[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (97 articles)

|

// AI-powered summary generated at 16:01

> Cybercriminalité : 75 % des affaires sans issue
En Russie, 75 % des cybercrimes restent impunis malgré une baisse des cas et un taux de détection en hausse.
> Le Kremlin vise les VPN sans punir les usagers
La Russie prépare de nouvelles mesures contre les VPN, sans sanctions directes, avec un contrôle numérique plus discret.
> 6 key takeaways from RSA Conference 2026
Writing a conference preview is an act of professional speculation. You read the agenda, map the schedule session density, and make your personal best call about where the intellectual energy will concentrate. From my perspective going in, RSA Conference 2026 outlined a def...
> This month in security with Tony Anscombe – March 2026 edition
The past four weeks have seen a slew of new cybersecurity wake-up calls that showed why every organization needs a well-thought-out cyber-resilience plan
> Mistral AI s’achète 13 800 GPU NVIDIA pour bâtir son infrastructure européenne
Mistral AI vient d'annoncer une enveloppe de 722 millions d'euros. Une partie de cette somme sera notamment utilisée pour acquérir 13 800 GPU auprès de NVIDIA. Le post Mistral AI s’achète 13 800 GPU NVIDIA pour bâtir son infrastructure européenne a été publié sur IT-Connect.
> CVE-2026-33938 Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block
Information published.
> CVE-2026-33939 Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation
Information published.
> Ubuntu 20.04 LTS Pyasn1 High Risk DoS Vulnerabilities USN-8134-1
Several security issues were fixed in pyasn1.
> CVE-2026-33937 Handlebars.js has JavaScript Injection via AST Type Confusion
Information published.
> CVE-2026-33916 Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection
Information published.
> Ubuntu 24.04 ImageMagick Critical DoS Risk USN-8127-1 CVE-2026-23952
Several security issues were fixed in ImageMagick.
> CVE-2026-33941 Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
Information published.
> CVE-2026-33940 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
Information published.
> Piratage Commission européenne : 350 Go de données volées sur des serveurs AWS
Le groupe de pirates ShinyHunters a revendiqué une cyberattaque contre la Commission européenne, et plus particulièrement la plateforme web Europa.eu. Le post Piratage Commission européenne : 350 Go de données volées sur des serveurs AWS a été publié sur IT-Connect.
> CVE-2026-33896 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
Information published.
> CVE-2026-33542 Incus does not verify combined fingerprint when downloading images from simplestreams servers
Information published.
> Dutch Finance Ministry takes treasury banking portal offline after breach
The Dutch Ministry of Finance took some of its systems offline, including the digital portal for treasury banking, while investigating a cyberattack detected two weeks ago. [...]
> CVE-2026-33895 Forge has signature forgery in Ed25519 due to missing S > L check
Information published.
> CVE-2026-33750 brace-expansion: Zero-step sequence causes process hang and memory exhaustion
Information published.
> Common Entra ID Security Assessment Findings – Part 2: Privileged Unprotected Groups
In part 2 of our 4-part series on common Entra ID security findings, we show how seemingly harmless group configurations can be abused to bypass security controls and gain high privileges. The post shows scenarios where insufficiently protected groups are used to: weaken Conditional Access protect...