Bon, si vous tournez encore sur du Apache 2.4.49 en 2025, j’ai une mauvaise nouvelle : des hackers utilisent probablement votre serveur pour miner du Monero depuis 4 ans et vous ne le savez même pas.

L’histoire commence avec la CVE-2021-41773, une faille de type “path traversal” dans Apache HTTP Server qui permet aux attaquants de naviguer dans l’arborescence de votre serveur comme s’ils étaient chez eux. Cette vulnérabilité a évidemment été patchée en octobre 2021 avec la version 2.4.51 mais on est en juillet 2025, et visiblement, y’a encore du monde qui n’a pas eu le mémo.

Les cybercriminels derrière cette campagne déploient actuellement un cryptominer baptisé Linuxsys. Pour ce faire, ils scannent le net à la recherche de serveurs Apache vulnérables, exploitent la faille pour y déposer leur miner, et hop, votre serveur se met à bosser pour eux.

Le truc marrant (enfin, façon de parler), c’est que cette opération rapporte des cacahuètes car d’après les analyses, le wallet des hackers reçoit environ 0,024 XMR par jour, soit à peu près 8 dollars. C’est le SMIC du cryptomining illégal… Mais bon, quand vous avez 400 serveurs qui bossent pour vous H24, ça finit par faire un petit pécule.

Techniquement, la faille CVE-2021-41773 permet donc de contourner les protections mises en place par Apache pour empêcher l’accès aux fichiers sensibles. En gros, au lieu de taper “../../../etc/passwd” (ce que Apache bloque), les attaquants encodent le deuxième point en “.%2e” et bim, ça passe. C’est con mais ça marche.

Voici à quoi ressemble une attaque typique :

GET /cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd HTTP/1.1

Et si vous avez le module mod_cgi activé avec “Require all granted” dans votre config (ce qui est une très mauvaise idée), les attaquants peuvent carrément exécuter du code sur votre machine. Là, c’est la fête du slip.

Et les cybercriminels ne stockent pas leur malware sur leurs propres serveurs. Non, non, ils compromettent des sites WordPress légitimes et s’en servent comme dépôt. Du coup, quand votre serveur télécharge le cryptominer, il le fait depuis un site avec un certificat SSL valide qui a l’air tout ce qu’il y a de plus normal.

Le script d’installation est d’ailleurs assez basique. Il télécharge le binaire “linuxsys”, un fichier de config, et installe une tâche cron pour que le miner redémarre automatiquement après un reboot. Les commentaires dans le code sont en soundanais (une langue indonésienne), ce qui donne une petite idée de l’origine des attaquants. Et les mecs derrière Linuxsys ne se contentent pas d’exploiter CVE-2021-41773 car ils ont tout un arsenal de vulnérabilités dans leur besace :

• CVE-2024-36401 sur GeoServer
• CVE-2023-22527 sur Atlassian Confluence
• CVE-2023-34960 sur Chamilo LMS
• CVE-2023-38646 sur Metabase
• Et même des failles récentes sur les pare-feux Palo Alto

En gros, si vous avez un truc pas à jour qui traîne sur Internet, y’a de bonnes chances que Linuxsys finisse par toquer à votre porte.

Alors, comment se protéger de cette merde ? C’est pas sorcier :

1. Patchez Apache, bordel ! La version 2.4.51 date d’octobre 2021. Si vous êtes encore en 2.4.49 ou 2.4.50, vous méritez presque de vous faire pwn.
2. Bloquez les domaines malveillants dans votre firewall, notamment repositorylinux.org et les sites WordPress compromis connus.
3. Surveillez votre CPU. Si votre serveur se met à consommer comme un gamer qui lance Cyberpunk 2077 en ultra, c’est louche.
4. Checkez vos connexions sortantes. Si vous voyez du trafic TLS vers pool.hashvault.pro, c’est mort, vous minez pour les autres.
5. Désactivez les modules Apache inutiles et surtout, ne mettez JAMAIS “Require all granted” sur tout votre filesystem. C’est comme laisser vos clés sur la porte d’entrée.

Le plus rageant dans cette histoire, c’est que cette campagne dure depuis 2021. Mêmes attaquants, même méthode, même malware. Ils ont juste à attendre que de nouveaux serveurs mal configurés apparaissent sur le net et voilà.

