By Jean-Marc BIAUDIS — 12 nov. 2025

Synthèse des Menaces de Sécurité - 12 Novembre 2025

Les 5 Principales Alertes de Sécurité Critiques

Patch Now: Microsoft Flags Zero-Day & Critical Zero-Click Bugs — Security teams may have a less burdensome rollout in November after October's Goliath Patch Tuesday, but shouldn't wait on a few top-priority fixes. Lire la suite
Microsoft Patch Tuesday for November 2025 — Today's Microsoft Patch Tuesday offers fixes for 80 different vulnerabilities. One of the vulnerabilities is already being exploited, and five are rated as critical. Lire la suite
WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks — Threat hunters have uncovered similarities between a banking malware called Coyote and a newly disclosed malicious program dubbed Maverick that has been propagated via WhatsApp. Lire la suite
Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilities — Microsoft has released its monthly security update for November 2025, which includes 63 vulnerabilities affecting a range of products, including 5 that Microsoft marked as “critical.” Lire la suite
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites — The malware known as GootLoader has resurfaced after a brief spike in activity earlier this March, with domain controller compromise occurring within 17 hours of initial infection. Lire la suite

Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories — Cybersecurity researchers have discovered a malicious npm package named '@acitons/artifact' that typosquats the legitimate '@actions/artifact' package to target GitHub-owned repositories. Lire la suite
Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers — Researchers disclosed a new Android RAT called Fantasy Hub, sold on Russian-speaking Telegram channels under a Malware-as-a-Service model. Lire la suite
Kimsuky APT Takes Over South Korean Androids, Abuses KakaoTalk — Konni, a subset of the DPRK cyberespionage group, exploits Google Find Hub to remotely wipe Android devices. Lire la suite

Grandparents to C-Suite: Elder Fraud Reveals Gaps in Human-Centered Cybersecurity — Cybercriminals weaponize AI voice cloning and public data to manipulate seniors and drain billions from savings. Lire la suite

CISO's Expert Guide To AI Supply Chain Attacks — AI-enabled supply chain attacks jumped 156% last year, with traditional defenses failing against sophisticated malicious packages. Lire la suite

Ce résumé de sécurité a été généré automatiquement le 12 Novembre 2025.

This summary was automatically generated on November 12, 2025.