[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (110 articles)

|

// AI-powered summary generated at 16:00

> CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs
Information published.
> CVE-2026-40355
Information published.
> US ransomware negotiators get 4 years in prison over BlackCat attacks
Two former employees of cybersecurity incident response companies Sygnia and DigitalMint were sentenced to four years in prison each for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. [...]
> CVE-2026-40356
Information published.
> CVE-2026-41526
Information published.
> Debian DSA-6239-1 Chromium Critical Execution Risks And Denial Of Service
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 147.0.7727.137-1~deb12u1.
> CVE-2026-31692 rtnetlink: add missing netlink_ns_capable() check for peer netns
Information published.
> CVE-2026-31533 net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
Information published.
> 1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom
The compromised Lightning and Intercom packages have a combined monthly download count of nearly 10 million. The post 1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom appeared first on SecurityWeek.
> China Has its Sights Set on Scammers, Just Not Those Targeting Americans 
A new report from the U.S.-China Economic and Security Review Commission reveals that while China is aggressively prosecuting fraud targeting its own citizens, it continues to turn a blind eye to industrial-scale scam centers victimizing Americans. This selective enforcement has incentivized Chines...
> Chromium: CVE-2026-7355 Use after free in Media
This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
> Chromium: CVE-2026-7339 Heap buffer overflow in WebRTC
This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
> Oracle Linux 8 ELSA-2026-50249 Dtrace Moderate Memory Access Fix
The following updated rpms for have been uploaded to the Unbreakable Linux Network:
> Chromium: CVE-2026-7340 Integer overflow in ANGLE
This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
> Chromium: CVE-2026-7341 Use after free in WebRTC
This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
> Oracle Linux 10 ELSA-2026-12265 libtiff Important Buffer Overflow Issue
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> Chromium: CVE-2026-7338 Use after free in Cast
This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
> Chromium: CVE-2026-7337 Type Confusion in V8
This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
> Oracle Linux 10 grafana-pcp Important Security Fix ELSA-2026-11881
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> Chromium: CVE-2026-7346 Inappropriate implementation in Tint
This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.