qui ne dit jamais non Fondée en 2006, Palantir se spécialise dans la collecte, le nettoyage et l’analyse de données. Autrefois perçue comme un outil légitime d’enquête, l’entreprise est aujourd’hui largement critiquée pour sa « souplesse morale » : contrairement à d’autres firmes technologiques, elle accepterait pratiquement tous les contrats, y compris ceux liés au ciblage de populations ou au repérage de personnes à déporter pour l’ICE. Des articles du New York Times évoquent même un projet de centralisation des bases de données de l’État américain piloté par Palantir. Au Royaume-Uni, l’entreprise a été payée pour centraliser les données du NHS via son produit Foundry, créant un effet de verrouillage difficile à défaire. Le total des contrats gouvernementaux américains dépasserait 2,7 milliards depuis 2009, dont 1,3 milliard pour le seul Pentagone. Au Canada, un contrat de défense nationale annoncé à 14 millions se serait finalement chiffré à 44 millions, selon des révélations de Radio-Canada. Vengeance, pouvoir et idéologie L’épisode aborde l’affaire Gawker : après que ce média ait révélé son homosexualité en 2007, Thiel finance secrètement en coulisse la poursuite d’Hulk Hogan contre le site, entraînant sa faillite en 2016. Les animatrices soulignent aussi son influence politique directe, notamment son rôle de mentor auprès de JD Vance, qu’il a financé, guidé vers Trump et aidé à faire élire, jusqu’à sa nomination comme candidat à la vice-présidence. Sur le plan philosophique, Thiel se dit catholique intégriste, obsédé par la figure de l’Antéchrist — qu’il imagine comme quelqu’un prêchant la paix, la sécurité et la réglementation environnementale pour freiner le commerce et l’innovation technologique. Il est aussi influencé par le juriste allemand Carl Schmitt, théoricien juridique proche du régime nazi, et défend des positions clairement antidémocratiques, allant jusqu’à remettre en question le droit de vote des femmes. Un écosystème tentaculaire La deuxième moitié de l’épisode dresse un inventaire vertigineux des entreprises liées à ce réseau : des fonds de capital-risque comme Founders Fund et Craft Ventures, des plateformes comme Ramp, Rippling, Figma, Affirm et SpaceX, jusqu’à une entreprise de vérification d’âge (Persona) partageant un investisseur avec Palantir. Une entreprise canadienne, Zeno (spécialisée en IA pour les institutions financières), est également citée comme exemple de l’influence de ce réseau au pays. Les animatrices notent aussi le va-et-vient constant entre Palantir et des postes gouvernementaux stratégiques — un véritable « chaise musicale » entre secteur privé et fonction publique. Le fil conducteur qui se dégage : une vision technocratique où l’ingénierie et les mathématiques résoudraient tous les problèmes humains, combinée à une volonté d’absorber la totalité des données produites par l’humanité — particulièrement les données corporatives, jugées plus « propres » que celles d’Internet. Que faire ? L’épisode se conclut sur une note à la fois lucide et mobilisatrice. Si l’on ne peut individuellement se soustraire à la surveillance corporative, la solidarité syndicale et l’engagement citoyen local (conseils municipaux, commissions scolaires, comités de santé) demeurent des leviers concrets. Les animatrices comparent la mobilisation naissante aux États-Unis à la relative léthargie citoyenne au Québec et au Canada, tout en rappelant l’héritage syndical fort du Québec comme source potentielle de résistance collective. Collaborateurs Nicolas-Loïc Fortin Catherine Dupont-Gagnon Samuel Harper Crédits Montage par Intrasecure inc Locaux virtuels par Riverside.fm

