|
Scooped by
Gust MEES
onto ICT Security-Sécurité PC et Internet May 21, 2014 10:03 AM
|
Scoop.it!
Auction site confirms that hackers compromised an eBay database containing encrypted eBay passwords and other non-financial information.
 Your new post is loading...
Your new post is loading...
Scoop.it!
Why (And How) Teachers Should Start Learning and Teaching Cyber-Security . What should get be taught and learned more in the 21st Century while using ICT?
In the 21st Century, Education has a BIG responsibility to adapt to the very quick change in the world and to teach the students the knowledge they need and which are required to fulfill the market’s needs!
The market’s needs are ALSO to employ people with the basics of Cyber-Security knowledge as a modern company needs to protect its online reputation and a data loss could be lethal to them, their ruin eventually! SO, the new employees is the students coming out of school, College, High school, Universities; ALL of them need to have the basic knowledge of Cyber-Security to be competitive in a working market where there is more and more unemployment worldwide…
===> A company would take advantage of a new employee who as already the necessary knowledge of Cyber-Security as the company doesn’t need to train him, which saves it a lot of money! <===
Gust MEES's insight:
In the 21st Century, Education has a BIG responsibility to adapt to the very quick change in the world and to teach the students the knowledge they need and which are required to fulfill the market’s needs!
The market’s needs are ALSO to employ people with the basics of Cyber-Security knowledge as a modern company needs to protect its online reputation and a data loss could be lethal to them, their ruin eventually! SO, the new employees is the students coming out of school, College, High school, Universities; ALL of them need to have the basic knowledge of Cyber-Security to be competitive in a working market where there is more and more unemployment worldwide…
===> A company would take advantage of a new employee who as already the necessary knowledge of Cyber-Security as the company doesn’t need to train him, which saves it a lot of money! <===
===============================================
There has been a lot of talk both in the U.S. and internationally about a shortage in skilled IT professionals - with a predicted 864,000 IT vacancies in Europe alone by 2015.
What are these skills that organizations are looking for? This infographic by via resource highlights the top skills that make a successful information security professional and skills the future workforce will need to tackle emerging threats.
Learn more:
- http://www.scoop.it/t/securite-pc-et-internet?tag=Infographic
- http://www.scoop.it/t/21st-century-learning-and-teaching?tag=Infographi
- http://www.scoop.it/t/ict-security-tools
Check also:
- https://gustmees.wordpress.com/
- https://gustmeesen.wordpress.com/
- https://gustmeesfr.wordpress.com/
Zhao KQiang's curator insight,
March 27, 2014 7:23 AM
give some opinions of that why teachers and education should learn network secutity 
Dean J. Fusto's curator insight,
July 31, 2015 10:12 AM
In the 21st Century, Education has a BIG responsibility to adapt to the very quick change in the world and to teach the students the knowledge they need and which are required to fulfill the market’s needs!
The market’s needs are ALSO to employ people with the basics of Cyber-Security knowledge as a modern company needs to protect its online reputation and a data loss could be lethal to them, their ruin eventually! SO, the new employees is the students coming out of school, College, High school, Universities; ALL of them need to have the basic knowledge of Cyber-Security to be competitive in a working market where there is more and more unemployment worldwide…
===> A company would take advantage of a new employee who as already the necessary knowledge of Cyber-Security as the company doesn’t need to train him, which saves it a lot of money! <===
===============================================
There has been a lot of talk both in the U.S. and internationally about a shortage in skilled IT professionals - with a predicted 864,000 IT vacancies in Europe alone by 2015.
What are these skills that organizations are looking for? This infographic by via resource highlights the top skills that make a successful information security professional and skills the future workforce will need to tackle emerging threats.
Learn more:
- http://www.scoop.it/t/securite-pc-et-internet?tag=Infographic
- http://www.scoop.it/t/21st-century-learning-and-teaching?tag=Infographi
- http://www.scoop.it/t/ict-security-tools
Check also:
- https://gustmees.wordpress.com/
- https://gustmeesen.wordpress.com/
- https://gustmeesfr.wordpress.com/
Jean-Pierre Blanger's curator insight,
August 1, 2015 4:19 PM
In the 21st Century, Education has a BIG responsibility to adapt to the very quick change in the world and to teach the students the knowledge they need and which are required to fulfill the market’s needs!
