[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> CVE-2026-3503 Fault injection attack with ML-DSA and ML-KEM on ARM
Information published.
> CVE-2026-3548 Buffer overflow in CRL number parsing in wolfSSL
Information published.
> HackerOne Employee Data Exposed in Massive Navia Breach
The cybersecurity firm said the personal information of hundreds of employees was stolen in the hacker attack targeting Navia. The post HackerOne Employee Data Exposed in Massive Navia Breach appeared first on SecurityWeek.
> CVE-2026-2645 Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2
Information published.
> CVE-2026-3547 wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation
Information published.
> Tenable Hexa AI automates exposure management and security workflows
Tenable has revealed Tenable Hexa AI, the agentic AI engine of the Tenable One Exposure Management Platform that automates security workflows and transforms exposure intelligence into coordinated action to reduce cyber risk. AI-powered cyberattacks, rapid vulnerability discovery and the explosion of...
> CVE-2026-2646 Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function
Information published.
> CVE-2025-69720
Information published.
> Debian Bookworm Chromium Critical Code Exec Info Disclosure DSA-6177-1
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 146.0.7680.164-1~deb12u1.
> CVE-2026-3549 ECH parsing heap buffer overflow
Information published.
> CVE-2026-4159 wc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read
Information published.
> Coding Agents Widen Your Supply Chain Attack Surface 
Software supply chain attacks are evolving. Beyond compromised packages, discover the 2026 "Agentic" threat surface—where prompt injection, toolchain poisoning, and hallucinated dependencies bypass traditional DevSecOps. Learn how the 3 Pillars and AI-driven sandboxing provide a new defensive archi...
> CVE-2026-3580 Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V
Information published.
> CVE-2026-3849 Buffer Overflow in HPKE via Oversized ECH Config
Information published.
> Barracuda strengthens cyber resilience with BarracudaONE platform updates
Barracuda Networks has announced advancements to the BarracudaONE cybersecurity platform and Barracuda Partner Success Program. The latest innovations strengthen cyber resilience across email, network access and generative AI usage, while the enhanced partner program delivers new benefits, incentive...
> CVE-2026-3579 Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I
Information published.
> CVE-2026-3229 Integer Overflow in Certificate Chain Allocation
Information published.
> Piratage du CROUS : les données de 774 000 étudiants dans la nature
Après l'Éducation nationale et les enseignants, 774 000 étudiants sont directement affectés par cette nouvelle fuite de données à la suite du piratage du CROUS. Le post Piratage du CROUS : les données de 774 000 étudiants dans la nature a été publié sur IT-Connect.
> CVE-2026-1005 Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path
Information published.
> CVE-2026-4395 Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path
Information published.