Sécurité info - Page 79

Notepad++ Hijacked by State-Sponsored Hackers
Notepad++

According to the analysis provided by the security experts, the attack involved infrastructure-level compromise that allowed malicious actors to intercept and redirect update traffic destined for notepad-plus-plus.org. The exact technical mechanism remains under investigation, though the compromise occured at the hosting provider level rather than through vulnerabilities in Notepad++ code itself. Traffic from certain targeted users was selectively redirected to attacker-controlled served malicious update manifests.

The incident began from June 2025. Multiple independaent security researchers have assessed that the threat acotor is likely a Chinese state-sponsored group, which would explain the highly selective targeting obseved during the campaign.

Zerosquare (./2346) :
Dans l'absolu oui, mais là c'est un cas exceptionnel : si tu en es au point d'être ciblé par un État, la plupart des conseils de sécurité usuels ne suffiront pas

the method used to lock or pin an app varies between manufacturers, making it hard for malware to script the right way to do so on every device. That is where AI comes into play.

PromptSpy sends Google's Gemini model a chat prompt along with an XML dump of the current screen, including the visible UI elements, text labels, class types, and screen coordinates.

Gemini then responds with JSON-formatted instructions describing the action to take on the device to pin the app.

The malware executes the action through Android's Accessibility Service, retrieves the updated screen state, and sends it back to Gemini in a loop until the AI confirms that the app has been successfully locked in the recent apps list.

Zerosquare (./2355) :
Si on est cynique, on peut se dire que tôt ou tard, le projet sera complètement ingérable, et qu'ils devront appeler un vrai développeur à la rescousse (qui pourra facturer fort cher pour tout refaire from scratch - quoi, on peut rêver, non ?).

SCPCD (./2358) :
Il ne me semble pas avoir vu de com ici sur l'expiration des certificats Secure Boot Windows qui a lieu cette année.

Vous en savez plus ?

SCPCD (./2358) :
Il ne me semble pas avoir vu de com ici sur l'expiration des certificats Secure Boot Windows qui a lieu cette année.

Vous en savez plus ?
C'est quoi l'impact notamment sur les vieilles machines ?
Y a des trucs à faire ?
etc..