[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> CVE-2024-42158 s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
Information published.
> CVE-2024-42227 drm/amd/display: Fix overlapping copy within dml_core_mode_programming
Information published.
> Week in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploited
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Encrypted DNS still tells an eavesdropper where to look Encrypted DNS runs across much of the Internet. DNS over TLS, HTTPS, and QUIC keep the contents of a query away from anyone watching a network lin...
> CVE-2025-21723 scsi: mpi3mr: Fix possible crash when setting up bsg fails
Information published.
> CVE-2024-58012 ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
Information published.
> YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th)
YARA-X&#;x26;#;39;s 1.18.0 release brings 3 improvements and 2 bugfixes.
> CVE-2024-24864 Race condition vulnerability in Linux kernel media/dvb-core in dvbdmx_write()
Information published.
> CVE-2024-23848 In the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c.
Information published.
> Gemeinschaftsstadtwerke Kamen
Les services publics communaux (GSW) de Kamen, près de Dortmund, ont été victime d'une cyberattaque le 28 juin. Suite à cet incident, certains services internes et le portail client (y compris l'application) sont devenus indisponibles, bien que l'approvisionnement en énergie et en eau soit toujours...
> Prefeitura da Barra dos Coqueiros
La municipalité de Barra dos Coqueiros a identifié une tentative d'attaque cybernétique contre les serveurs de technologie de l'administration municipale. Les équipes responsables ont pris toutes les mesures techniques nécessaires pour maintenir la situation sous contrôle et préserver le fonctionnem...
> Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials
The Security Service of Ukraine (SSU) said it, together with the U.S. Federal Bureau of Investigation (FBI), uncovered a long-running campaign orchestrated by Russian intelligence services to break into the messaging accounts of government officials, military personnel, politicians, and activists in...
> New FBI Alert: Russian Intelligence Uses Signal Recovery Keys to Access Messages
FBI warns Russian spies now target Signal Backup Recovery Keys, enabling access to message history and long-term account takeover. The FBI and CISA updated their March 2026 warning about Russian intelligence phishing campaigns, and the new advisory adds a detail that wasn’t in the original: the oper...
> Hospitality Sector Hit by Phishing Campaign Using Fake Guest Complaint Emails
Microsoft warns of a phishing campaign targeting the hospitality sector with fake guest emails that install TonRAT using resilient persistence. Microsoft Threat Intelligence published a detailed analysis on an ongoing hacking campaign against hospitality organizations that has been running since Apr...
> Clean GitHub repo tricks AI coding agents into running malware
An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload that remains invisible to security scanners, AI agents, and human reviewers. [...]
> OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
OpenAI on Friday released three versions of GPT-5.6, called Sol, Terra, and Luna, as a limited preview to a small number of companies as part of an ongoing engagement with the U.S. government. While Sol is the latest flagship model and the most powerful, Terra strikes a balance between efficiency a...
> Chinese Framework Powers 200,000 Scam Sites
Threat actors are selling investment scam templates created using the legitimate DCloud Uni-App toolkit. The post Chinese Framework Powers 200,000 Scam Sites appeared first on SecurityWeek.
> Security News This Week: LastPass Users Had Their Data Stolen—Again
Plus: Former national security advisor John Bolton pleads guilty in classified-materials case, Microsoft helps take down major infostealer infrastructure, and more.
> Debian xorg-server Critical Privilege Escalation Vulnerability DSA-6370-1
Several vulnerabilities were discovered in the Xorg X server, which may result in privilege escalation if the X server is running privileged. For the stable distribution (trixie), these problems have been fixed in version 2:21.1.16-1.3+deb13u3. We recommend that you upgrade your xorg-server packages...
> DirtyClone: Fourth Linux Kernel Flaw in Six Weeks Escalates to Root
DirtyClone: a Linux kernel privilege escalation that silently rewrites executables in memory, leaving no disk trace. Patch now. JFrog Security Research published a working exploit walkthrough on June 25 for CVE-2026-43503 (CVSS score of 8.8), a Linux kernel privilege escalation they call DirtyClone....
> Cyber actualités ZATAZ de la semaine du 28 juin 2026
Bonjour à toutes et tous,  Cette semaine cyber est marquée par de nouvelles fuites revendiquées, des intrusions sensibles et des opérations judiciaires d’ampleur. Akaolife, Bet365, Tripadvisor, Zalando Australia, Autosur, la Carte Jeune Occitanie, la RATP et l’identité notariale apparaissent dans de...