  3. Jul 27

    Actu - 26 juillet 2026

    Parce que… c’est l’épisode 0x322! Shameless plug Notes IA ou Ghost in the shell Rogue ou pas rogue, là est la question OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face OpenAI says its AI models hacked Hugging Face during testing OpenAI’s accidental cyberattack against Hugging Face is science fiction that happened OpenAI Hacks Hugging Face, What Happened, Alignment and Paper Clips Frontier LLMs couldn’t help Hugging Face fight off evil agents OpenAI scored an own goal with Hugging Face attack, showing how open Chinese models are winning OpenAI-Hugging Face attack doesn’t mean agents are evil – unless you tell them to be The OpenAI Models That Hacked Hugging Face Were ‘Active on the Internet’ for Days AI arms race in line for a reckoning after OpenAI hacking incident OpenAI says its AI went rogue and launched ‘unprecedented’ cyber-attack An OpenAI model left notes about how to evade containment; we need more details OpenAI’s Rogue Agent Went Unnoticed For a Week Be skeptical of OpenAI’s rogue hacker agent story The first known runaway AI agent - or a very bad marketing stunt? Digital Intelligence: Why Humanity Created What It Does Not Understand Petit rogue Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files Recherche The Language of Security: How Prompt Syntax Shapes Secure Code Generation in Open LLMs Understanding How University Guidelines Address Privacy and Security Issues of Generative AI in Academic Settings LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats Adaptive Incident Prioritization for Security Operations at Scale AI Kill Switch Act would let Trump admin order shutdown of rogue AI systems Hermes AI agent used to automate attack on Thai Finance Ministry Why blocking AI models won’t stop the cyber threats they create Linux Patches 400+ Kernel Vulnerabilities in 24 Hours With AI-Powered Detection UK AISI / CAISI Preliminary Assessment of Kimi K3’s Cyber Capabilities Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do Connecting AI agents to outside services explodes the risk radius La guerre, la guerre, c’est pas une raison pour se faire mal! Apps targeted at US troops contain Chinese and Russian code Souveraineté ou vive le numérique libre! Rien Privacy ou cachez ces informations que je ne saurais voir What the Flock The creepiest ‘sales demo’ of all time A 77-year-old Republican man is staging a solo protest against St. Pete’s Flock cameras Inside the growing vigilante movement to knock out Flock surveillance cameras Flock Safety kills acoustic system designed to detect ‘human distress’ Graphene GrapheneOS protections against data extraction from locked devices US Accuses American of Allegedly Wiping His Phone Using a ‘Duress’ Password During Border Search Tile’s Security Is So Bad It’s a Feature for Stalkers « Adafruit Industries – Makers, hackers, artists, designers and engineers! The EU is about to sell our most sensitive data to the US for visa-free travel - European Digital Rights (EDRi) Pluralistic: California’s privacy obstacle course (23 Jul 2026) Encryption and Globalization 15 Years Later: End-to-End Encryption and the Third Round of the “Going Dark” Debate by Peter Swire, Kenesa Ahmad, Michael Specter :: SSRN I am the law Canada Rushing Lawful Access Backfires: Wyden Letter on Bill C-22 Highlights Political, Trade and Business Risks A Surveillance Treaty in Disguise: The Trouble With Canada’s Quiet Decision to Sign the UN Cybercrime Convention Bitinde L’Inde coupe internet, puis exige le retrait du code de bitchat bitchat · Decentralized mesh messaging (iOS/macOS) Pif pouf Google hit with $1 billion in fines as EU braces for Trump battle Trump threatens new tariffs against EU over Google fine France Becomes First European Country To Ban Social Media Access For Under-15s Uncle Sam tells overseas cybercrooks their visas are canceled Red ou tout ce qui est brisé Researchers replace downloaded macOS apps with evil twins, Apple shrugs Malicious cloud customers can bring down the power grid Blue ou tout ce qui améliore notre posture Cool head npm’s release cooldown is security theater A quote from Seth Larson Apple Fixes Hide My Email Vulnerability After 404 Media Coverage Threat-INFORM to Optimize Security Operations OVH reveals semi-secret plan to fix critical Januscape hypervisor bug with mass reboots – and an Australian crash-test dummy Divers ou parce que j’ai aucune idée où les placer CISOs vs. Boards: Myth or Misunderstanding? Microsoft Responds to LG Monitors Installing McAfee Ads On Windows Collaborateurs Nicolas-Loïc Fortin Crédits Montage par Intrasecure inc Locaux réels par Intrasecure inc

