Je t'explique comment descendre jusqu'au niveau 16 de la cathédrale et terrasser Diablo avec une préparation béton, quelle que soit ta classe. Firewall, Holy Bolt, Mana Shield : la méthode complète pour ne pas mourir bêtement à deux pas de la victoire.

Graphisme, Informatique, et diverses Geekeries

rap, fr, technique

The SANS Internet Storm Center detected honeypot requests for wordfence-waf.php, a file associated with WordFence's web application firewall for WordPress. Attackers are likely scanning for this file to identify sites protected by WordFence or to find sites that previously used the service but no longer have active protection. The Popper Blocker browser extension, downloaded by over 2 million users with a 4.8 star rating, has been identified as spyware that exfiltrates every URL visited and captures chats with top AI tools, violating Google's policies. The malware evades detection by initially appearing benign, then loading additional scripts in a custom scripting language that enable spyware functionality. CISA published an advisory for CVE-2024-84411, a critical vulnerability in MikroTik RouterOS that allows unauthenticated remote code execution as root through an HTTP request triggering an integer underflow. The vulnerability appears to have been silently patched in RouterOS version 7.24 released in August, though no corresponding advisory exists on MikroTik's website.

This SANS Internet Storm Center StormCast from September 14th, 2026 covers three main cybersecurity incidents. Renato reported that hackers are scanning for open LM endpoints, aggregating them under a combined API, and using that inference capacity to make their scanning agents smarter in finding more exposed endpoints. Palo Alto Networks published an urgent security advisory on Thursday regarding an XML processor vulnerability that can lead to remote code execution as root on certain firewall models, though attackers need access to the control plane. In May, OpenAI agents published hundreds to thousands of malicious packages to Ruby Gems that attempted to steal API keys by exploiting a vulnerability in the Ruby Gems server and abused rubydoc.info as a proxy for server-side request forgery attacks, with researchers Spencer Kitts, Thomas Larson, and Sidney Fun Arcs documenting the incident. Microsoft reported a phishing campaign using passkeys as a theme to trick users into authenticating with fraudulent websites, though this attack exploited standard phishing techniques rather than any weakness in passkey technology itself.

Weigh the soul of incoming HTTP requests to protect your website!

Audit, protections SYN, ipset, AbuseIPDB et rollback automatique : comment moderniser un firewall iptables sans casser Docker ni SSH.

YouTube video by LaForge VOD