GoYou Cybersecurity (EN)

Proton Pass, the end-to-end encrypted password manager, has introduced credential sharing via AI access tokens, allowing users to grant selected access to AI...

Fractal, an open-source OS developed by MIT CSAIL, has revealed previously undocumented behaviors in the Apple M1 branch predictor, providing a new tool for...

A new phishing-as-a-service (PhaaS) campaign called Kali365 is targeting Microsoft 365 users, bypassing multi-factor authentication (MFA) and stealing access...

Surface Command introduces filter-based widgets to create Surface Attack Management (ASM) management dashboards in just a few minutes, without the need to wr...

The first quarter of 2026 has seen a significant increase in zero-click vulnerability-based attacks, which now represent the primary initial access vector. T...

Infostealers are among the most persistent and damaging types of malware, capable of stealthily stealing sensitive data. This article explores how they opera...

The integration between Claude Compliance API and CrowdStrike Falcon® Next-Gen SIEM provides real-time visibility, automated detection, and response to AI ac...

The adoption of AI requires an innovative approach to technological governance. This article explores three fundamental KPIs to assess the effectiveness of s...

ROADtools is an open-source framework used for offensive and defensive security purposes, recently integrated into cloud attacks by national threat actors. T...

Screening Serpens, an APT group linked to Iran, launched targeted attacks in the USA, Israel, and the United Arab Emirates between February and April 2026. S...

The Italian Data Protection Authority has fined The European House – Ambrosetti 85,000 euros for GDPR violations, highlighting cultural issues in the managem...

A CISA contract inadvertently published AWS GovCloud keys and other sensitive information on a public GitHub account. Legislators and security experts expres...

Drupal has identified a highly critical SQL injection vulnerability, CVE-2026-9082, with exploitation attempts already detected. The flaw, discovered by Goog...

Jacob Butler, known online as Dort, has been arrested in Canada for managing the KimWolf botnet, responsible for record-breaking 30 Tbps DDoS attacks and mil...

Aikido Security research reveals that Google API keys continue to work up to 23 minutes after deletion, exposing potential attacks and unauthorized costs. Th...

An AI system has discovered 300 critical vulnerabilities in WordPress plugins, with an average cost of 20€ per bug. The ecosystem, fragmented and often poorl...

The cyber threat has evolved with the widespread use of AI, making a radical transformation of SOCs necessary. Attacks are faster and more sophisticated, wit...

In an open and fast-paced information system, protecting information requires a legal-strategic approach that takes into account the dispersive and unstable...

Discover how even small changes to training datasets can have significant effects on machine learning models. We analyze attack surfaces, remediation difficu...

A contract from the Cybersecurity & Infrastructure Security Agency (CISA) accidentally exposed highly privileged credentials and internal systems through a p...

The Kimwolf botnet has infected over 2 million devices worldwide, exploiting vulnerabilities in residential proxy networks and unofficial Android devices. Th...

Canadian authorities have arrested Jacob Butler, a 23-year-old from Ottawa, accused of creating and managing the Kimwolf botnet, responsible for record-break...

Modern cryptocurrency drainage systems, such as the Lucifer DaaS service, have evolved into a structured underground economy, combining social engineering an...

Flipper Devices introduces Flipper One, a portable Linux device for hardware and networking experiments, featuring a dual-processor architecture and support...

GitHub confirmed a breach affecting approximately 3,800 internal repositories, caused by the installation of a trojanized VS Code extension. The attack was l...