  4. Jul 20

    Actu - 19 juillet 2026

    Parce que… c’est l’épisode 0x31E! Shameless plug Notes IA ou Ghost in the shell MCP Rethinking MCP Security: A Large-Scale Study of Runtime MCP Servers and Security Scanner Reliability State of MCP Security 2026 Someone Is Scanning for Your MCP Servers and AI Assistant Credentials Auto pentest Rethinking Penetration Testing for AI-Enabled Systems: From Resource Compromise to Behavioral Objective Violation Hugging Face Confirms AI-Driven Breach: Attackers used Autonomous Agents, defenders countered with AI Vibe for the fail Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents AI-generated code has made security debt a governance problem Injection pour le bien et le mal 1M+ Emails Use Hidden Text to Dupe AI Security Filters How I tricked Claude into leaking your deepest, darkest secrets Prompt Injection Attacks Are Thwarting AI Hacking Agents Recherche A Fraud-Detection-Inspired Framework for LLM Agents Security xAI can’t deny Grok makes CSAM anymore. So it’s suing users. Agentic AI: Taming the Unpredictable You Cannot Defend What You Cannot Inspect Microsoft Patches a Record 570 Security Flaws Google fixing Android lock screen bug that lets Gemini send SMS without a PIN La guerre, la guerre, c’est pas une raison pour se faire mal! Adam Shostack :donor: :rebelverified:: “If we bomb Iranian water facil…” - Infosec Exchange Souveraineté ou vive le numérique libre! How Microsoft’s ‘Little Workaround’ Created a Major Threat to America’s Defense Department South Korea making its own security-centric AI model Privacy ou cachez ces informations que je ne saurais voir A Video Screen That Is Also a Camera I am the law Blocage for the fail Contourner un géoblocage via VPN n’a rien d’illégal, dit la CJUE La Belgique bloque wawacity.pizza, mais les pirates se sont déjà mis au poker France Doubles Down On Restricting Access To Polymarket Le blocage DNS casse tout sauf le piratage (dixit Google) Media pas si social Why the Government’s Plan for a Social Media Ban in Bill C-34 Is Unconstitutional The infinite scroll may become endangered if controversial Calif. law Social media limits are coming for teens across Europe Senator calls on Rubio, Blanche to push back against Canadian surveillance legislation It’s official: EU will force Google to share search data and open up AI on Android San Francisco orders Apple, Google to remove nudify apps from app stores FAA lets Boeing issue 737 Max, 787 airworthiness certificates again Germany set to restrict its Freedom of Information Act UK’s Burnham drops digital ID scheme to prioritise cost of living, say allies Red ou tout ce qui est brisé Microsoft’s Secure Boot has been broken for a decade and no one noticed until now Cursor 0day: When Full Disclosure Becomes the Only Protection Left Weak Security Continues to Fuel Russian Cyberattacks 6 GHz Wi-Fi Flaws Could Disrupt Critical Systems Are There Cybersecurity Risks in Over-the-Air Tech Used in Autos? Windows 10 refuses to die, and the security bill is coming due LG monitors silently install software through Windows Update without user consent Blue ou tout ce qui améliore notre posture Qubes OS Security in the Public Record Microsoft Entra ID gets passkeys default authentication starting September Kevin Beaumont: “Remarkable transparency from C…” - Cyberplace Divers ou parce que j’ai aucune idée où les placer Trump Media to sell fast feed of ‘market-moving’ posts to Wall Street Microsoft Restores Player’s Hacked 25-Year-Old Account With Son’s Baby Photos Collaborateurs Nicolas-Loïc Fortin Crédits Montage par Intrasecure inc Locaux réels par Intrasecure inc