Et n’oubliez pas. Si vous gérez des serveurs, abonnez-vous aux alertes de sécurité d’Apache et des autres softs que vous utilisez. Ça prend 2 minutes et ça peut vous éviter de finir en sueur dans un article comme celui-ci.

Bref, ces méchants hackers n’ont pas besoin d’être des génies, ils ont juste besoin que vous soyez négligents… Alors allez vérifier vos versions d’Apache maintenant !

Source

Situated in the forested hills of Valea lui Enache, the CL02 Cabin by Vinklu beautifully shows us how minimalism can be both inspiring and deeply functional. The first impression is a sense of calm—a dark, understated silhouette softened by the filtered light of the surrounding trees. In this surreal cabin, less isn’t an aesthetic; it is intended to be a deliberate gesture toward finding contentment in simplicity. Every line and every finish supports the idea that a home should serve its inhabitants without demanding attention, quietly enabling the rituals of daily life.

The 55-square-meter structure stands where an earlier project failed, and it’s clear that Vinklu approached this second chance with a sense of reverence. The layout is straightforward: a ground floor with an open living area, a full kitchen, and a bathroom, and an upper level for rest. Each space is compact but never feels cramped, thanks to a vaulted ceiling and panoramic windows that extend the interior outward, inviting the forest in. The circular kitchen window frames a shifting tableau of leaves and light, turning even the most routine meal into an act of quiet observation.

Designer: Vinklu

The full-size kitchen is a luxury, especially in a home of this scale. It’s designed for those who find joy in cooking—ample countertop space, integrated appliances, and just enough storage to keep things tidy. The kitchen’s natural finishes echo the palette outside, blurring the boundary between interior and landscape.

The cabin is clad in dark, weather-resistant timber, allowing it to recede into the forest’s shadows. Inside, pale wood and minimal detailing create a sense of light and openness. There’s restraint in every decision, but also an invitation: to touch, to pause, to notice the subtle changes in the quality of light as the day moves on. The living area is open yet intimate, with just enough room for a small table and a pair of chairs. The focus isn’t on filling space but on creating an environment that feels both nurturing and uncluttered.

The CL02 Cabin’s relationship to its site is its most fabulous feature. The structure neither dominates nor disappears; it exists in dialogue with the landscape, responding to its contours and rhythms. Sustainability is embedded in the design—efficient insulation, passive solar orientation, and natural ventilation reduce the need for mechanical intervention. The house feels like a gentle addition to the hillside, its presence marked by sensitivity rather than intrusion.

Living in the CL02 Cabin is an exercise in mindful reduction. It’s not about doing without, but about having enough—and knowing that enough can be generous. There are compromises, of course: storage is limited, and the seasonal design may not suit every lifestyle. But for those drawn to clarity and contemplation, this is a space that offers both refuge and inspiration.

The post This Tiny Cabin Is Designed For Sustainable & Serene Living Amid Romania’s Forested Hills first appeared on Yanko Design.

Google vient de sortir Gemini CLI, un outil qui va vous permettre de transformer votre terminal en assistant IA surpuissant grâce à toute la puissance de Gemini. Plus besoin d’ouvrir 36 onglets dans votre navigateur ou de jongler entre différentes interfaces. Tout se passe dans votre terminal préféré, comme au bon vieux temps où on faisait tout en mode texte (ah, la nostalgie du DOS…).

Ce qui est vraiment sympa avec cet outil, c’est qu’il peut analyser des bases de code entières avec un contexte allant jusqu’à 1 million de tokens !! Et attention, c’est pas juste un chatbot de plus qui fait semblant de comprendre votre code, non, un peu comme Claude Code, c’est un truc qui peut vraiment explorer votre architecture, implémenter des features à partir d’issues GitHub, et même générer des applications complètes à partir d’un simple PDF ou d’un croquis.

BYOK is an ultra-minimalist distraction-free writing device with a curious twist. With so many gadgets shouting for your attention, there is a growing number of devices promising a quiet space for words. From chunky electronic typewriters to sleek E Ink tablets with keyboard cases, the options seem endless. Yet as focused as these tools may be, there is often one big catch: they all come with someone else’s choice of keyboard, and that can make every sentence feel like a struggle.

