[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> Image or Malware? Read until the end and answer in comments :)
A malicious email delivered a .cmd malware that escalates privileges, bypasses antivirus, downloads payloads, sets persistence, and self-deletes. I received this email from a friend to make an analysis. First, let me express my thanks to JanĂ´ Falkowski Burkard for this amazing contribution. A little...
> Security Affairs newsletter Round 571 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Qilin ransomware group claims the hack of German...
> CVE-2026-35414
Information published.
> CVE-2026-31394 mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations
Information published.
> Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Financial groups lay out a plan to fight AI identity attacks Generative AI tools have brought the cost of deepfake production low enough that criminals and state-sponsored actors now use them routinely...
> CVE-2026-23468 drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
Information published.
> CVE-2026-23442 ipv6: add NULL checks for idev in SRv6 paths
Information published.
> Why DDoS Mitigation Fails: 5 Gaps That Testing Reveals
Companies invest heavily in DDoS mitigation, yet outages still happen—often at the worst possible moment. The problem is rarely the protection technology, but the unseen gaps between deployment and a real attack, where misconfigurations, false assumptions, and untested scenarios quietly accumulate. ...
> CVE-2026-27456 util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup
Information published.
> CVE-2026-35535
Information published.
> 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads to facilitate Redis and PostgreSQL exploitation, deploy reverse shells, harvest credentials, and drop a persistent implant. "Every package con...
> CVE-2026-23444 wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
Information published.
> CVE-2026-34978 OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)
Information published.
> Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-35616 (CVSS score: 9.1), has been described as a pre-authentication API access bypass leading to privilege escalation....
> CVE-2026-27447 OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup
Information published.
> CVE-2026-23473 io_uring/poll: fix multishot recv missing EOF on wakeup race
Information published.
> Minidoka Memorial Hospital
Le Minidoka Memorial Hospital a subi un incident cybernétique le 5 avril, perturbant temporairement ses services d'imagerie et entraînant des transferts de patients en urgence. Bien que l'établissement ait rétabli l'accès complet à ses systèmes le 19 avril, il n'a pas encore précisé la nature exacte...
> CVE-2026-34979 OpenPrinting CUPS: Heap overflow in `get_options()`
Information published.
> CVE-2026-34980 OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network
Information published.
> Belgrade School District
Le Belgrade School District a été victime d'une attaque par logiciel malveillant (malware) début avril, perturbant les fonctions scolaires. Bien que le malware ait été retiré, la restauration des systèmes se poursuivra jusqu'en juin pour évaluer l'impact sur les données personnelles. Le district n'a...