> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape reveals several critical threats and vulnerabilities. Over 600,000 WordPress sites are at risk due to a newly discovered SQL injection vulnerability in the Backuply plugin. Additionally, a serious flaw in Cisco's Secure Email Gateway is actively being exploited, allowing attackers to gain root access and execute commands. The UK Legal Aid Agency hack has expanded in scope, with records dating back to 1978 compromised. New malware, including the Android RAT "Hirudo," is stealing banking credentials by replacing legitimate apps. Meanwhile, sophisticated spyware distribution methods via targeted ads raise concerns about zero-click exploits. Organizations are urged to patch vulnerabilities promptly as the cyber threat landscape evolves rapidly.
|
// AI-powered summary generated at 16:01
The flaws could allow attackers to bypass authentication or execute arbitrary code or commands via HTTP requests.
The post Fortinet Patches Critical FortiSandbox Vulnerabilities appeared first on SecurityWeek.
Barracuda says 88% of brute-force attempts in Q1 were from the region
Microsoft has patched two zero-day flaws and over 160 others
Inside a targeted email campaign that funnels the most vulnerable financial people into handing over sensitive data, and signing up for weekly fees.
Cyberattacks targeting the healthcare sector have surged since the COVID-19 pandemic and the resulting rush to enable remote delivery of healthcare services. Security vendors and researchers tracking the industry have reported a major increase in phishing attacks, ransomware,...
Cyber resilience has become a critical governance concern as organizations face increasingly complex and costly cyber threats. However, recent research reveals that the concept of cyber resilience remains inconsistently defined across regulatory frameworks and in some cases pr...
Raspberry Pi OS 6.2, based on the Trixie version, introduces small changes, bug fixes, and disables passwordless sudo by default for new installations. Screenshot of password prompt (Source: Raspberry Pi) “We continually review the security of Raspberry Pi OS to ensure it is sufficiently robust to w...
Information published.
Information published.
Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has been actively exploited in the wild.
Of these 169 vulnerabilities, 157 are rated Important, eight are rated Critical, three are rated Moderate, and one is r...
Information published.
Information published.
nginx 1.30.0 brings together features accumulated across the 1.29.x mainline series. The release covers a broad range of changes, from protocol support additions to security-relevant fixes and new configuration options. Keepalive to upstreams is now on by default One of the more operationally signif...
Two high-severity flaws in PHP Composer could let attackers run arbitrary commands via malicious repository configs and crafted inputs affecting Perforce VCS. Two high-severity vulnerabilities in PHP Composer could allow attackers to execute arbitrary commands. PHP Composer is a dependency manager f...
L'Éducation nationale a confirmé une nouvelle fuite de données impactant les élèves, suite à une intrusion sur un système en lien avec EduConnect.
Le post Piratage EduConnect : les données personnelles d’élèves dans la nature ! a été publié sur IT-Connect.
Microsoft a révélé son nouveau Patch Tuesday d'avril 2026 avec un ensemble de 167 failles de sécurité, dont 2 failles zero-day. Voici un récapitulatif.
Le post Patch Tuesday – Avril 2026 : 167 vulnérabilités patchées, dont 2 zero-day a été publié sur IT-Connect.
Information published.
Microsoft a publié les nouvelles mises à jour d'avril 2026 pour Windows 11 : KB5083769 et KB5082052. Voici les principales nouveautés et les changements prévus.
Le post Windows 11 KB5083769 : découvrez les nouveautés de la mise à jour d’avril 2026 a été publié sur IT-Connect.
Notre partenaire WELOCK lance une vente flash sur sa nouvelle serrure connectée : la WELOCK ToucA51. Découvrez ce bon plan d'avril 2026.
Le post Bon plan WELOCK ToucA51 Pro : une serrure connectée idéale pour les locations a été publié sur IT-Connect.