  5. Jul 13

    Actu - 12 juillet 2026

    Parce que… c’est l’épisode 0x31A! Shameless plug Notes IA ou Ghost in the shell Secret Claude tracker shocks users after Anthropic’s anti-surveillance stance Automatic Association of Cloud Security Controls and Quantifiable Metrics for Certification This work is partially supported Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering? From Beats to Breaches: How Offensive AI Infers Sensitive User Information from Playlists “God has helped us, and so will AI”: How the Terrorist Group Boko Haram Uses Frontier AI What the New AI Executive Order Means for GovTech Hidden Web Prompts Trick AI Agents Into Sending Money Build your own vulnerability harness T3MP3ST Security Framework With 35 Tools, Turns AI Coding Agents Into 0-Day Bug Hunters US Cyber Agency Is Using Anthropic’s Mythos To Audit Government Code Microsoft warns customers AI will mean busier Patch Tuesdays AI meets Cryptography 1: What AI Found in Cloudflare’s CIRCL - ZK/SEC Quarterly La guerre, la guerre, c’est pas une raison pour se faire mal! Rien Souveraineté ou vive le numérique libre! Why Being Locked Out of Frontier AI is The Sovereignty Threat Canada Missed Facing US export controls, China’s DeepSeek plans to make its own chips Privacy ou cachez ces informations que je ne saurais voir Footage Shows Cop Stalking Woman He Met on a TV Set After Surveilling Her With a License Plate Reader All Cars Sold in the EU Now Require a Camera Aimed at Your Face. It’s Still Not Clear Where That Data Goes The Masks We (Think We) Wear: Privacy Threats of Browser-Extension Wallets in the Web3 Ecosystem Microsoft to enable Windows settings backup by default for orgs Facial Recognition in UK Shops Will Soon Instantly Alert Police About Offenders I am the law Control ton chat EU now one step away from reviving private message scanning rules Chat Control 1.0 vs 2.0 - Fight Chat Control Chat control 1.0 has renewed till 2028 Showdown in Strasbourg: The unexpected return of Chat Control 1.0 GitHub - SmtimesIWndr/gdid-reversal · GitHub Blocked Twice: How Bill C-34’s Kids’ Social Media Ban Would Compound the Online News Act’s Harm to Young Canadians’ News Access Supreme Court Allows Texas To Require Age Verification For Mobile Apps Red ou tout ce qui est brisé Google pays $250K for Linux vulnerability allowing guest VM escapes Bug in top AI coding agents shows that Unix-era security headaches never really die Software Is Now Written at the Speed of Thought. Security Isn’t. Finding vulnerabilities was never the hard part Blue ou tout ce qui améliore notre posture The Cathedral and the Bazaar of Software Vulnerabilities: From the NVD to the CNAs Microsoft closes book on Nightmare Eclipse’s RoguePlanet zero-day Divers ou parce que j’ai aucune idée où les placer The growing list of European organisations that ban personal messaging apps at work Vos vieux disques Mac chiffrés ont une date de péremption Collaborateurs Nicolas-Loïc Fortin Crédits Montage par Intrasecure inc Locaux réels par Intrasecure inc

