[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> U.S. CISA adds LiteSpeed cPanel Plugin flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds LiteSpeed cPanel Plugin flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the LiteSpeed cPanel Plugin flaw CVE-2026-48172 to its Known Exploited Vulnerabilities...
> A single typo could derail your World Cup plans
Cybercriminals are spoofing Fédération Internationale de Football Association (FIFA) websites ahead of the 2026 FIFA World Cup, the FBI warns. The attackers are registering lookalike domains with small spelling changes or different domain endings to impersonate FIFA websites and services. The tactic...
> GCHQ Chief Urges Action as AI Reshapes Cyber Threats
GCHQ director urges urgent business cyber action as AI and quantum reshape the threat
> Sextortionist sentenced to 33 years for targeting 145 children
A Canadian man was sentenced to 33 years in prison after pleading guilty to targeting more than 145 children across the United States, some as young as 6 years old, in an eight-year-long sextortion scheme. [...]
> Oil shipments, drone makers, and a poisoned code library targeted in recent APT campaigns
Geopolitical pressure drove much of the state-sponsored cyber activity recorded between October 2025 and March 2026, according to ESET’s latest APT Activity Report. Espionage groups aligned with China, North Korea, Russia, and Iran adjusted their targets to match the economic and security concerns o...
> What the industrialization of exploitation means for defenders
For decades, cybersecurity was a battle of skill. Elite attackers versus elite defenders. The rules of engagement were understood, even if the playing field wasn’t level. If you hired better analysts and bought better tools, hopefully you hardened your systems well enough and...
> ESET APT Activity Report Q4 2025–Q1 2026
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026
> CVE-2026-46094 ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
Information published.
> CVE-2026-46022 misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
Information published.
> CVE-2026-46102 net: strparser: fix skb_head leak in strp_abort_strp()
Information published.
> CVE-2026-46016 remoteproc: xlnx: Only access buffer information if IPI is buffered
Information published.
> CVE-2026-46000 rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
Information published.
> CVE-2025-71305 drm/display/dp_mst: Add protection against 0 vcpi
Information published.
> CVE-2026-46006 drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
Information published.
> CVE-2026-46003 net: qrtr: ns: Limit the total number of nodes
Information published.
> CVE-2026-46082 KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
Information published.
> CVE-2026-45993 LoongArch: Add spectre boundry for syscall dispatch table
Information published.
> CVE-2026-46026 net: qrtr: ns: Limit the maximum number of lookups
Information published.
> CVE-2026-46076 KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
Information published.
> CVE-2026-45843 slip: bound decode() reads against the compressed packet length
Information published.