Avoir son ASN personnel pour annoncer ses IPs sur Internet
Avoir son ASN personnel pour annoncer ses IPs sur Internet
Comment j'ai obtenu mon propre ASN et utilisé BGP pour annoncer des routes IPv6 depuis chez moi.
Lire
Intégration d'un UPS dans Proxmox via NUT
Un onduleur sans supervision, ça ne protège qu'à moitié. NUT connecté à Proxmox via Synology : monitoring en temps réel et arrêt automatique en cas de coupure.
Lire
RAID 5 avec des disques de capacités différentes sous Linux
Les solutions RAID classiques gaspillent de l’espace lorsque les disques sont de tailles différentes. Le RAID logiciel Linux avec LVM exploite la capacité totale de chaque disque et permet d’étendre le stockage en remplaçant un ou deux disques à la fois.1 Nous partons de quatre disques de taille identique : $ lsblk -Mo NAME,TYPE,SIZE NAME TYPE SIZE vda disk 101M vdb disk 101M vdc disk 101M vdd disk 101M Nous créons une partition sur chacun d’eux : $ sgdisk --zap-all --new=0:0:0 -t 0:fd00…
Lire
Liens Tech - Janvier 2026
Ce mois-ci : scan de vulnérabilités, monitoring uptime, suivi des mises à jour Linux, documentation statique et un magazine scientifique à découvrir.
Lire
Bloquer l'accès Internet d'un périphérique avec UniFi Network
Bloquer l'accès Internet d'un objet connecté ou d'un appareil enfant avec UniFi Network : méthode mise à jour, compatible IPv4 et IPv6.
Lire
Répartition du trafic sur des chaussettes UDP avec eBPF et Go
Répartition du trafic sur des chaussettes UDP avec eBPF et Go
Akvorado collecte des flux sFlow et IPFIX via UDP. Comme UDP ne retransmet pas les paquets perdus, il faut les traiter rapidement. Akvorado exécute plusieurs routines écoutant sur le même port. Le noyau devrait répartir équitablement les paquets reçus entre ces routines. Cependant, cela ne fonctionne pas comme prévu. Quelques routines présentent une perte de paquets importante : $ curl -s 127.0.0.1:8080/api/v0/inlet/metrics \ > | sed -n s/akvorado_inlet_flow_input_udp_in_dropped//p…
Lire
À la conquête de Træfik
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
Récent White House Authorizes Private Companies to Conduct Offensive Cyber Operations
The White House is creating a program that will allow vetted U.S. companies to conduct offensive cyber operations against foreign cybercrime groups under federal direction. The presidential memorandum creates a formal path for private companies to perform work usually associated with government cyber operators. Participating firms could covertly access criminal systems, collect intelligence, disrupt networks, manipulate infrastructure, or destroy data after receiving approval from the…
Lire
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
Socket's Threat Research Team identified a campaign of 737 free VPN and proxy extensions published across at least 40 Chrome Web Store developer accounts, 274 of which impersonate 66 established VPN and privacy brands, that route the user's entire browser session through SOCKS5 proxies operated by a single provider. Socket analyzed the code of 525 of them, 522 from bulk retrieval and 3 more found during store enumeration; the remaining 212 had been removed from the store before collection and…
Lire
Free Business Plan Upgrades for Open Source Maintainers
Free Business Plan Upgrades for Open Source Maintainers
This week our Threat Research team tracked an active supply chain attack that took over a maintainer account and used it to push malware across the widely used keyv and cacheable packages, then spread to other maintainers through stolen npm tokens. Those packages sit deep in dependency trees and account for tens of millions of weekly downloads. Attacks like this are getting more frequent, and open source maintainers are the ones on the receiving end. When an account takeover happens, the…
Lire
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
Bundler 4.0.18 adds the opt-in --cooldown flag to bundle lock and bundle cache, closing gaps where the setting could not be applied. Bundler 4.0.18, released August 5, 2026 alongside RubyGems 4.0.18, extends the cooldown feature to two more commands. The opt-in --cooldown flag now works with bundle lock and bundle cache, which previously resolved dependencies without accepting the flag. RubyGems lists the change under Bundler security in the release notes. The cooldown feature is not new. It…
Lire
UK Cyber Test: AI Agent Attempted to Social Engineer Open Source Maintainer Into Merging Malware
An AI agent powered by Anthropic’s Mythos 5 created a malicious pull request, fabricated identities, targeted open source maintainers, and planted instructions for other coding agents during a UK government cybersecurity evaluation. The UK AI Security Institute (AISI) disclosed on August 4 that frontier AI agents took 19 unsanctioned actions on the live internet during a cybersecurity evaluation, including an attempted supply chain attack against a real open source project. The most serious run…
Lire
AWS Security Hub Adds Socket for Supply Chain Security
AWS Security Hub Adds Socket for Supply Chain Security
Amazon Web Services (AWS) customers can now adopt Socket directly through the AWS Security Hub Extended plan, apply committed AWS spend, and start with the first month free. Socket covers supply chain security in the program, with deep behavioral analysis that catches malicious packages signature-based tools miss. Supply chain security in the Extended plan # The AWS Security Hub Extended plan brings curated third-party security tools into AWS across 10 security categories, with pay-as-you-go…
Lire
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Socket’s Threat Research Team is tracking an active supply chain compromise affecting the widely used keyv and cacheable npm packages. On August 4, 2026, at least ten packages beginning with the keyv and cacheable namespaces and spreading to packages owned by other maintainers, were published with a malicious preinstall hook (setup.mjs) that downloads a standalone Bun runtime, executes an obfuscated second stage, harvests cloud and CI credentials, and republishes trojanized versions of other…
Lire
Claude Breached 3 Companies and Uploaded Malware to PyPI During Anthropic's Security Tests
Claude Breached 3 Companies and Uploaded Malware to PyPI During Anthropic's Security Tests
Anthropic disclosed three incidents in which a Claude model reached the open internet during cybersecurity evaluations that were supposed to run in sealed environments, then broke into an organization's production systems. Each incident involved a different Claude model and a different organization. In one, a model built and published a malicious Python package to PyPI, where it ran on 15 real systems before the registry removed it. On July 30, Anthropic's Frontier Red Team published a report…
Lire