[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> Risks, emerging when developing or using open-source software
How the popularization of AI and the simplification of development are creating new risks for corporate security.
> USN-8143-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - GPU drivers; - BTRFS file system; - GFS2 file system; - UDF file system; - NFC subsys...
> Claude Code leak used to push infostealer malware on GitHub
Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. [...]
> Securing the Supply Chain: How SentinelOne®’s AI EDR Stops the Axios Attack Autonomously
Read our blog post to learn how SentinelOne’s AI EDR autonomously stopped a global LiteLLM supply chain attack before execution.
> The $250K Single Point of Failure Hiding in Every SOC
One architect, 200 static playbooks, zero backup plan. The real consolidation problem isn't tool count — it's architectural dependency. Here's what replaces it. The post The $250K Single Point of Failure Hiding in Every SOC appeared first on D3 Security. The post The $250K Single Point of Failure Hi...
> Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials
A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal database credentials, SSH private keys, Amazon Web Services (AWS) secrets, shell command history, Stripe API keys, and GitHub tokens at scale. Cisco Talos...
> Ubuntu 25.10 libjxl Critical DoS Risk CVE-2026-1837 USN-8146-1
libjxl could be made to crash or run programs as your login if it opened a specially crafted file.
> ConductorOne Extends Reach of Identity Governance to AI
ConductorOne has extended the reach of its identity governance platform to artificial intelligence (AI) tools, agents and integrations based on the Model Context Protocol (MCP). Additionally, the company has now integrated its namesake identity governance platform with the CrowdStrike Falcon Next-G...
> USN-8146-1: libjxl vulnerability
Daniel NovomeskĂ˝ discovered that libjxl did not properly manage memory when decoding certain files. An attacker could use this issue to cause libjxl to crash, resulting in denial of service, or possibly execute arbitrary code.
> Ubuntu 22.04 LTS Cairo Critical Denial Service Issues USN-8140-1
Several security issues were fixed in Cairo.
> 200,000 WordPress Sites Affected by Arbitrary File Deletion Vulnerability in Perfmatters WordPress Plugin
On March 1st, 2026, we received a submission for an Arbitrary File Deletion vulnerability in Perfmatters, a WordPress plugin with more than 200,000 active installations. This vulnerability makes it possible for unauthenticated threat actors to delete arbitrary files, including the wp-config.php file...
> Drift loses $280 million as hackers seize Security Council powers
The Drift Protocol lost at least $280 million after a threat actor took control of its Security Council administrative powers in a planned, sophisticated operation. [...]
> Drift loses $280 million North Korean hackers seize Security Council powers
The Drift Protocol lost at least $280 million after a threat actor took control of its Security Council administrative powers in a planned, sophisticated operation. [...]
> [un]prompted 2026 – Opening Poem
Author, Creator, Presenter & Poet: Dan Hubbard Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations') YouTube Channel. Permalink The post [un]prompted 2026 – Opening Poem appeared...
> 5 Questions That Expose Whether an “Agentic SOC” Actually Works in Production
Agentic SOC is the hottest label in cybersecurity AI. Before you evaluate any platform using it, ask these five questions — and understand why architecture matters more than the name. The post 5 Questions That Expose Whether an “Agentic SOC” Actually Works in Production appeared first on D3 Security...
> USN-8149-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, CVE-2026-23074, CVE-2026-23111)
> Hasbro hit by cyberattack, investigates possible data breach
Hasbro suffers a cyberattack, disrupting some operations; the company is probing the scope and potential data compromise. Toy giant Hasbro reported a cyberattack on Wednesday that disrupted certain company operations. The firm is investigating the full extent of the incident, including whether any f...
> Chainalysis Links NYC 2026: AI Amplification, TradFi Convergence, and the Power of Networked Intelligence
Chainalysis Links 2026 brought together the brightest minds across cryptocurrency exchanges, global law enforcement, and traditional finance (TradFi) for an… The post Chainalysis Links NYC 2026: AI Amplification, TradFi Convergence, and the Power of Networked Intelligence appeared first on Chainalys...
> USN-8147-1: libarchive vulnerabilities
It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 14.04 LTS. (CVE-2019-19221) It was discovered that libarchive incorrectly handled certain RAR archive files. If a u...
> 97% of Enterprises Expect a Major AI Agent Security Incident Within the Year
Is Your Business Ready? The threat is no longer hypothetical. AI agents – autonomous systems capable of planning, reasoning and acting across digital environments — are already operating inside enterprise systems. They’re retrieving data, triggering transactions, and interacting across services thro...