Conseiller senior cybercriminalité & cybersécurité / Senior #cybercrime & #cybersecurity adviser #ComCyberMI #Gendarmerie | Alumni #Polytechnique (X92), #TelecomParis, PhD #LIP6 | Associate member #Labo_Loria | Compte personnel / Personal account
Toots 🇬🇧/🇫🇷
Président du comité d'organisation de #Botconf / Chairman of the #Botconf organising team
@botconf
(Old account on mastodon.etalab.gouv.fr)
Admin of https://riin.fr/ - #DFIR #fedi22 #malware #forensics
| Blog | https://eric.freyssi.net |
| Twitter (ex...) | https://twitter.com/ericfreyss |
| https://www.linkedin.com/in/ericfreyssinet/ | |
| Pixelfed | Matrix | https://metapixl.com/@ericfreyss | @ericfreyss:matrix.org |
#Trivy, a popular open-source vulnerability scanner, was compromised - attackers hijacked 75 version tags in #GitHub Actions to deliver an infostealer.
It ran in CI pipelines, stealing creds and tokens, exfiltrating data:
#SoftwareSupplyChainSecurity
👇
https://thehackernews.com/2026/03/trivy-security-scanner-github-actions.html
RE: https://mstdn.social/@swheritage/116272142405742756
"France and Germany are moving beyond the “altruism” of the early open-source movement, reframing it as a matter of national autonomy. Stéphanie Schaer, The Interministerial Directorate for Digital Affairs in France (DINUM), highlighted Tchap—a secure messaging app used by 400,000 civil servants—as proof that the state can break its dependency on “monopolistic IT solutions” by investing in the digital commons."
New, from our ERT: #CECbot, an Android TV botnet and the first malware we're aware of that exploits HDMI-CEC.
It puts the TV to sleep so you don't notice the box behind it is running DDoS and residential proxy traffic. Curve25519/ChaCha20 crypto, 9 persistence layers, and... LAN mapping.
Successor to a Mirai fork, shares not much but the C2 server.
https://github.com/deepfield/public-research/blob/main/cecbot/report.md
Isabelle Mergault, comédienne et sociétaire des «Grosses Têtes», est morte à 67 ans
https://tvmag.lefigaro.fr/programme-tv/actu-tele/isabelle-mergault-comedienne-et-societaire-des-grosses-tetes-est-morte-a-67-ans-20260320?utm_source=flipboard&utm_medium=activitypub
Publié dans Actualités @actualit-s-LeFigaro
NEW: The FBI has taken down and seized two websites that were run by the pro-Iranian hacktivist group Handala.
“Law enforcement authorities determined this domain was used to conduct, facilitate, or support malicious cyber activities on behalf of, or in coordination with, a foreign state actor,” read the seizure notice.
The law enforcement actions comes a week after Handala claimed responsibility for the devastating hack of U.S. medical tech giant Stryker.
#UK’s #CompaniesHouse confirms security flaw exposed business data
Companies House, a British government agency that operates the registry for all U.K. companies, says its WebFiling service is back online after it was closed on Friday to fix a security flaw that exposed companies' information since October 2025.
Meta is reportedly laying off up to 20 percent of its staff
https://www.theverge.com/business/895026/meta-laying-off-20-percent?utm_source=flipboard&utm_medium=activitypub
Posted into The Verge @the-verge-theverge
Sam Stepanyan 
🐘
Nicolas Fressengeas
Thierry Noisette
Jérôme Meyer
9to5Google.com
Le Figaro
Lorenzo Franceschi-Bicchierai
The New Oil
Botconf
The Verge