The clever move with BYOK is to toss the keyboard question right back in your court. Instead of forcing you to adapt to built-in keys, this little device skips the keyboard altogether. What you get is a screen, and nothing but a screen, a pocket-sized monochrome LCD that is just big enough to show what you have written, and nothing more. It is a refreshing take, stripping away every possible barrier between you and your thoughts, leaving only the essentials.

Designer: BYOK

Choosing a keyboard is almost a personal ritual these days. Everyone has a favorite; some like the clack and snap of mechanical switches, and others want a featherlight touch or fancy split layouts. It is as much about comfort as it is about flow. BYOK, short for “Bring Your Own Keyboard,” lets you honor your own style. Whether you are loyal to an old friend or like to mix things up, this device never gets in the way. You pick the keyboard, the device simply follows your lead.

BYOK’s design is as simple as it gets. The thick, candy-bar-shaped device is about the size of a smartphone, but with a bit more bulk and heft. Its monochrome LCD is easy on the eyes and quick to refresh, showing just four lines of text at a time. Pair it up with your favorite keyboard using Bluetooth or USB-C. If your keyboard is old-school USB-A, just grab an adapter and you are set. The magnetic mount on the back is a neat touch, letting you stick BYOK onto any metal surface or pop it onto a stand for the perfect angle. It is the kind of flexibility that feels almost luxurious in its simplicity.

There is a trade-off for all this minimalism. BYOK’s built-in software is as basic as they come. You can type, scroll, and make tiny edits. That is it. Larger edits, organization, and polish all happen later in the companion app. While the device itself keeps your work local or syncs to the cloud, unlocking the app’s full powers means signing up for a subscription, which nudges the price up a bit. Still, for anyone who writes best without noise or clutter, BYOK is a breath of fresh air. It puts the tools in your hands and gets out of the way, making every writing session feel a little more like home.

The post BYOK is an ultra-minimalist distraction-free writing device with a curious twist first appeared on Yanko Design.

A fresh twist on functional design, the Tiki lamp brings a lively sense of whimsy into any interior space. Instantly recognizable with its bird-like silhouette, Tiki perches elegantly, inviting both admiration and interaction. For lamp collectors, designers, and anyone with an appreciation for playful details, it’s a delightful addition that easily becomes a talking point in the room.

What truly makes Tiki stand out is its approach to arrangement. Rather than sitting alone, these lamps are meant to be clustered together, forming flocks that animate tables, shelves, or any chosen setting. Each bird-shaped lamp seems to communicate with the others, bringing a sense of movement and connection. This flocking concept encourages creativity, letting you design your own illuminated landscape with personality and charm.

Designer: Nao Tamura

The essence of Tiki lies in its expertly carved form. Using robotic techniques, each lamp is sculpted from milky-white acrylic, creating a flawless, translucent body that feels both delicate and futuristic. The shade is perfectly balanced above a geometric metal base, making for a dynamic visual pairing. This careful meeting of materials and textures adds to the overall sense of refinement while still keeping things lighthearted.

The lamp uses a built-in, rechargeable LED, powered by a custom battery that ensures lasting brightness. Charging is a breeze thanks to the magnetic base, which easily connects with a USB-C cable; no fiddling with cords or awkward plugs. These practical upgrades mean you can move your Tiki lamp anywhere: bedside, coffee table, or workspace, without worrying about wires.

The interactive experience is where Tiki truly shines. Adjusting the brightness is as simple as rotating the bird’s body on top of its perch, making the act of lighting up a space playful and intuitive. The motion is smooth and invites touch, transforming a mundane action into a small daily pleasure. This tactile control not only adds charm but also makes Tiki accessible to a variety of users.

Tiki’s updated palette introduces a fresh batch of colors that suit any taste, from matte warm white and striking blue to gentle olive green, alongside the classic gloss-black finish. These shades accentuate the sculptural curves and ensure the lamp looks just as good as a solo piece as it does in a flock.

The post Bird-Like Lamp Design Combines Artful Lighting with Playful Character first appeared on Yanko Design.

