ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “France”

8 stories in the last 3d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllPolicy & legal 2AI industry 2Advisory 1Industry 1Tools 1Data breach 1AI safety & security 1
SeverityAllcritical 0high 0medium 2low 1info 6

Mistral X Mozilla: Private, Multilingual AI Browsing

Mistral and Mozilla partnered to power Firefox's Smart Window AI browsing assistant in France and North America, with zero data retention.

Mozilla's Firefox Smart Window (beta) AI browsing assistant is now powered by Mistral models for users in France and North America, with the UK and Germany expected later this year. Conversations are not saved on Mozilla's servers by default, and Mistral agreed to zero data retention. Both companies frame the partnership as advancing open-source, privacy-first, and regionally fine-tuned AI, with models trained on regional languages, dialects, and cultural context.

Hacker News · securityupdated · 15h agofirst · 22h agoAI industry 2 sourcesHN 35↑ · 8 comments2

EU chief wants joint response to cyberattacks, sabotage

EU Commission President von der Leyen proposed an Emergency Security Protocol letting any member state convene joint responses to cyberattacks and sabotage.

In her State of the Union address, Ursula von der Leyen proposed an Emergency Security Protocol, modeled on NATO Article 4, allowing a single EU member state to summon all 27 governments to coordinate responses to cyberattacks, sabotage, arson, and drone incursions. The proposal is part of a broader European security strategy that includes a European Security Council with partners such as the UK, Canada, Norway, and Ukraine, plus a European Instrument for Strategic Enablers supporting cyber and defense capabilities. She cited rising incidents in Denmark, Lithuania, Poland, and an attempted drone attack in Leipzig, but did not specify whether unanimous decision-making rules would change.

The Record · 16h agoPolicy & legal

International Meteor Organization says cyberattack dealt ‘critical blow’ to website

A cyberattack forced the International Meteor Organization's website offline, with weeks of partial downtime expected during an infrastructure migration.

The Belgium-based International Meteor Organization (IMO), founded in 1988 to coordinate meteor observation standards and maintain a global fireball database, said a cyberattack took much of its aging infrastructure offline. The site now shows a static notice, and the organization expects several weeks of partial downtime while transitioning to new infrastructure, with the fireball reporting system prioritized and already restored. No hacking group has claimed responsibility. The incident follows 2023 attacks on the NOIRLab astronomy facility in Hawaii and the ALMA observatory in Chile, plus ransomware at the American Meteorological Society.

The Recordupdated · 9h agofirst · 14h agoData breach 2 sources

Hackuity Raises $19 Million for AI-Powered Vulnerability Management

Vulnerability management vendor Hackuity raised $19 million led by Forgepoint Capital, bringing total funding to $38 million for its AI-driven prioritization platform.

Hackuity, a Lyon, France-based vulnerability management vendor founded in 2018, raised $19 million led by Forgepoint Capital, bringing total funding to $38 million. Its platform aggregates and normalizes vulnerability and asset data from more than 130 security products, adding threat intelligence and business context for risk-based prioritization and remediation orchestration. Existing investors Bright Pixel Capital, Bpifrance, and Seventure Partners participated; the funds will strengthen AI capabilities and support expansion across Europe and Asia.

SecurityWeek · 18h agoIndustry

Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler

Zurich court sentences Ukrainian ransomware developer to 12 years, 9 months for LockerGoga, MegaCortex and Nefilim attacks including Stadler Rail.

Zurich District Court sentenced a 52-year-old Ukrainian to 12 years and 9 months for developing LockerGoga, MegaCortex, and Nefilim ransomware, plus a 10-year ban from Switzerland; the verdict can be appealed. The operations hit over 1,800 victims across 71 countries with losses of several hundred million Swiss francs, including Stadler Rail (2020, $6 million Nefilim demand), Meier Tobler, and Crealogix. Alleged mastermind Volodymyr Tymoshchuk, indicted in the US and tied to at least 250 companies including Norsk Hydro, remains at large with an $11 million FBI bounty.

The Register · Security · 1d agoPolicy & legal

Schneider Electric SCADAPack x70 Products

CISA advisory: Schneider Electric SCADAPack x70 RTUs contain CVE-2026-81861, an insufficiently protected credentials flaw allowing unauthorized access to RTU configuration.

CISA advisory ICSA-26-258-04 discloses CVE-2026-81861 affecting all versions of Schneider Electric SCADAPack 47x, 47xi, 47xd, 470R, 57x, 3xx, and 32 remote terminal units. The CWE-522 insufficiently protected credentials vulnerability could expose authentication information and permit unauthorized access to RTU configuration through the Secure Lock functionality. The flaw carries a CVSS v3.1 base score of 6.5 (medium), and the products are deployed worldwide in critical manufacturing and energy sectors. Abhinav Agarwal reported the vulnerability to CISA.

CISA Advisories · 1d agoAdvisoryCVE-2026-81861

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Filigran introduces Attack Chaining in OpenAEV to continuously simulate multi-stage attack paths, exposing gaps that isolated MITRE ATT&CK technique testing misses.

Filigran announced Attack Chaining, a new scenario type in its OpenAEV platform that links individual techniques into automated, continuously-run multi-stage attack paths, using each step's real output (credentials, tokens, open ports) to branch dynamically toward a final objective. The article cites Filigran's State of Threat Management report, in which 93% of security leaders reported a business-impacting cyberattack in the past 12 months, 88% said AI accelerates attackers, and 84% blamed siloed tools and disconnected testing. The 2025 DGFiP breach is cited as an example where individually survivable weaknesses chained into a major intrusion. The feature includes conditional chaining logic, live attack path mapping, structured findings for identifying chokepoints, and predefined scope and safety guardrails.

The Hacker News · 1d agoTools

Sexually Explicit Deepfake Sites Target 100-Plus Politicians in Europe

Deepfake pornography sites have targeted nearly 150 European politicians, overwhelmingly women MPs, per new research on 160 abusive domains.

Researcher Benjamin Shultz analyzed roughly 160 deepfake abuse domains and found at least 138 women MPs from 22 EU countries appeared or were mentioned, versus nine male MPs — making women MPs 33 times more likely to be targeted. Sites host database-like profiles with names, photos, personal details, and links to 'nudifier' creation tools. The findings, published by German think tank Agora Digitale Transformation, show politicians from Germany, the Netherlands, Italy, and France most affected, with senior politicians targeted more often. The UK and EU are planning bans on nudify services, while the US Take It Down Act has taken major deepfake sites offline.

WIRED · Security · 2d agoAI safety & security1