[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (46 articles)

|

// AI-powered summary generated at 12:00

> CVE-2026-41066 lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
Information published.
> CVE-2026-31645 net: lan966x: fix page pool leak in error paths
Information published.
> Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines Boost Security has released SmokedMeat, an open-source framework that runs attack chains against CI/CD infrastructure so engin...
> CVE-2026-41907 uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided
Information published.
> CVE-2026-31581 ALSA: 6fire: fix use-after-free on disconnect
Information published.
> Pre-Stuxnet Sabotage Malware ‘Fast16’ Linked to US-Iran Cyber Tensions
What happened SentinelOne has uncovered Fast16, a Lua-based sabotage malware developed and deployed years before Stuxnet that was designed to tamper with high-precision calculation software used in civil engineering, physics, and physical process simulations. The malware was used in an attack in 200...
> CVE-2026-31604 wifi: rtw88: fix device leak on probe failure
Information published.
> CVE-2026-31585 media: vidtv: fix nfeeds state corruption on start_streaming failure
Information published.
> California Engineer Identified in Suspected Shooting at White House Correspondents' Dinner
The 31-year-old engineer and self-described indie game developer is suspected of firing shots at the annual event attended by President Donald Trump, high-profile media figures, and US government officials.
> CVE-2026-31577 nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
Information published.
> CVE-2026-41140 Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
Information published.
> Kent District Library
La Bibliothèque du Comté de Kent est fermée suite à une attaque par rançongiciel qui a touché l'intégralité de ses succursales. L'établissement enquête actuellement avec des spécialistes externes pour déterminer l'étendue de cet incident et compte informer les usagers si leurs données personnelles o...
> CVE-2026-31665 netfilter: nft_ct: fix use-after-free in timeout object destroy
Information published.
> CVE-2026-31788 xen/privcmd: restrict usage in unprivileged domU
Information published.
> Murata Manufacturing Co.
Murata Manufacturing Co. a annoncé avoir subi un accès non autorisé à son environnement informatique, bien que ses opérations courantes ne soient pas affectées. Environ 73 000 dossiers d'employés et 15 000 dossiers de clients ou partenaires ont pu être compromis, incluant des données personnelles et...
> CVE-2026-31660 nfc: pn533: allocate rx skb before consuming bytes
Information published.
> CVE-2026-31605 fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
Information published.
> Generation Development Group (GDG)
Generation Development Group (GDG) a informé ses actionnaires d'un incident de cybersécurité contenu affectant sa filiale, Generation Life, suite à un accès non autorisé via un fournisseur tiers. L'entreprise a rapidement détecté et maîtrisé l'incident, sans preuve d'impact sur les systèmes principa...
> CVE-2026-31566 drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
Information published.
> CVE-2026-31599 media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
Information published.