The market’s needs are ALSO to employ people with the basics of Cyber-Security knowledge as a modern company needs to protect its online reputation and a data loss could be lethal to them, their ruin eventually! SO, the new employees is the students coming out of school, College, High school, Universities; ALL of them need to have the basic knowledge of Cyber-Security to be competitive in a working market where there is more and more unemployment worldwide…
===> A company would take advantage of a new employee who as already the necessary knowledge of Cyber-Security as the company doesn’t need to train him, which saves it a lot of money! <===
===============================================
There has been a lot of talk both in the U.S. and internationally about a shortage in skilled IT professionals - with a predicted 864,000 IT vacancies in Europe alone by 2015.
What are these skills that organizations are looking for? This infographic by via resource highlights the top skills that make a successful information security professional and skills the future workforce will need to tackle emerging threats.
Learn more:
- http://www.scoop.it/t/securite-pc-et-internet?tag=Infographic
- http://www.scoop.it/t/21st-century-learning-and-teaching?tag=Infographi
- http://www.scoop.it/t/ict-security-tools
Check also:
- https://gustmees.wordpress.com/
- https://gustmeesen.wordpress.com/
- https://gustmeesfr.wordpress.com/
Scoop.it!
From
thehackernews
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Gust MEES's insight:
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Scoop.it!
New “Agentjacking” attack that hijacks AI coding agents and silently executes attacker-controlled code on developer machines using nothing more than a single injected Sentry error.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Gust MEES's insight:
New “Agentjacking” attack that hijacks AI coding agents and silently executes attacker-controlled code on developer machines using nothing more than a single injected Sentry error.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Scoop.it!
Five zero-day flaws in OpenClaw allowed attackers to bypass trust boundaries and hijack AI agent access across multiple messaging platforms.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Gust MEES's insight:
Five zero-day flaws in OpenClaw allowed attackers to bypass trust boundaries and hijack AI agent access across multiple messaging platforms.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Scoop.it!
A critical flaw in Meta's AI-powered account recovery tool on Instagram allowed attackers to hijack high-value accounts by tricking the chatbot into forwarding password reset codes with no verification required.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Gust MEES's insight:
A critical flaw in Meta's AI-powered account recovery tool on Instagram allowed attackers to hijack high-value accounts by tricking the chatbot into forwarding password reset codes with no verification required.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Scoop.it!
From
thehackernews
ChatGPhish exploits ChatGPT Markdown rendering to deliver phishing content from summarized web pages, increasing AI attack surfaces. Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Gust MEES's insight:
ChatGPhish exploits ChatGPT Markdown rendering to deliver phishing content from summarized web pages, increasing AI attack surfaces. Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Scoop.it!
Anthropic’s Claude Code AI coding assistant harbored a critical network sandbox bypass for over five months, allowing attackers to exfiltrate credentials, source code, and environment variables from developer systems, and the company issued no public advisory for either incident.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/securite-pc-et-internet?tag=Claude
Gust MEES's insight:
Anthropic’s Claude Code AI coding assistant harbored a critical network sandbox bypass for over five months, allowing attackers to exfiltrate credentials, source code, and environment variables from developer systems, and the company issued no public advisory for either incident.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/securite-pc-et-internet?tag=Claude
Scoop.it!
A critical remote code execution (RCE) vulnerability has been discovered in Anthropic’s Claude Code CLI tool, allowing attackers to execute arbitrary commands on a victim’s machine by tricking them into clicking a specially crafted deeplink.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/securite-pc-et-internet?tag=Claude
Gust MEES's insight:
A critical remote code execution (RCE) vulnerability has been discovered in Anthropic’s Claude Code CLI tool, allowing attackers to execute arbitrary commands on a victim’s machine by tricking them into clicking a specially crafted deeplink.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/securite-pc-et-internet?tag=Claude
Scoop.it!
A recently patched local privilege escalation vulnerability in the Linux kernel's rxgk module now has a proof-of-concept exploit that allows attackers to gain root access on some Linux systems.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Gust MEES's insight:
A recently patched local privilege escalation vulnerability in the Linux kernel's rxgk module now has a proof-of-concept exploit that allows attackers to gain root access on some Linux systems.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Scoop.it!
