[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> Ubuntu 26.04 LTS sslh Important File Overwrite Security Advisory USN-8360-1
sslh could be made to overwrite files.
> WP Maps Pro Vulnerability Exploited to Take Over WordPress Sites
The security defect (CVE-2026-8732) allows unauthenticated attackers to create administrative accounts on the affected installations. The post WP Maps Pro Vulnerability Exploited to Take Over WordPress Sites appeared first on SecurityWeek.
> Dashlane password manager users locked out by brute force attacks
Multiple Dashlane users have been locked out of their accounts following brute-force attacks that attempted logins from distant locations and unknown devices. [...]
> Debian Trixie gst-plugins-good1.0 Critical DoS Code Exec DSA-6318-1
Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For the stable distribution (trixie), these problems h...
> Ubuntu 26.04 LTS sssd Important Denial of Service Vuln 2026-6245
SSSD could be made to crash if it received specially crafted input.
> Ubuntu 26.04 Exim Critical Information Disclosure Vulnerability USN-8353-1
Exim could be made to expose sensitive information over the network.
> Debian Symfony Important SQL Injection Denial Of Service Vuln DSA-6317-1
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of security controls, cross-site scripting, denial of service, SQL injection, email header injection, information disclosure or code execution via PHP object deserialization. For the oldstable distribu...
> Ubuntu 26.04 LTS gsasl Important DoS Crash Advisory USN-8356-1
GNU SASL could be made to crash if it received specially crafted input.
> Ubuntu 26.04 LTS Nginx Serious DoS Remote Attack Vulnerabilities USN-8354-1
Several security issues were fixed in nginx.
> USPS moving forward with mail-in ballot changes as courts weigh Trump’s election order 
A judge said Democrats and civil groups filed the lawsuit too early to demonstrate harm, but that could change after newly proposed postal regulations. The post USPS moving forward with mail-in ballot changes as courts weigh Trump’s election order  appeared first on CyberScoop.
> Ubuntu 26.04 LibreOffice Significant DoS Flaw USN-8352-1
LibreOffice could be made to crash or run programs as your login if it opened a specially crafted file.
> Oracle’s first monthly patch release fixes 35 flaws, including 11 rated ‘critical’
Oracle has released the first security fixes in its new monthly Critical Security Patch Update (CSPU) cycle, designed to address urgent vulnerabilities that can’t wait for the company’s quarterly patching. The initial batch addresses 35 flaws, including several for which explo...
> Dutch Police Dismantle Massive 17-Million-Device Botnet
Dutch authorities seized command-and-control servers tied to a botnet of infected computers, smartphones, and tablets that was allegedly used to power a residential proxy network and facilitate cybercrime. The post Dutch Police Dismantle Massive 17-Million-Device Botnet appeared first on SecurityWee...
> Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from developer machines and deliver a self-propagating worm. "This is effectively a Mini Shai-Hulud campaign: it uses the same core tactics of insta...
> Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta's "AI support assistant" bot into resetting ac...
> Grand Theft Auto V cheat service gets hacked, exposing thousands of gamers
Hackers stole usernames, hashed passwords, and other data from a service that allowed players to cheat in Grand Theft Auto V.
> GPDP - autorité italienne
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre du Conseil National des Experts Industriels et des Experts Industriels Diplômés (CNPI), comprenant le prononcé d'une amende de 3 000 €, pour des manquements liés à la gestion de la boîte de messageri...
> GPDP - autorité italienne
L'Autorité pour la protection des données personnelles (GPDP) a publié une décision de sanction à l'encontre de Nuova Corrente S.r.l., comprenant le prononcé d'une amende de 15 000 €, pour des manquements liés à la prospection commerciale, à la gestion de ses sous-traitants et au respect des droits...
> OpenAI requires stronger authentication for users of its most powerful AI models
Yubico announced its significant role in securing the AI frontier as OpenAI mandates the use of passkeys for individuals that are part of their Trusted Access for Cyber (TAC) program. As a leading global AI research and development company, OpenAI is setting a precedent for empowering its users to t...
> GPDP - autorité italienne
L'Autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la société Pianeta s.r.l., comprenant le prononcé d'une amende de 34 000 €, pour des manquements liés à l'utilisation de données issues d'un programme de fidélité à des fins disciplinaires et au n...