[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Oracle Linux 8 giflib Key Buffer Overflow Resolution ELSA-2026-8862
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 8 OpenEXR Important Advisory ELSA-2026-8863 CVE-2026-27622
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Mythos found 271 Firefox flaws – but none a human couldn’t spot
Mozilla CTO says AI means developers finally have a chance to get on top of security The Mozilla Foundation has revealed it tested Anthropic’s bug-finding “Mythos” AI model and feels the results it experienced represent a watershed moment for software defenders.…
> Oracle Linux 7 ImageMagick Important CVE-2026-28691 ELSA-2026-6713
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 8 ELSA-2026-8468 Critical Dotnet 8.0 Issues
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Apple Intelligence flaw kept stolen tokens reusable on another device
Apple claims that Apple Intelligence, a GenAI service provided on its operating systems, is designed with an extra focus on user security and privacy through a two-stage authentication and authorization system using anonymous access tokens. However, researchers from The Ohio State University have id...
> Oracle Linux 8 freerdp Important Security Advisory ELSA-2026-8945
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 10 delve Important ELSA-2026-8842 Security Advisory
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook
Financially motivated attacks continued to drive the bulk of cyber incidents against banks, insurers, and payment processors in 2025. Approximately 90% of breaches affecting financial institutions carried a financial motive, with data breaches accounting for roughly 64% of incidents and ransomware m...
> ISC Stormcast For Wednesday, April 22nd, 2026 https://isc.sans.edu/podcastdetail/9902, (Wed, Apr 22nd)
> A Cybersecurity Lifeline for Lean IT Teams: Introducing C.R.E.W.
“Too small to target” is a dangerous cybersecurity myth, while "Where do I start?," is a legitimate cyber defense question. Imagine leaving your office unlocked overnight—not because you don’t have anything valuable, but because you assume no one would bother breaking in. The post A Cybersecur...
> Lattice-based Signature Schemes for MCP Host Authentication
Learn how to use lattice-based signature schemes like CRYSTALS-Dilithium for securing Model Context Protocol (MCP) host authentication in a post-quantum world. The post Lattice-based Signature Schemes for MCP Host Authentication appeared first on Security Boulevard.
> Winter 2025 SOC 1 report is now available with 184 services in scope
Amazon Web Services (AWS) is pleased to announce that the Winter 2025 System and Organization Controls (SOC) 1 report is now available. The report covers 184 services over the 12-month period from January 1, 2025 – December 31, 2025, giving customers a full year of assurance. This report demonstrate...
> [Guest Diary] Beyond Cryptojacking: Telegram tdata as a Credential Harvesting Vector, Lessons from a Honeypot Incident, (Wed, Apr 22nd)
&#;x26;#;x5b;This is a Guest Diary by L. Carty, an ISC intern as part of the SANS.edu Bachelor&#;x26;#;39;s Degree in Applied Cybersecurity (BACS) program &#;x26;#;x5b;1].]
> Vulnérabilité dans Python (22 avril 2026)
Une vulnérabilité a été découverte dans Python. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
> [webapps] WordPress Plugin 5.2.0 - Broken Access Control
WordPress Plugin 5.2.0 - Broken Access Control
> [local] AVAST Antivirus 25.11 - Unquoted Service Path
AVAST Antivirus 25.11 - Unquoted Service Path
> Multiples vulnérabilités dans Oracle PeopleSoft (22 avril 2026)
De multiples vulnérabilités ont été découvertes dans Oracle PeopleSoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
> Multiples vulnérabilités dans Oracle Database Server (22 avril 2026)
De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
> [local] Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation
Throttlestop Kernel Driver - Kernel Out-of-Bounds Write Privilege Escalation