From
www
The good news is there's already a patch. The bad news is that the fix isn't available for all Linux distributions yet. Here's what you can do in the meantime.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Gust MEES's insight:
The good news is there's already a patch. The bad news is that the fix isn't available for all Linux distributions yet. Here's what you can do in the meantime.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Scoop.it!
Two employee devices at OpenAI were compromised in a sweeping software supply chain attack targeting TanStack npm, but the AI company confirmed no user data, production systems, or intellectual property were affected.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/21st-century-innovative-technologies-and-developments/?&tag=ChatGPT
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/21st-century-innovative-technologies-and-developments/?&tag=Ethics
Gust MEES's insight:
Two employee devices at OpenAI were compromised in a sweeping software supply chain attack targeting TanStack npm, but the AI company confirmed no user data, production systems, or intellectual property were affected.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/21st-century-innovative-technologies-and-developments/?&tag=ChatGPT
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/21st-century-innovative-technologies-and-developments/?&tag=Ethics
Scoop.it!
A newly disclosed Linux kernel vulnerability is raising serious concerns across the security community, as it allows attackers to access highly sensitive data, including SSH private keys and password hashes, on affected systems.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Gust MEES's insight:
A newly disclosed Linux kernel vulnerability is raising serious concerns across the security community, as it allows attackers to access highly sensitive data, including SSH private keys and password hashes, on affected systems.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Scoop.it!
A newly disclosed Linux kernel vulnerability dubbed Fragnesia allows any local unprivileged user to escalate privileges to root without requiring a race condition, making it one of the more reliable local privilege escalation exploits seen in recent years.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Gust MEES's insight:
A newly disclosed Linux kernel vulnerability dubbed Fragnesia allows any local unprivileged user to escalate privileges to root without requiring a race condition, making it one of the more reliable local privilege escalation exploits seen in recent years.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
|
Scoop.it!
From
www
Die KI-Plattform Hugging Face ist nach eigenen Angaben von einem autonomen KI-Agentensystem angegriffen worden. Dabei gelang Unbefugten Zugriff auf interne Datensätze und mehrere Dienst-Zugangsdaten.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/securite-pc-et-internet?tag=AI
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Gust MEES's insight:
Die KI-Plattform Hugging Face ist nach eigenen Angaben von einem autonomen KI-Agentensystem angegriffen worden. Dabei gelang Unbefugten Zugriff auf interne Datensätze und mehrere Dienst-Zugangsdaten.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/securite-pc-et-internet?tag=AI
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Scoop.it!
An email attachment leads to the installation of a malicious Chrome extension. Researchers say it is part of a Windows backdoor delivered via a phishing email. The malware abuses Chrome Native Messaging to move control from the browser into the host system. Its most notable trick isn’t the phishing lure itself, but the way it uses legitimate browser and Windows features to run PowerShell and collect data while staying inside expected workflows.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/securite-pc-et-internet
Gust MEES's insight:
An email attachment leads to the installation of a malicious Chrome extension. Researchers say it is part of a Windows backdoor delivered via a phishing email. The malware abuses Chrome Native Messaging to move control from the browser into the host system. Its most notable trick isn’t the phishing lure itself, but the way it uses legitimate browser and Windows features to run PowerShell and collect data while staying inside expected workflows.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/securite-pc-et-internet
Scoop.it!
A security researcher known as brutecat has disclosed how an AI-driven fuzzing pipeline uncovered more than $500,000 in vulnerabilities across Google’s infrastructure in under three months, exposing systemic access-control failures hidden inside roughly 1,500 APIs.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Gust MEES's insight:
A security researcher known as brutecat has disclosed how an AI-driven fuzzing pipeline uncovered more than $500,000 in vulnerabilities across Google’s infrastructure in under three months, exposing systemic access-control failures hidden inside roughly 1,500 APIs.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Scoop.it!
From
www
Meta says it has fixed an issue that allowed hackers to take over a target’s Instagram account using its AI-powered support chatbot.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Gust MEES's insight:
Meta says it has fixed an issue that allowed hackers to take over a target’s Instagram account using its AI-powered support chatbot.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Scoop.it!
