[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (5 articles)

|

// AI-powered summary generated at 04:00

> ISC Stormcast For Friday, May 8th, 2026 https://isc.sans.edu/podcastdetail/9924, (Fri, May 8th)
> Palo Alto Networks firewall flaw has been exploited for several weeks
Palo Alto Networks warns that a critical zero-day vulnerability has been discovered in the PAN-OS firewall system. The vulnerability has already been exploited by suspected state-sponsored hackers for nearly a month, reports Bleeping Computer.The vulnerability, CVE-2026-0300, is...
> Become a millionaire by bug hunting on Android
Over the past decade, Google has introduced a wide range of bug bounty programs for its software and services. The company has now announced that the reward for individuals who discover vulnerabilities in Android or the Chrome browser is being increased, bringing the maximu...
> Sophos named a Leader in the KuppingerCole Analysts Leadership Compass for Managed Detection and Response 2026
Sophos recognized across four leadership categories: Overall, Product, Innovation, and MarketCategories: Products & ServicesTags: MDR, KuppingerCole
> 13 new critical holes in JavaScript sandbox allow execution of arbitrary code
Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code to escape the container and do nasty things to IT environments. As a result, developers using this library in their applications are urged to update the...
> WilmerHale
Le cabinet WilmerHale fait l'objet d'une action collective potentielle concernant une violation de données survenue en mai. Cette action allègue que des milliers, voire des millions, d'informations hautement sensibles de clients ont été compromises en raison de la négligence présumée du cabinet.
> Roth Industries
Les systèmes informatiques de la Roth Group, situés sur des sites allemands, ont été la cible d'une cyberattaque le 8 mai 2026, entraînant le chiffrement de leurs serveurs. Le système ERP de base SAP n'a pas été affecté. Suite à l'incident, des mesures techniques et organisationnelles ont été mises...
> Kubernetes security fundamentals: Secrets
A look at how to secure Kubernetes secrets
> Mozilla boasts Mythos boosted Firefox bug cull
Yet it remains unclear if Anthropic's uber model was effective, or if better model middleware is what makes the difference
> Canvas login portals hacked in mass ShinyHunters extortion campaign
The ShinyHunters extortion gang has breached education technology giant Instructure again, this time exploiting another vulnerability to deface Canvas login portals for hundreds of colleges and universities. [...]
> New TCLBanker malware self-spreads over WhatsApp and Outlook
A new trojan named TCLBanker, which targets 59 banking, fintech, and cryptocurrency platforms, uses a trojanized MSI installer for Logitech AI Prompt Builder to infect systems. [...]
> Slackware 15.0 php Critical Fixes for XSS SQL Injection 2026-127-03
New php packages are available for Slackware 15.0 and -current to fix security issues.
> Slackware 15.0 mozilla-firefox Immediate Security Update SSA-2026-130-05
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
> Ivanti customers confront yet another actively exploited zero-day
Attackers are hitting a frequent target in the network edge space, intruding victim networks through a defect in a widely used mobile endpoint security product. The post Ivanti customers confront yet another actively exploited zero-day appeared first on CyberScoop.
> Slackware 15.0 Libgpg-error Important Fixes Stack Overflow 2026-127-01
New libgpg-error packages are available for Slackware 15.0 and -current to fix security issues.
> Iranian government hackers using Chaos ransomware as cover, researchers say
Incident responders from cybersecurity firm Rapid7 published a report about a recent intrusion that initially appeared to be a Chaos ransomware attack but was later discovered to be an attack attributed to MuddyWater, an Iranian APT group tied to the country’s Ministry of Intelligence and Security (...
> Ollama vulnerability highlights danger of AI frameworks with unrestricted access
A critical vulnerability in Ollama poses a direct risk of sensitive information leaks to more than 300,000 internet-exposed servers, researchers have found. The flaw, tracked as CVE-2026-7482, stems from an out-of-bounds heap read in Ollama’s model quantization pipeline. Ol...
> Hackers deface school login pages after claiming another Instructure hack
The cybercrime group ShinyHunters claimed to have hacked Instructure again, defacing the login pages of several Instructure customer schools with an extortion message.
> Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks
Palo Alto says hackers exploited PAN-OS zero-day CVE-2026-0300 for weeks, gaining root access to exposed firewalls and hiding traces. Palo Alto Networks warned that suspected state-sponsored hackers have been exploiting the critical PAN-OS zero-day CVE-2026-0300 for nearly a month. After exploiting...
> Ubuntu 24.04 PostfixAdmin An Important Fix for XSS Attack USN-8242-2
PostfixAdmin could be made to run malicious JavaScript in the user's browser if it received specially crafted input.