This post was originally published in French only. We translated it in 2026 so the archive reads the same in both languages. Read the original →
Clever
A clever programmer gets caught red-handed! A security audit apparently revealed that a programmer at a major US company was "subcontracting" his own job to developers in China! He even went as far as sending his RSA token by FedEx so the Chinese programmers could connect to the development environments. The irony: the programmer's performance reviews show he was possibly the "best" programmer in his office...
Java
Oracle releases an update for the flaw now widely exploited by attackers. It's interesting to see how quickly Oracle responded to the threat posed by this flaw. What's more alarming is that this flaw, and all the Java issues raised over the last 6 months, lead some to believe that fixing Java's flaws, which exist by design as we showed in an analysis, could take several years. In short, one to keep an eye on.
Red October
Since 2007, an espionage operation has been raging against Eastern European countries. The malware-based espionage campaign went unnoticed for 5 years! Kaspersky Lab discovered the operation. This no doubt highlights how poorly organizations are able to detect new forms of malware.
PLEASE Encrypt Your Data
An interesting article just surfaced. It seems that Canadian students who used the Canada Student Loans Program for their studies could have a problem. A hard drive containing the personal information of 583,000 students was lost by the person responsible for it. The data was not encrypted. You can check whether you were affected by the data leak at this phone number: 1-866-885-1866. Have fun!