A browser-based prompt injection technique that transforms any web page into a phishing delivery surface by exploiting ChatGPT's page summarization feature, rendering attacker-controlled links, fake security alerts, and QR codes directly inside the trusted ChatGPT interface.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Gust MEES's insight:
A browser-based prompt injection technique that transforms any web page into a phishing delivery surface by exploiting ChatGPT's page summarization feature, rendering attacker-controlled links, fake security alerts, and QR codes directly inside the trusted ChatGPT interface.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
Scoop.it!
A newly discovered malware called VoidStealer has emerged as a serious threat to Chrome users on Windows, using a clever technique to bypass one of the browser’s most important security features.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/securite-pc-et-internet/?&tag=Browsers
Gust MEES's insight:
A newly discovered malware called VoidStealer has emerged as a serious threat to Chrome users on Windows, using a clever technique to bypass one of the browser’s most important security features.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/securite-pc-et-internet/?&tag=Browsers
Scoop.it!
A proof-of-concept (PoC) exploit was published for a new Linux Local Privilege Escalation (LPE) vulnerability dubbed “PinTheft.” Exploitvulnerability assessment
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Gust MEES's insight:
A proof-of-concept (PoC) exploit was published for a new Linux Local Privilege Escalation (LPE) vulnerability dubbed “PinTheft.” Exploitvulnerability assessment
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Scoop.it!
From
www
TrickMo, l’un des virus bancaires les plus redoutables sur Android, fait son grand retour. Pour échapper aux chercheurs et aux autorités, il se cache sur la blockchain. C’est une tactique de plus en plus répandue dans le milieu criminel.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/securite-pc-et-internet
Gust MEES's insight:
TrickMo, l’un des virus bancaires les plus redoutables sur Android, fait son grand retour. Pour échapper aux chercheurs et aux autorités, il se cache sur la blockchain. C’est une tactique de plus en plus répandue dans le milieu criminel.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/topic/securite-pc-et-internet
Scoop.it!
From
www
AI is exposing Linux security holes faster than developers can patch them. Fragnesia is the latest. Here's what we know about it.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Gust MEES's insight:
AI is exposing Linux security holes faster than developers can patch them. Fragnesia is the latest. Here's what we know about it.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Scoop.it!
From
www
Cette faille du noyau Linux met les responsables de la sécurité en émoi. Voici les systèmes concernés et les mesures à prendre sans tarder.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Gust MEES's insight:
Cette faille du noyau Linux met les responsables de la sécurité en émoi. Voici les systèmes concernés et les mesures à prendre sans tarder.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Scoop.it!
From
www
Pour la première fois, des hackers ont utilisé une intelligence artificielle pour découvrir et exploiter une faille zero day dans un logiciel. Comme l’a découvert Google, cette vulnérabilité permet de contourner la double authentification, même si celle-ci a été configurée sur le compte.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/securite-pc-et-internet?tag=2FA
Gust MEES's insight:
Pour la première fois, des hackers ont utilisé une intelligence artificielle pour découvrir et exploiter une faille zero day dans un logiciel. Comme l’a découvert Google, cette vulnérabilité permet de contourner la double authentification, même si celle-ci a été configurée sur le compte.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/securite-pc-et-internet?tag=2FA
Scoop.it!
From
thehackernews
Details have emerged about a new variant of the recent Dirty Frag Linux local privilege escalation (LPE) vulnerability that allows local attackers to gain root access, making it the third such bug to be identified in the kernel within a span of two weeks.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Gust MEES's insight:
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/securite-pc-et-internet/?&tag=Linux
Scoop.it!
Google Threat Intelligence Group recently published an alarming report detailing the rapid industrialization of generative artificial intelligence in adversarial workflows.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/securite-pc-et-internet?tag=2FA
Gust MEES's insight:
Google Threat Intelligence Group recently published an alarming report detailing the rapid industrialization of generative artificial intelligence in adversarial workflows.
Learn more / En savoir plus / Mehr erfahren:
https://www.scoop.it/t/21st-century-innovative-technologies-and-developments/?&tag=AI
https://www.scoop.it/topic/securite-pc-et-internet?tag=2FA
|
It seems that someone at eBay let the cat out of the bag earlier today, pre-releasing advice to users to change their passwords before the rest of the company was ready to make an announcement.
Well, now the company *has* made an official announcement.