[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> USN-8412-3: QEMU regression
USN-8412-1 fixed vulnerabilities QEMU. On Ubuntu 20.04 LTS, the fix for CVE-2024-4467 was incomplete and prevented the creation of boot volumes from qcow2 images. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Felipe Franciosi, Raphael Norwitz, and...
> KDDI Data Breach Impacts up to 14.2 Million Email Accounts at Six ISPs
KDDI Corporation disclosed a breach affecting up to 14.2 million email accounts after attackers exploited a vulnerability in third-party software. KDDI Corporation disclosed a data breach that exposed up to 14.2 million email accounts across six Japanese internet service providers. KDDI Corporation...
> SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 103
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter More Than 4,000 Legacy Routers Compromised by AryStinger, Turned into Global Attack Proxies for Hackers   A VBScript campaign distributed through W...
> Sysco - 2,691,852 breached accounts
In June 2026, the food distribution company Sysco was targeted by a ShinyHunters "pay or leak" extortion campaign. Data was subsequently published containing 2.7M unique email addresses belonging to staff and customers. The data also contained largely corporate contact information including names, p...
> Security Affairs newsletter Round 583 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. New FBI Alert: Russian Intelligence Uses Signal R...
> Debian LXD Critical Command Execution Bypass Issues DSA-6373-1
Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in a bypass of security restrictions or the execution of arbitrary commands. For the stable distribution (trixie), these problems have been fixed in version 5.0.2+git20231211.1364ae4-9...
> Data breach exposes up to 14.2 million email logins at six ISPs
Japanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its email systems used by five other internet service providers (ISPs) in the country. [...]
> Debian Tor Important Denial of Service Issue DSA-6372-1
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system, would could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 0.4.9.11-0+deb13u1.
> CVE-2024-56544 udmabuf: change folios array from kmalloc to kvmalloc
Information published.
> CVE-2024-56702 bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
Information published.
> Week in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploited
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Encrypted DNS still tells an eavesdropper where to look Encrypted DNS runs across much of the Internet. DNS over TLS, HTTPS, and QUIC keep the contents of a query away from anyone watching a network lin...
> CVE-2024-53187 io_uring: check for overflows in io_pin_pages
Information published.
> CVE-2024-56742 vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
Information published.
> YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th)
YARA-X&#;x26;#;39;s 1.18.0 release brings 3 improvements and 2 bugfixes.
> CVE-2024-42139 ice: Fix improper extts handling
Information published.
> CVE-2025-40213 Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
Information published.
> Gemeinschaftsstadtwerke Kamen
Les services publics communaux (GSW) de Kamen, près de Dortmund, ont été victime d'une cyberattaque le 28 juin. Suite à cet incident, certains services internes et le portail client (y compris l'application) sont devenus indisponibles, bien que l'approvisionnement en énergie et en eau soit toujours...
> CVE-2026-0989 Libxml2: unbounded relaxng include recursion leading to stack overflow
Information published.
> CVE-2024-46775 drm/amd/display: Validate function returns
Information published.
> Prefeitura da Barra dos Coqueiros
La municipalité de Barra dos Coqueiros a identifié une tentative d'attaque cybernétique contre les serveurs de technologie de l'administration municipale. Les équipes responsables ont pris toutes les mesures techniques nécessaires pour maintenir la situation sous contrôle et préserver le fonctionnem...