[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Cyber actualités ZATAZ de la semaine du 11 au 16 mai 2026
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2026-05-16 10:08]
Cyber actualités ZATAZ de la semaine du 11 au 16 mai 2026 : une semaine marquée par d'importantes actions cyber.
> PoC Code Published for Critical NGINX Vulnerability
[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-05-16 10:02]
Introduced in 2008, the critical-severity security defect was patched this week in NGINX Plus and NGINX open source. The post PoC Code Published for Critical NGINX Vulnerability appeared first on SecurityWeek.
> OpenAI hit by supply chain attack linked to malicious TanStack packages
[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-05-16 09:31]
OpenAI said the TanStack supply chain attack compromised two employee devices and exposed credentials from code repositories. OpenAI confirmed that the recent TanStack supply chain attack compromised two employee devices and exposed credential material stored in internal source code repositories. Th...
> Les données valent plus qu’une rançon
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2026-05-16 09:14]
Les cyberattaques visent de plus en plus les données sensibles, devenues un levier d’espionnage et d’extorsion.
> God save the threat hunters : Londres prépare une réforme cyber sensible
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2026-05-16 08:50]
Le Royaume-Uni veut moderniser sa loi cyber pour protéger la recherche défensive et viser les réseaux criminels.
> CVE-2026-46333 ptrace: slightly saner 'get_dumpable()' logic
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:05]
Information published.
> Arrestation autour de Dream Market
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2026-05-16 08:12]
Arrestation liée à Dream Market : crypto, or et coopération germano-américaine dans une enquête darknet qui a duré 7 ans !
> CVE-2026-42945 NGINX ngx_http_rewrite_module vulnerability
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:05]
Information published.
> CVE-2026-43490 ksmbd: validate inherited ACE SID length
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:05]
Information published.
> OpenAI change ses certificats après le hack TanStack
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2026-05-16 07:51]
OpenAI impose une mise à jour macOS après une attaque supply chain visant TanStack et des paquets npm. Un groupe de pirate lance un concours "hacker la supply chain".
> CVE-2026-44431 urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:05]
Information published.
> CVE-2026-44662 rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:05]
Information published.
> THORChain perd 10,7 millions de dollars
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2026-05-16 06:50]
THORChain perd 10,7 millions de dollars après la compromission d’un coffre-fort du protocole crypto
> CVE-2026-42946 NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:05]
Information published.
> CVE-2026-40701 NGINX ngx_http_ssl_module vulnerability
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:04]
Information published.
> Test Kingston IronKey Locker+ 50 G2 : une clé USB avec du chiffrement matériel
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-05-16 06:00]
Kingston a dévoilé sa clé USB IronKey Locker+ 50 G2, avec du chiffrement matériel destiné à protéger vos données contre les attaques physiques et logiques. Le post Test Kingston IronKey Locker+ 50 G2 : une clé USB avec du chiffrement matériel a été publié sur IT-Connect.
> CVE-2026-6479 PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:04]
Information published.
> CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:04]
Information published.
> Friday Squid Blogging: Bigfin Squid
[SOURCE] Schneier on Security [LANGUAGE: EN] [DATE: 2026-05-16 01:03]
Article about the bigfin squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
> CVE-2026-6474 PostgreSQL timeofday() can disclose portions of server memory
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-05-16 08:04]
Information published.