Parce que… c’est l’épisode 0x2EC!
Shameless plug
20 au 22 avril 2026 - ITSec
Code rabais de 15%: Seqcure15
28 et 29 avril 2026 - Cybereco Cyberconférence 2026
9 au 17 mai 2026 - NorthSec 2026
3 au 5 juin 2026 - SSTIC 2026
24 et 25 juin 2026 - Troopers
26 et 27 juin 2026 - leHACK
19 septembre 2026 - Bsides Montréal
1 au 3 décembre 2026 - Forum INCYBER - Canada 2026
24 et 25 février 2027 - SéQCure 2027
Notes
RETEX Botconf
IA ou Ghost in the shell
Mythos qui ne veut pas mourir
[AI Cybersecurity After Mythos: The Jagged Frontier
AISLE](https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jagged-frontier)
On Anthropic’s Mythos Preview and Project Glasswing - Schneier on Security
UK gov’s Mythos AI tests help separate cybersecurity threat from hype - Ars Technica
[In the Wake of Anthropic’s Mythos, OpenAI Has a New Cybersecurity Model—and Strategy
WIRED](https://www.wired.com/story/in-the-wake-of-anthropics-mythos-openai-has-a-new-cybersecurity-model-and-strategy/)
Anthropic releases Claude Opus 4.7, a less risky model than Mythos
[AI cybersecurity is not proof of work - ](https://antirez.com/news/163)
[White House to give US agencies Anthropic Mythos access, Bloomberg News reports
Reuters](https://www.reuters.com/technology/white-house-give-us-agencies-anthropic-mythos-access-bloomberg-news-reports-2026-04-16/)
Frontier AI Reinforces the Future of Modern Cyber Defense
We Reproduced Anthropic’s Mythos Findings With Public Models - Vidoc Security Lab
Every Old Vulnerability Is Now an AI Vulnerability
US Government Now Wants Anthropic’s ‘Mythos’, Preparing for AI Cybersecurity Threats - Slashdot
Nude
Apple a menacé de virer Grok de l’App Store à cause des deepfakes publiés sur X - Korben
[The Deepfake Nudes Crisis in Schools Is Much Worse Than You Thought
WIRED](https://www.wired.com/story/deepfake-nudify-schools-global-crisis/)
AI Chatbots and Trust - Schneier on Security
OpenAI rotates macOS certs after Axios attack hit code-signing workflow
How Hackers Are Thinking About AI - Schneier on Security
Agentic LLM Browsers Expose New Attack Surface for Prompt Injection and Data Theft
AI platform n8n abused for stealthy phishing and malware delivery
Google, Pentagon Discuss Classified AI Deal - Slashdot
MCP ‘design flaw’ puts 200k servers at risk: Researcher • The Register
In the AI propaganda war, Iran is winning
La guerre, la guerre, c’est pas une raison pour se faire mal!
Hackers Target Israeli Desalination Plants With ZionSiphon Sabotage Malware
Souveraineté ou vive le numérique libre!
Linux commence à retirer le support des processeurs russes Baikal - Korben
Baumgartner Introduces Bipartisan Bill to Tighten Controls on Sensitive Chipmaking Equipment - Michael Baumgartner
Privacy ou cachez ces informations que je ne saurais voir
Contrôlons nos enfants
EU Age Verification Blueprint — the dedicated technical portal
EU age verification app announced to protect children online
EU’s New Age Verification App Can Be Hacked Within 2 Minutes, Researchers Claim
702 is the code
[In defeat for Trump, House extends electronic spying program for just 10 days
The Record from Recorded Future News](https://therecord.media/fisa–trump-congress-extension-surveillance)
[Keep Pushing: We Get 10 More Days to Reform Section 702
Electronic Frontier Foundation](https://www.eff.org/deeplinks/2026/04/keep-pushing-we-get-10-more-days-reform-section-702)
Meta Is Warned That Facial Recognition Glasses Will Arm Sexual Predators - Slashdot
Audit Finds Google, Microsoft, and Meta Still Tracking Users After Opt-Out - Slashdot
[It Is Time to Ban the Sale of Precise Geolocation
Lawfare](https://www.lawfaremedia.org/article/it-is-time-to-ban-the-sale-of-precise-geolocation)
Old Cars ‘Tell Tales’ by Storing Data That’s Never Wiped - Slashdot
I am the law
[Majority of Australian youth still use social media despite ban, researchers find
The Record from Recorded Future News](https://therecord.media/social-media-ban-australia-research)
FCC exempts Netgear from ban on foreign routers, doesn’t explain why - Ars Technica
Red ou tout ce qui peut tourner mal
[No one owes you supply-chain security
purplesyringa’s blog](https://purplesyringa.moe/blog/no-one-owes-you-supply-chain-security/)
[The Dumbest Hack of the Year Exposed a Very Real Problem
WIRED](https://www.wired.com/story/crosswalk-city-hack-cybersecurity-lessons/)
[Mailbox rules in O365—a post-exploitation tactic in cloud ATO
Proofpoint US](https://www.proofpoint.com/us/blog/threat-insight/mailbox-rules-o365-post-exploitation-tactic-cloud-ato?utm_source=twitter&utm_medium=social_organic)
Quatre bugs Microsoft ressortent du placard, dont un de 14 ans - Korben
[NIST narrows scope of CVE analysis to keep up with rising tide of vulnerabilities
CyberScoop](https://cyberscoop.com/nist-narrows-cve-analysis-nvd/)
Dutch navy frigate tracked by mailing it a Bluetooth tracker • The Register
MAD Bugs: Even “cat readme.txt” is not safe - Calif
Tycoon 2FA Phishers Scatter, Adopt Device Code Phishing
Microsoft defender under attack as three zero-days, two of them still unpatched, enable elevated access
Blue ou bleu est la nuit
Defense in Depth, Medieval Style - Schneier on Security
[ANNOUNCE] WireGuard for Windows and WireGuardNT, Version 1.0 - Jason A. Donenfeld
Divers ou la crise identitaire
Rien hahahahahaha!
Collaborateurs
Nicolas-Loïc Fortin
Crédits
Montage par Intrasecure inc
Locaux réels par Sheraton Saint-Hyacinthe Hotel
Canada - english