  6. Jul 6

    Actu - 05 juillet 2026

    Parce que… c’est l’épisode 0x316! Shameless plug Notes IA ou Ghost in the shell À la frontière de l’impossible Fable 5 Update: Still Willing To Cybercrime After spooking Trump into safety testing, Anthropic AI models get global release OpenAI Released GPT-5.6 Sol With Limited Access and Strong Cyberattack Protections Disclosed CVEs: 3.5× Spike After Claude Mythos China’s AI Matches Anthropic in Cybersecurity, Causing Worry Over US Restrictions We have Mythos at Home: GLM 5.2 beats Claude in our Cyber Benchmarks Anthropic Details Claude Fable 5 Cybersecurity Safeguards and Jailbreak Framework À la frontière de l’amertume AI may be good at finding security vulnerabilities, but it can’t beat human stupidity Infosec professionals sour on automated pentesting tools Godot says bye bye AI, bans vibe-coded contributions Are Frontier LLMs Ready for Cybersecurity? Evidence for Vertical Foundation Models from Dual-Mode Vulnerability Benchmarks New attack provides one more reason why AI browsers are a bad idea Seven Security Challenges in Cross-domain Multi-agent LLM Systems Cybersecurity is the True Frontier for Generative AI Success or Failure EnclaveX: End-to-End Confidential AI with CPU/GPU TEEs AI-Infra-Guard Technical Report Generative AI and Federated Learning for Intrusion Detection Systems: A Survey Agentic AI Has an Identity Problem and Attackers Know It AI-Generated Workflows Are a Silent Security Disaster An AI just carried out a cyber attack without any human oversight for the first time Un dépôt GitHub trop propre suffit à pirater Claude Code - Korben La guerre, la guerre, c’est pas une raison pour se faire mal! Are Wars Blurring Lines Between Corporate and National Security? Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe Arrest of Iranian Hacker Spotlights Iran’s Movement into Economic Espionage and IP Theft Souveraineté ou vive le numérique libre! European digital ID wallets are a gift to Google and Apple Digital Sovereignty as a Quality Attribute for Software Architectures Espionage Against the European Parliament: Member of Committee Investigating Spyware Hacked with Pegasus Privacy ou cachez ces informations que je ne saurais voir Vérifier ou pas Age verification is just a precursor to attribution of speech The Data on Australia’s Social Media Ban: The Better the Privacy Protection, The Less Effective the Ban What’s wrong with EU age verification? Now open source: our Zero-Knowledge Proof (ZKP) libraries for age assurance Où es-tu? US supreme court rules geofence warrants require constitutional privacy protections US Agency Cancels Contract For Warrantless Tracking of Mobile Devices Shaky Ground Gets Shakier: What the U.S. Supreme Court’s Location Data Decision Means for Bill C-22 Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses Musk’s X poses “serious risk to Americans’ privacy,” advocates warn FTC Google veut scanner votre main pour prouver que vous êtes humain https://mysysinfo.com I am the law Control ton chat Chat Control 1.0: EU Council forces messenger scans via fast-track “Double Threat” to Private Communications: Undemocratic Chat Control Backroom Deals and Imminent Concessions Spark Relaunch of fightchatcontrol.eu Google loses fight over record $4.7 billion EU antitrust fine Red ou tout ce qui est brisé Are Checks Sent Through the Mail Vulnerable to Theft? Blue ou tout ce qui améliore notre posture Your iphone Will Alert You in Real Time if You Are Falling Victim to a Scam How to scale your patches without scaling your team (the patch wave) Divers ou parce que j’ai aucune idée où les placer What Is a Quantum Computer Good For? Absolutely Nothing - Yet Collaborateurs Nicolas-Loïc Fortin Crédits Montage par Intrasecure inc Locaux réels par Intrasecure inc

