[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> GPT-5.6 gets better at cybersecurity
OpenAI has started rolling out the GPT-5.6 series models in limited preview to a small group of trusted partners through the API and Codex. The series includes Sol as the flagship model, Terra as a balanced option, and Luna as the fastest and most cost-efficient model. The rollout is being coordinat...
> What the post-quantum executive order really demands of CISOs
ith federal PQC deadlines set for 2030 and 2031, CISOs face a multi-year transformation program that most organizations have not yet started. The window for orderly execution is narrowing fast. The post What the post-quantum executive order really demands of CISOs appeared first on CyberScoop.
> SSU and FBI Uncover Russian Cyber Espionage Operation Against Officials and Military Personnel
Ukraine’s SSU and the FBI Just Confirmed Russian Intelligence Has Been Systematically Hacking Messenger Accounts for Years. The Security Service of Ukraine (SSU), working jointly with the FBI, has formally exposed a sustained Russian intelligence campaign targeting the messaging accounts of governme...
> Inside the inbox: Why cybercriminals want to break into your email account
Your inbox is an identity system all of its own: whoever owns it may own a lot more
> Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts
Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordinary image and font files, then woke up days after install to steal credentials and run ad fraud. The company calls it StegoAd, a mash-up of steganography and adware, and...
> FBI Sounds Alarm Over Russian Intelligence Signal Phishing
The FBI claims Russian spies are targeting Signal backup keys
> CVE-2026-58051 libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
Information published.
> CVE-2026-58058 Nmap - Integer Underflow in IPv6 Extension Header Parsing
Information published.
> Do excellent vulnerability reports
Over the years, we have received, read and handled way over one thousand vulnerability reports filed against curl. We have seen most kinds. It is time for me to try to help future reporters by providing a short guide on how to submit a truly excellent vulnerability report to an Open Source project....
> CVE-2026-58055 nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length
Information published.
> CVE-2026-52910 bpf: Free reuseport cBPF prog after RCU grace period.
Information published.
> OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI
The company says Sol matches competing systems like Mythos Preview while using only a third of the output tokens. The post OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI appeared first on SecurityWeek.
> CVE-2026-52908 RDMA: During rereg_mr ensure that REREG_ACCESS is compatible
Information published.
> CVE-2026-58050 libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
Information published.
> Adblock for YouTube : 11 millions d’installations et une grave faille à corriger !
Adblock for YouTube, bloqueur de pubs aux 11 millions d'installations, embarque une capacité d'injection de code activable à distance. Un correctif attendu. Le post Adblock for YouTube : 11 millions d’installations et une grave faille à corriger ! a été publié sur IT-Connect.
> CVE-2026-52909 ip6_vti: set netns_immutable on the fallback device.
Information published.
> Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH server trigger memory corruption on a connecting client, with possible code execution. No credentials, no user interaction. The bug affects every release up to and including 1...
> A week in security (June 22 – June 28)
A list of topics we covered in the week of June 22 to June 28 of 2026
> DirtyClone : la faille Linux qui donne un accès root en silence
DirtyClone (CVE-2026-43503), nouvelle faille du noyau Linux, permet à un utilisateur local de devenir root sur Debian, Ubuntu et Fedora. Comment se protéger. Le post DirtyClone : la faille Linux qui donne un accès root en silence a été publié sur IT-Connect.
> Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts. "This attack avoids the most common npm execution paths through lifecycle scripts, perhaps i...