[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (2 articles)

|

// AI-powered summary generated at 04:00

> CVE-2026-23393 bridge: cfm: Fix race condition in peer_mep deletion
Information published.
> CVE-2026-23343 xdp: produce a warning when calculated tailroom is negative
Information published.
> CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard
Une nouvelle alerte de sécurité pour les solutions Citrix NetScaler après la découverte de 2 failles, dont l'une particulièrement inquiétante : CVE-2026-3055. Le post CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard a été publié sur IT-Connect.
> CVE-2026-23389 ice: Fix memory leak in ice_set_ringparam()
Information published.
> CVE-2026-23324 can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
Information published.
> AI SOC vendors are selling a future that production deployments haven’t reached yet
Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in analyst workload, and an accelerating path toward humanless operations. Practitioners buying and deploying those platforms de...
> CVE-2026-23365 net: usb: kalmia: validate USB endpoints
Information published.
> CVE-2026-23284 net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
Information published.
> WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls. "Instead of the usual HTTP requests or image beacons, this malware uses WebRTC data channels to load its payload...
> CVE-2026-23356 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
Information published.
> CVE-2026-23327 cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()
Information published.
> Enhancing User Experience with Passwordless Authentication: A Design-First Approach
Improve user experience with passwordless authentication. Reduce login friction, boost security, and increase conversions with UX-first design. The post Enhancing User Experience with Passwordless Authentication: A Design-First Approach appeared first on Security Boulevard.
> CVE-2026-23367 wifi: radiotap: reject radiotap with unknown bits
Information published.
> CVE-2026-23279 wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
Information published.
> A nearly undetectable LLM attack needs only a handful of poisoned samples
Prompt engineering has become a standard part of how large language models are deployed in production, and it introduces an attack surface most organizations have not yet addressed. Researchers have developed and tested a prompt-based backdoor attack method, called ProAttack, that achieves attack su...
> CVE-2026-23379 net/sched: ets: fix divide by zero in the offload path
Information published.
> CVE-2026-23300 net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
Information published.
> Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP
Les pirates de TeamPCP sont parvenus à compromettre LiteLLM, un paquet téléchargé plus de 90 millions de fois par mois. L'objectif : voler des identifiants. Le post Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP a été publié sur IT-Connect.
> CVE-2026-23293 net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
Information published.
> CVE-2026-23336 wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
Information published.