[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (19 articles)

|

// AI-powered summary generated at 08:00

> ZDI-26-260: (0Day) Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to escape the container and execute high-privileged code within the Docker Hyper-V VM in order to exploit this vulnerability. The ZDI has assigned a...
> ZDI-26-261: (0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to escape the container and execute high-privileged code within the Docker Hyper-V VM in order to exploit this vulnerability. The ZDI has assigned a...
> Product showcase: Stop secrets from leaking through AI coding tools with GitGuardian
AI coding assistants are quickly becoming part of everyday development. Tools like Cursor, Claude Code, and GitHub Copilot can now do more than suggest code. They can read files, run shell commands, and call external tools during a session. That makes them useful, but it also creates a new risk: sec...
> OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams
OpenAI on Tuesday unveiled GPT-5.4-Cyber, a variant of its latest flagship model, GPT‑5.4, that's specifically optimized for defensive cybersecurity use cases, days after rival Anthropic unveiled its own frontier model, Mythos. "The progressive use of AI accelerates defenders – those responsible for...
> Network segmentation projects fail in predictable patterns
Most enterprise networks have segmentation on the roadmap. Many have had it there for years. A survey of 400 U.S.-based network security practitioners who lived through failed segmentation projects finds that failure clusters into four distinct patterns, and the type of failure a team experiences de...
> Curity looks to reinvent IAM with runtime authorization for AI agents
In 2026, enterprise developers are building and deploying the first generation of powerful, increasingly autonomous AI agents at incredible speed. Now comes the hard part: working out how to secure them. Vendors in the space are facing multiple challenges. To begin with, tr...
> USN-8175-1: FRR vulnerability
It was discovered that FRR did not correctly handle certain network requests. A remote attacker could possibly use this issue to gain unauthorized access to resources.
> Cisco CRM “Salesforce Data Breach” Claims Tied to ShinyHunters: What Defenders Should Look For and How to Respond
ShinyHunters is claiming access to a large set of CRM data tied to Cisco, including Salesforce records, AWS assets, and GitHub repositories, and threatening to extort with it. Whether you’re a security analyst trying to understand what’s being alleged or a defender trying to quickly validate exposu...
> ISC Stormcast For Wednesday, April 15th, 2026 https://isc.sans.edu/podcastdetail/9892, (Wed, Apr 15th)
> April Patch Tuesday roundup: Zero day vulnerabilities and critical bugs
A critical hole in Windows Internet Key Exchange for secure communications, an actively exploited zero day in Microsoft SharePoint and a critical SQL injection vulnerability in a SAP product are the focus of the April Patch Tuesday releases requiring immediate attention from I...
> Oracle Linux 10 Squid Important Denial of Service Fix ELSA-2026-8119
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 9 ELSA-2026-7896 Nodejs Important DoS Threat
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Scanning for AI Models, (Tue, Apr 14th)
Starting March 10, 2026, my DShield sensor started getting probe for various AI models such as claude, openclaw, huggingface, etc. Reviewing the data already reported by other DShield sensors to ISC, the DShield database shows reporting of these probes started that day and has been active ever since...
> Oracle Linux 10 ipp-usb Important CVE-2026-25679 Advisory ELSA-2026-7992
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 9 bind9 Key Denial of Service ELSA-2026-7915 CVE-2026-1519
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Post-Quantum Cryptographic Agility in Model Context Protocol Proxies
Learn how to secure Model Context Protocol proxies with post-quantum cryptographic agility. Protect AI infrastructure against future quantum threats with hybrid encryption. The post Post-Quantum Cryptographic Agility in Model Context Protocol Proxies appeared first on Security Boulevard.
> Oracle Linux 10 cockpit Critical Remote Code Execution VULN ELSA-2026-7383
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 8 Fontforge Important Issues CVE-2025-15269 2026-7677
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Université du Saarland
Environ 40 000 enregistrements de données d'étudiants de l'Université du Saarlandes auraient été volés lors d'une cyberattaque. La justice soupçonne un jeune homme du district régional de Saarbrücken d'avoir accédé sans autorisation à une plateforme d'apprentissage à la mi-avril, en exploitant une v...
> Oracle Linux 8 perl-XML-Parser Important Security Fix ELSA-2026-7681
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: