[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (88 articles)

|

// AI-powered summary generated at 16:00

> CVE-2026-40179 Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:02]
Information published.
> CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:02]
Information published.
> Microsoft: Some Windows servers enter reboot loops after April patches
[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-04-17 07:59]
Microsoft warns that some Windows domain controllers are entering restart loops after installing the April 2026 security updates. [...]
> CVE-2026-35199 SymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncation
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:02]
Information published.
> CVE-2026-41035
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:02]
Information published.
> “Your shipment has arrived” email hides remote access software
[SOURCE] Malwarebytes [LANGUAGE: EN] [DATE: 2026-04-17 07:40]
This DHL-themed email tries to get recipients to install remote access software attackers can use to deploy further malware, including ransomware.
> CVE-2026-39956 jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:02]
Information published.
> CVE-2026-39979 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:01]
Information published.
> U.S. CISA adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog
[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-04-17 07:39]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in Apache ActiveMQ, tracked as CVE-2026-34197 (CVSS score of 8.8), to its Known...
> CVE-2026-33947 jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:01]
Information published.
> CVE-2026-32316 jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:01]
Information published.
> Cursor AI Vulnerability Exposed Developer Devices
[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-04-17 07:29]
An indirect prompt injection could be chained with a sandbox bypass and Cursor’s remote tunnel feature for shell access to machines. The post Cursor AI Vulnerability Exposed Developer Devices appeared first on SecurityWeek.
> CVE-2026-35469 SpdyStream: DOS on CRI
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:01]
Information published.
> CVE-2026-40164 jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:01]
Information published.
> NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions
[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-04-17 07:14]
The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed in its National Vulnerability Database (NVD), stating it will only enrich those that fulfil certain conditions owing to an explosion in CVE...
> CVE-2026-33948 jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-04-17 08:01]
Information published.
> Man gets 30 months for selling thousands of hacked DraftKings accounts
[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-04-17 07:10]
23-year-old Kamerin Stokes of Memphis, Tennessee, was sentenced to 30 months in prison for selling access to tens of thousands of hacked DraftKings accounts. [...]
> Windows : ce chercheur publie la faille RedSun pour se venger de Microsoft
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-04-17 07:09]
RedSun, c'est le nom de la nouvelle faille zero-day impactant Microsoft Defender. Elle permet d'obtenir les privilèges SYSTEM sur une machine Windows à jour. Le post Windows : ce chercheur publie la faille RedSun pour se venger de Microsoft a été publié sur IT-Connect.
> Claude Opus wrote a Chrome exploit for $2,283
[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2026-04-17 07:02]
Pause your Mythos panic because mainstream models anyone can use already pick holes in popular software Anthropic withheld its Mythos bug-finding model from public release due to concerns that it would enable attackers to find and exploit vulnerabilities before anyone could react.…
> 53 DDoS Domains Taken Down by Law Enforcement
[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-04-17 06:40]
Authorities in 21 countries participated in a coordinated action against DDoS-for-hire services. The post 53 DDoS Domains Taken Down by Law Enforcement appeared first on SecurityWeek.