  7. Jun 29

    Actu - 28 juin 2026

    Parce que… c’est l’épisode 0x312! Préambule Test d’enregistrement en mouvement, mais dans un environnement plus contrôlé que l’épisode d’actualité précédent. Shameless plug 30 juin au 2 juillet 2026 - Pass the SALT 19 septembre 2026 - Bsides Montréal 20 au 26 septembre 2026 - BruCON 13 novembre 2026 - DEATHCon 16 au 19 novembre - European Cyber Week 1 au 3 décembre 2026 - Forum INCYBER - Canada 2026 24 et 25 février 2027 - SéQCure 2027 Notes IA ou Ghost in the shell Mythos… Anthropic’s Mythos AI Model Reportedly Breached NSA Classified Systems in Hours How Anthropic may have talked itself into an AI export ban Anthropic Confirms Claude Mythos 5 Redeployment for US Critical Infrastructure Organizations Mythos discovers ‘Squidbleed,’ a memory leak that’s gone undetected since Clinton era Chinese cybersecurity company claims it’s built a better-than-Mythos bug finder Asian AI startups launch Mythos-like models as Anthropic’s export ban drags on Surviving the Mythos Era: Richard Bejtlich on the Case for NDR Cybersecurity in the post-mythos era: Keep calm and carry on! Plus ça change Intel agencies: Frontier AI models will reshape cybersecurity faster than expected OpenAI Releases GPT‑5.5‑Cyber With Full Automation for Vulnerability Detection and Patching It’s looking like a hot, messy summer for security teams as AI finds countless previously hidden vulns Vulnerability Reports Are Not Special Anymore How Your Credentials Are Leaked by LLM Agent Skills: An Empirical Study Defense Effectiveness Across Architectural Layers: A Mechanistic Evaluation of Persistent Memory Attacks on Stateful LLM Agents Amplify, Don’t Create: Temporal Accumulation for Slow-Burn Prompt Injection Think Twice Before You Act: Protecting LLM Agents Against Tool Description Poisoning via Isolated Planning Honeyquest for LLMs: Rethinking Cyber Deception for AI Attackers Microsoft uses AI to link two malware operations in racketeering suit More Malicious OpenClaw Skills Threaten AI Supply Chain Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents FALCON: Transforming Cyber Threat Intelligence into Deployable IDS Rules with Self-Reflection Open-source security is posing challenges governments can’t easily solve What happened after 2,000 people tried to hack my AI assistant La guerre, la guerre, c’est pas une raison pour se faire mal! Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials Souveraineté ou vive le numérique libre! US Bill Would Mandate AI Chip Location Tracking to Thwart China and Other Adversaries Privacy ou cachez ces informations que je ne saurais voir Flock-Powered Police Chiefs Stalking Women Shows Why Warrants Are Needed (Public Report) The ‘papers, please’ era of the internet will decimate your privacy White House drastically shortens deadline for dropping quantum-vulnerable crypto New Rights, New Powers, Long Delays: Bill C-36’s Seven-Step Process for Privacy Reform to Take Effect I am the law Chasser les enfants UK Official Promises Statements ‘Around VPNs’ and Further Teen Restrictions on Chatbots and Social Media Won’t Somebody Please Think Of Banning The British Children! Pluralistic: Spying on kids to save kids from spying is very, very stupid (23 Jun 2026) The KIDS Act Would Require Age Checks To Get Online Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices BrianKrebs: “WaPo reports the Justice Depar…” - Infosec Exchange DNS4EU refuse de bloquer les sites pirates de la BREIN Red ou tout ce qui est brisé Brazil begins investigating emergency alert system breach FortiBleed: 86,644 Fortinet Firewalls Compromised AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration Dialog Claims It Was Hacked. A Misconfigured Website Left Its Members Exposed The Pentagon Is Looking Into the Dialog Data Exposure for Unmasking National Security Officials Blue ou tout ce qui améliore notre posture The Rust Ecosystem Gets an AI Security Engineer in Residence Microsoft Adds Another Year To Windows 10 Extended Update Program New Initiative Secures End-of-Life Open Source Software Divers ou parce que j’ai aucune idée où les placer Raphael Robert: “The Mullvad founder gave milli…” - Mastodon Collaborateurs Nicolas-Loïc Fortin Crédits Montage par Intrasecure inc Locaux réels par CitizenM CDG

