NewsThe Hacker News2026-09-29 17:47 UTCFinance Public Sector

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration nor France's national cybersecurity agency saw the data leave. The attack was not sophisticated, the agency, ANSSI, says in a report (in French) published on Tuesday: it worked because of weak

Other advisories

osv:CVE-2025-71375none
picklescan - Undetected Remote Code Execution via _operator.methodcaller
osv:CVE-2025-71364none
picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._start
osv:CVE-2025-71360none
picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entity
osv:CVE-2025-71347none
picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_eval
osv:CVE-2025-71342none
picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcode
osv:CVE-2025-71374none
picklescan - Arbitrary Code Execution via Undetected profile.Profile.run
osv:CVE-2025-71368none
picklescan - Arbitrary Code Execution via Undetected doctest.debug_script
osv:CVE-2025-71363none
picklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle Deserialization

Other news entries

Newstheregister-security2026-06-23
Mythos discovers 'Squidbleed,' a memory leak that's gone undetected since Clinton era
Newsbleepingcomputer2026-06-16
GhostTree Attack Abused Recursive Windows Junctions to Hide Malware
Newsdarkreading2026-06-15
China-Nexus Actor Spies on US Researchers Undetected for a Year
Newsthehackernews2026-05-21
9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros

Source: https://thehackernews.com/2026/09/french-tax-data-theft-using-stolen.html

More on Undetected