[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (37 articles)

|

// AI-powered summary generated at 12:00

> CVE-2026-23126 netdevsim: fix a race issue related to the operation on bpf_bound_progs list
Information published.
> CVE-2026-23118 rxrpc: Fix data-race warning and potential load/store tearing
Information published.
> Semgrep Multimodal brings AI reasoning and rule-based analysis to code security
Semgrep announced Semgrep Multimodal, a system that combines AI reasoning with rule-based analysis for detection, triage, and remediation. Its detection finds up to 8x more true positives while cutting noise by 50% compared to foundation models alone, and has already discovered dozens of zero-days a...
> CVE-2026-23113 io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
Information published.
> CVE-2026-23171 bonding: fix use-after-free due to enslave fail after slave array update
Information published.
> ConductorOne unveils AI Access Management to accelerate secure, compliant AI adoption
ConductorOne has announced its AI Access Management product extension, a unified control plane for managing access to AI tools, agents, and MCP connections across the enterprise. The platform enables organizations to accelerate AI adoption while maintaining full visibility, policy enforcement, and c...
> CVE-2026-23110 scsi: core: Wake up the error handler when final completions race against each other
Information published.
> CVE-2026-23265 f2fs: fix to do sanity check on node footer in {read,write}_end_io
Information published.
> Microsoft: March Windows updates break Teams, OneDrive sign-ins
Microsoft says the March Windows 11 update breaks sign-ins with Microsoft accounts across multiple Microsoft apps, including Teams and OneDrive. [...]
> CVE-2026-27135 nghttp2 Denial of service: Assertion failure due to the missing state validation
Information published.
> CVE-2026-23207 spi: tegra210-quad: Protect curr_xfer check in IRQ handler
Information published.
> Why MCP Gateways are a Bad Idea (and What to Do Instead)   
MCP Gateways are the wrong abstraction for AI security. Discover why runtime hooks and MCP registries offer a superior, context-aware defense against data leaks and unauthorized tool calls in modern agentic architectures. The post Why MCP Gateways are a Bad Idea (and What to Do Instead)    appeare...
> CVE-2025-71236 scsi: qla2xxx: Validate sp before freeing associated memory
Information published.
> CVE-2025-71233 PCI: endpoint: Avoid creating sub-groups asynchronously
Information published.
> Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation
The lesser-known JackSkid and Mossad botnets have also been targeted in the operation. The post Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation appeared first on SecurityWeek.
> CVE-2025-71235 scsi: qla2xxx: Delay module unload while fabric scan in progress
Information published.
> CVE-2025-71227 wifi: mac80211: don't WARN for connections on invalid channels
Information published.
> While you're here, could you go out of your way to do an impossible job?
He would have gotten away with it too, if it weren't for a meddling security team's fear of USB On Call  Each Friday The Register offers a fresh installment of On Call, the reader-contributed column that celebrates the fine art of tech support.…
> CVE-2025-71225 md: suspend array while updating raid_disks via sysfs
Information published.
> CVE-2025-71221 dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
Information published.