In the course of using some everyday products, we probably seldom stop to question why things are designed the way they are. Why are appliances like speakers and air purifiers traditionally rectangular and boxy while flashlights and lamps are cylindrical? Sometimes, the answers lie in history and practicality, but other times it’s just a matter of convention and the lack of motivation to think outside the box.

This flashlight design concept, however, isn’t afraid to dare to be different, perhaps even to the point of sacrificing some ergonomics. Embracing a trending design aesthetic, it isn’t just breaking the mold by throwing out most conventions. It is also challenging those conventions to see what’s possible if we’re not afraid to ask “What if?”

Designer: Nikhil Kapoor

Industrial design aesthetics has carried a rather negative connotation of being cold and impersonal, but recent trends have cast a more positive light on modern renditions of the design language. Teenage Engineering’s products, in particular, have presented a certain flavor of minimalism that embraced the cold surface of metal, the angular and sharp edges of boxes, and an intentionally limited color palette.

The FL-1 flashlight concept embraces these design elements to shock and confound. Instead of the conventional barrel form, it comes in a box that will admittedly be cumbersome to hold for long periods of time, at least depending on the size. It could easily fit in the palm of your hand, as many EDC flashlights do these days, but the sharp edges could bite into your skin over time.

The design does have a few interesting features beyond its industrial aesthetic. The rectangular shape gives it enough room to fit two LED lights, which can be turned on individually or together with a simple sliding switch mechanism. There’s also a display to show the remaining battery charge so you’re never caught unaware. The flashlight is charged via USB-C, which is the only reference to the correct scale of the object.

Like Teenage Engineering’s designs, the FL-1 practically uses only two colors, or three if you count the contrasting shade of gray. A vibrant orange backside increases its visibility, but only if it’s upside down, while there’s no method for seeing the flashlight in the dark if it’s right side up. The concept definitely has its flaws, but it is still a worthwhile thought experiment on how we can challenge the status quo and come up with designs that aren’t just different but also even better.

The post Teenage Engineering-inspired flashlight concept breaks the mold with a boxy design first appeared on Yanko Design.

The Sharp coffee table boldly defies the ordinary, emerging as a striking piece of modern art. It challenges traditional ideas about furniture, positioning itself as a daring statement. Crafted for those who embrace life beyond the conventional, this table is for individuals who set their own style standards and are unafraid to break societal norms, offering a fresh perspective on home decor.

Rooted in a desire to redefine the role of furniture, the Sharp collection stands as a testament to this vision. This table is a declaration in itself, merging industrial steel with a sleek black finish to create a captivating contrast. The result is an “uncomfortable beauty” that draws the eye and sparks conversation, offering a luxurious experience that proudly embraces its bold, unrefined essence.

Designers: Nikita Gorshkov, Alexandra Ivanets (Primitive Buro)

The allure of the Sharp table lies in its unique design, characterized by stark, deliberate geometry. Minimalistic in detail yet impactful in presence, its narrow lines and abrupt edges create an aura of tension and strength. The black color scheme transforms the table into a commanding visual centerpiece, dictating the ambiance of the room and asserting its presence rather than simply blending in.

Steel, chosen for its timeless and resilient qualities, serves as the perfect medium for the Sharp table. It embodies strength and durability, while the black finish enhances its monolithic presence, lending an air of intimidation and elegance. Each table is meticulously handcrafted, ensuring every piece is unique, with its own distinct personality and character, making it a truly one-of-a-kind addition to any space.

Most eye-catching are the jagged, teeth-like feet of the table, giving the piece of furniture an imposing presence bordering on frightening. It also boggles the mind, given those pointed ends, how the table can stand so stably, let alone support the weight of a person sitting on it. Yes, it can be used as an impromptu bench, though one would wonder who would be daring enough to tempt fate.

This is why the Sharp Coffee Table is crafted for those who are fearless in making bold statements with their interiors. It attracts those who find beauty in rawness and simplicity, and who embrace the freedom that comes with rejecting conventional stereotypes, making it a perfect fit for the daring and adventurous. For those who dare to defy convention and embrace their unique sense of style, the Sharp Table offers an unparalleled experience, inviting you to explore new horizons in interior design and self-expression.

The post Revolutionize Interiors With This Bold Steel Coffee Table for Unconventional Spaces first appeared on Yanko Design.