[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (97 articles)

|

// AI-powered summary generated at 16:01

> Hacker stripped more than $50 million from Uranium crypto exchange, spent it on trading cards
US prosecutors have charged a Maryland man in connection with two hacks of the Uranium Finance cryptocurrency exchange that led to losses exceeding $50 million. Jonathan Spalletta, also known as “Cthulhon” and “Jspalletta,” is accused of abusing vulnerabilities in Uranium Finance smart contracts to...
> Nearly half a Million mobile customers of Lloyds Banking Group affected by security incident
Lloyds Banking Group data incident exposed transactions of ~450,000 mobile banking users due to a faulty update. A faulty software update at Lloyds Banking Group exposed transaction details of nearly 450,000 mobile banking users on March 12. The issue caused some customers to see other users’ accoun...
> Kaplan face à une fuite de données massive
Kaplan revoit à 1,4 million le nombre de victimes d’une fuite impliquant des données sensibles et un accès réseau prolongé.
> Ubuntu 25.10 Dovecot Critical Vulnerabilities Denial of Service USN-8136-1
Several security issues were fixed in Dovecot.
> TeamPCP Moves From OSS to AWS Environments
After validating stolen credentials using TruffleHog, the hacking group started AWS services enumeration and lateral movement activities. The post TeamPCP Moves From OSS to AWS Environments appeared first on SecurityWeek.
> Hackers compromise Axios npm package to drop cross-platform malware
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to Linux, Windows, and macOS systems. [...]
> WhatsApp malware campaign delivers VBS payloads and MSI backdoors
A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack leverages renamed Windows tools and cloud-hosted payloads to install MSI backdoors and maintain persistent access to compromised systems. The post WhatsApp malware campaign delive...
> The Broken System That Keeps Shipping Crews Stranded in the Strait of Hormuz
Vessels are increasingly being abandoned during the war on Iran, revealing a hidden failure in the global systems that keep goods—and people—moving.
> CrewAI Vulnerabilities Expose Devices to Hacking
Attackers can exploit the bugs through prompt injection, chaining them together to escape the sandbox and execute arbitrary code. The post CrewAI Vulnerabilities Expose Devices to Hacking appeared first on SecurityWeek.
> Un courtier d’accès russe condamné dans l’affaire Yanluowang
Aleksei Volkov, lié à Yanluowang, condamné à 81 mois dans une affaire révélatrice des rouages du ransomware.
> Why ransomware is now after your data — and how to protect your home storage | Kaspersky official blog
Ransomware is increasingly targeting home backups on NAS, cloud storage, and external drives. Here’s how these attacks work, and how to keep your family photos and documents safe.
> New Bitdefender assessment helps organizations identify and eliminate hidden internal attack paths
Bitdefender has announced the Bitdefender Internal Attack Surface Assessment, a complimentary evaluation that helps organizations identify and reduce hidden internal cyber risks caused by unnecessary user access to applications, tools, and operating system utilities commonly exploited in attacks. Th...
> Oracle Linux 7 libpng Important Fixes for ELSA-2026-4756
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 7 freerdp Important ELSA-2026-4471 Remote Access Risks
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
> Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets
Key Points Introduction At the beginning of 2026, Check Point Research observed a series of targeted attacks against government entities in Southeast Asia carried out via a legitimate TrueConf software installed in the targets’ environment. The investigation led to the discovery of a zero-day vulner...
> Oracle Linux 9 ELSA-2026-6188 Thunderbird Important Remote Access Fix
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 8 freerdp Important ELSA-2026-6005 Security Update
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Crunchyroll confirme une fuite via un sous-traitant
Crunchyroll confirme une fuite liée au support client, révélatrice du risque cyber majeur porté par les sous-traitants.
> Oracle Linux 9 Firefox Important Update ELSA-2026-5930 CVE-2026-4684
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 9 FreeRDP Critical Bug Fix Announcement ELSA-2026-6004
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: