[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Universitat de València
Le groupe de ransomware NOVA a piraté les systèmes de l'Université de Valence, dérobant 300 Go de données. Bien que les pirates aient affirmé détenir des informations sur le personnel et les étudiants, l'université a précisé que seul le serveur d'un chercheur principal avait été touché, et que seule...
> Colorado governor commutes prison sentence for election denier Tina Peters 
Peters was sentenced to nine years for stealing voting data and has been publicly unrepentant. But Colorado Governor Jared Polis has been hinting at the decision for months.  The post Colorado governor commutes prison sentence for election denier Tina Peters  appeared first on CyberScoop.
> Outlook – CVE-2026-40361 : cette faille zero-click menace les entreprises, patchez !
Le Patch Tuesday de mai 2026 publié par Microsoft corrige une faille de type zero-click affectant Outlook (et Word) : CVE-2026-40361. Voici comment se protéger. Le post Outlook – CVE-2026-40361 : cette faille zero-click menace les entreprises, patchez ! a été publié sur IT-Connect.
> Pwn2Own Berlin 2026, Day Two: $385,750 more, Microsoft Exchange falls, and the running total crosses $900K
Day two of Pwn2Own Berlin 2026 saw $385,750 earned for 15 zero-days, bringing the total to $908,750 and 39 vulnerabilities over two days. During the second day of Pwn2Own Berlin 2026, security researchers earned $385,750 after successfully demonstrating 15 unique zero-day vulnerabilities affecting p...
> Debian DSA-6277-1 OpenJPEG2 Critical Integer Overflow DoS Risk
An integer overflow has been discovered in OpenJPEG, a JPEG 2000 image compression/decompression library, which could result in denial of service or potentially the execution of arbitrary code if malformed images are opened. For the oldstable distribution (bookworm), this problem has been fixed
> Debian Bookworm ffmpeg Critical Arbitrary Code Execution DSA-6276-1
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. For the oldstable distribution (bookworm), this problem has been fixed in version 7:5.1.9-...
> Expired domain leads to supply chain attack on node-ipc npm package
A popular npm package called node-ipc has been compromised, with hackers publishing malicious versions that bundle credential stealing malware. The root cause of the compromise was an expired domain name that attackers managed to register in order to hijack a maintainer’s acco...
> Slackware 15.0 Kernel Significant Process Trace Weakness Notice-2026-135-03
New kernel packages are available for Slackware 15.0 and -current to fix a security issue.
> Slackware 15.0 dnsmasq Important security update 2026-135-01
New dnsmasq packages are available for Slackware 15.0 and -current to fix security issues.
> Exchange Server zero-day vulnerability can be triggered by opening a malicious email
A newly discovered zero-day vulnerability in Microsoft Exchange Server has experts declaring an emergency and urging CSOs to think about the need to abandon on-premises email solutions. “Because it’s already being exploited in the wild, this isn’t a ‘patch next week situati...
> Here’s how the FTC plans to enforce the Take It Down Act
The commission will dole out  hefty fines and promises investigations for Take It Down Act violators. Experts say questions remain around the agency’s resources and priorities.   The post Here’s how the FTC plans to enforce the Take It Down Act appeared first on CyberScoop.
> More than $10 million stolen from crypto platform THORChain
THORChain officials said the investigation into the incident is ongoing but explained that one of their six vaults was compromised, leading to a loss of about $10.7 million.
> Funnel Builder WordPress plugin bug exploited to steal credit cards
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript snippets into WooCommerce checkout pages. [...]
> A hotel check-in system left a million passports and driver’s licenses open for anyone to see
The tech company that maintains the hotel check-in system set its cloud storage to public, allowing anyone to access customers' data without a password.
> GPDP - autorité italienne
L'autorité italienne de protection des données (GPDP) a émis un rappel à l'ordre ferme aux médias concernant le respect de la protection des données dans le cadre d'une affaire criminelle médiatisée.Cette intervention fait suite à la publication, sur une plateforme télévisuelle en ligne, de l'audio...
> GPDP - autorité italienne
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de Framos Italia s.r.l. en liquidation, comprenant le prononcé d'une amende de 5 000 €, pour des manquements en lien avec la gestion des comptes de messagerie d'un ancien salarié et le non-respect de...
> Debian Bookworm Linux Critical Local Escalation DSA-6275-1 CVE-2026-46333
One vulnerability has been discovered in the Linux kernel that may lead to a local privilege escalation. For the oldstable distribution (bookworm), this problem has been fixed in version 6.1.172-1. We recommend that you upgrade your linux packages.
> GPDP - autorité italienne
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la société Io e te s.r.l.s. (comprenant le prononcé d'une amende de 2 000 €) pour des manquements en lien avec l'utilisation d'un système de vidéosurveillance dans un commerce. Cette affaire début...
> Debian Trixie Linux Critical Privilege Escalation Denial Service DSA-6274-1
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.88-1.
> Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own
​During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique zero-day vulnerabilities in multiple products, including Windows 11, Microsoft Exchange, and Red Hat Enterprise Linux for Workstations. [...]