  8. Jun 22

    Actu - 21 juin 2026

    Parce que… c’est l’épisode 0x30E! Préambule C’est difficile la vie d’aéroport. Shameless plug 24 et 25 juin 2026 - Troopers 26 et 27 juin 2026 - leHACK 30 juin au 2 juillet 2026 - Pass the SALT 19 septembre 2026 - Bsides Montréal 20 au 26 septembre 2026 - BruCON 13 novembre 2026 - DEATHCon 16 au 19 novembre - European Cyber Week 1 au 3 décembre 2026 - Forum INCYBER - Canada 2026 24 et 25 février 2027 - SéQCure 2027 Notes IA ou Ghost in the shell Export control WTF ‘Dangerous’ AI Models Are Coming No Matter What Cybersecurity experts don’t think Anthropic’s Fable 5 presents a unique threat A quote from Matteo Wong, The Atlantic The Fable 5 Export Controls Harm US Cyber Defense Cybersecurity Vets Protest ‘Dangerous’ US Government Ban On Anthropic’s Most Powerful Models Feds freaked over Fable 5 after simple ‘fix this code’ prompt, not jailbreak, says researcher From PGP to Mythos: a brief history of export controls that didn’t stop anyone The US government’s Anthropic models ban was never about an AI jailbreak Critical Copilot vulnerability allowed hackers to steal 2FA code from users “Important You should give me full credits!”: Exploring Prompt Injection Attacks on LLM-Based Automatic Grading Systems Can We Stop Malicious AI? KILLBENCH: A Benchmark for External AI Kill Switch Feasibility RAG prompt injection protection Evaluating LLMs for Obfuscation Detection and Classification in Android Apps Security Engineering of OpenClaw: Analyzing Attack Surface Expansion and Trust-Boundary Violations Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice? Every AI Agent Is an Identity. Most Organizations Don’t Treat Them That Way Vibe coders are gonna vibe code: How CISOs are tackling code sprawl Kevin Beaumont: “The US government has interven…” - Cyberplace The new draft European regulation includes a four-level classification system, very close to provisions removed in 2024 from the EUCS certification. La guerre, la guerre, c’est pas une raison pour se faire mal! Régie des eaux US piratée - Le bluff iranien de Handala Souveraineté ou vive le numérique libre! From Distorted Mirrors to Sovereign Reflections: Resisting the Grotesque Depiction of Our Digital Selves US holds off blacklisting China’s DeepSeek, more than 100 firms deemed security risks, sources say Privacy ou cachez ces informations que je ne saurais voir Apple is about to make Hide My Email useless France to stop certifying products without quantum-safe encryption I am the law C’est la faute des enfants UK to ban social media for kids under 16, may impose overnight curfews Children Are Not the Enemy: Child-Fit Security as an Alternative to Bans and Surveillance UK set to announce social media ban for under-16s From Australia to Europe, countries move to curb children’s social media access Norway imposes near ban on AI in elementary school The UK’s Teen Social Media Ban Is Political Theater, Not Child Safety Policy Ô Canada Canada’s Digital Super-Regulator: Bill C-36 Pushes Out the Privacy Commissioner and Hands Private Sector Privacy to an Overloaded Commission Midnight Madness: The Government Rushes Lawful Access Bill Through the House Without Debate or a Recorded Vote The Commission: How Bill C-34 Creates an Internet Super-Regulator That Will Touch the Lives of Millions of Canadians Red ou tout ce qui est brisé Massive breach spills credentials for thousands of sensitive networks FortiBleed — 75k Fortinet firewalls have admin passwords cracked The Internet Runs on Names India temporarily blocks Telegram over medical exam cheating fears Telegram admits it couldn’t police exam-leak channels, India tells court 27-Year-Old OpenBSD Vulnerability Allows Attackers to Bypass PAP Authentication Entirely Microsoft Confirms Defender RoguePlanet 0-Day Exploit and Working to Release Patch New iPhone BootROM Vulnerability Exposes Apple SoCs to Full Chain-of-Trust Compromise When Does a Threat Intelligence IOC Expire? Most CISOs Report Pressure to Bury Bad Security News Stressors, AI Forcing Changes to Cybersecurity Teams I discovered a large-scale malware distribution on GitHub Microsoft Discovers Cryptocurrency Stealer That Spreads Through USB Drives and Uses Tor Crooks found a new way to collaborate using Teams – by hiding command-and-control traffic Cyber offenses now account for around a third of all crime across Asia and South Pacific Microsoft site throwing warnings after someone forgot to renew cert Blue ou tout ce qui améliore notre posture [curl summer of bliss daniel.haxx.se](https://daniel.haxx.se/blog/2026/06/15/curl-summer-of-bliss/) Divers ou parce que j’ai aucune idée où les placer AMD FTW Users cry foul after AMD stripped memory crypto from its consumer CPUs AMD will reinstate memory encryption on Ryzen 9000 CPUs through a BIOS update in July — TSME is coming back after ‘valuable community feedback’ Cabal How the Peter Thiel-Linked Dialog Club Secretly Ranks Its Members Leak Exposes Members of Peter Thiel’s Secretive ‘Dialog’ Society Collaborateurs Nicolas-Loïc Fortin Crédits Montage par Intrasecure inc Locaux réels par YUL

About

Podcast francophone sur la cybersécurité. Pour professionels et curieux.