[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (2 articles)

|

// AI-powered summary generated at 04:00

> CVE-2026-23312 net: usb: kaweth: validate USB endpoints
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:02]
Information published.
> CVE-2026-23330 nfc: nci: complete pending data exchange on device close
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:02]
Information published.
> CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-03-26 08:01]
Une nouvelle alerte de sécurité pour les solutions Citrix NetScaler après la découverte de 2 failles, dont l'une particulièrement inquiétante : CVE-2026-3055. Le post CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard a été publié sur IT-Connect.
> CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:02]
Information published.
> CVE-2026-23285 drbd: fix null-pointer dereference on local read error
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:02]
Information published.
> AI SOC vendors are selling a future that production deployments haven’t reached yet
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-26 07:00]
Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in analyst workload, and an accelerating path toward humanless operations. Practitioners buying and deploying those platforms de...
> CVE-2026-23296 scsi: core: Fix refcount leak for tagset_refcnt
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:02]
Information published.
> CVE-2026-23392 netfilter: nf_tables: release flowtable after rcu grace period on error
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:02]
Information published.
> WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-03-26 06:53]
Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls. "Instead of the usual HTTP requests or image beacons, this malware uses WebRTC data channels to load its payload...
> CVE-2026-29111 systemd: Local unprivileged user can trigger an assert
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:01]
Information published.
> CVE-2026-33186 gRPC-Go has an authorization bypass via missing leading slash in :path
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:01]
Information published.
> Enhancing User Experience with Passwordless Authentication: A Design-First Approach
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-26 06:34]
Improve user experience with passwordless authentication. Reduce login friction, boost security, and increase conversions with UX-first design. The post Enhancing User Experience with Passwordless Authentication: A Design-First Approach appeared first on Security Boulevard.
> CVE-2026-33412 Vim affected by Command injection via newline in glob()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:01]
Information published.
> CVE-2026-23370 platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:01]
Information published.
> A nearly undetectable LLM attack needs only a handful of poisoned samples
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-26 06:00]
Prompt engineering has become a standard part of how large language models are deployed in production, and it introduces an attack surface most organizations have not yet addressed. Researchers have developed and tested a prompt-based backdoor attack method, called ProAttack, that achieves attack su...
> CVE-2026-23333 netfilter: nft_set_rbtree: validate open interval overlap
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:01]
Information published.
> CVE-2026-23372 nfc: rawsock: cancel tx_work before socket teardown
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:01]
Information published.
> Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-03-26 05:53]
Les pirates de TeamPCP sont parvenus à compromettre LiteLLM, un paquet téléchargé plus de 90 millions de fois par mois. L'objectif : voler des identifiants. Le post Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP a été publié sur IT-Connect.
> CVE-2026-23315 wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:01]
Information published.
> Scuf Gaming - 128,683 breached accounts
[SOURCE] Have I Been Pwned [LANGUAGE: EN] [DATE: 2026-03-26 05:31]
In June 2015, custom gaming controller maker Scuf Gaming suffered a data breach. The incident exposed 129k unique email addresses along with usernames, display names, IP addresses and password hashes.