[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (2 articles)

|

// AI-powered summary generated at 04:00

> CVE-2026-23347 can: usb: f81604: correctly anchor the urb in the read bulk callback
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:06]
Information published.
> CVE-2026-23310 bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:06]
Information published.
> CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-03-26 08:01]
Une nouvelle alerte de sécurité pour les solutions Citrix NetScaler après la découverte de 2 failles, dont l'une particulièrement inquiétante : CVE-2026-3055. Le post CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard a été publié sur IT-Connect.
> CVE-2026-23371 sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> CVE-2026-23340 net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> AI SOC vendors are selling a future that production deployments haven’t reached yet
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-26 07:00]
Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in analyst workload, and an accelerating path toward humanless operations. Practitioners buying and deploying those platforms de...
> CVE-2026-23351 netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> CVE-2026-23319 bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-03-26 06:53]
Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls. "Instead of the usual HTTP requests or image beacons, this malware uses WebRTC data channels to load its payload...
> CVE-2026-23335 RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> CVE-2026-23302 net: annotate data-races around sk->sk_{data_ready,write_space}
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> Enhancing User Experience with Passwordless Authentication: A Design-First Approach
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-26 06:34]
Improve user experience with passwordless authentication. Reduce login friction, boost security, and increase conversions with UX-first design. The post Enhancing User Experience with Passwordless Authentication: A Design-First Approach appeared first on Security Boulevard.
> CVE-2026-23386 gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> CVE-2026-23308 pinctrl: equilibrium: fix warning trace on load
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> A nearly undetectable LLM attack needs only a handful of poisoned samples
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-26 06:00]
Prompt engineering has become a standard part of how large language models are deployed in production, and it introduces an attack surface most organizations have not yet addressed. Researchers have developed and tested a prompt-based backdoor attack method, called ProAttack, that achieves attack su...
> CVE-2026-23291 nfc: pn533: properly drop the usb interface reference on disconnect
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> CVE-2026-23357 can: mcp251x: fix deadlock in error path of mcp251x_open
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-03-26 05:53]
Les pirates de TeamPCP sont parvenus à compromettre LiteLLM, un paquet téléchargé plus de 90 millions de fois par mois. L'objectif : voler des identifiants. Le post Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP a été publié sur IT-Connect.
> CVE-2026-23287 irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:05]
Information published.
> CVE-2026-23348 cxl: Fix race of nvdimm_bus object when creating nvdimm objects
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:04]
Information published.