[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (6 articles)

|

// AI-powered summary generated at 04:00

> CVE-2026-23339 nfc: nci: free skb on nci_transceive early error paths
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:04]
Information published.
> CVE-2026-23307 can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-03-26 08:01]
Une nouvelle alerte de sécurité pour les solutions Citrix NetScaler après la découverte de 2 failles, dont l'une particulièrement inquiétante : CVE-2026-3055. Le post CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard a été publié sur IT-Connect.
> CVE-2026-23383 bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> CVE-2026-23306 scsi: pm8001: Fix use-after-free in pm8001_queue_command()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> AI SOC vendors are selling a future that production deployments haven’t reached yet
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-26 07:00]
Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in analyst workload, and an accelerating path toward humanless operations. Practitioners buying and deploying those platforms de...
> CVE-2026-23313 i40e: Fix preempt count leak in napi poll tracepoint
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> CVE-2026-23318 ALSA: usb-audio: Use correct version for UAC3 header validation
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-03-26 06:53]
Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls. "Instead of the usual HTTP requests or image beacons, this malware uses WebRTC data channels to load its payload...
> CVE-2026-23388 Squashfs: check metadata block offset is within range
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> CVE-2026-23286 atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> Enhancing User Experience with Passwordless Authentication: A Design-First Approach
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-26 06:34]
Improve user experience with passwordless authentication. Reduce login friction, boost security, and increase conversions with UX-first design. The post Enhancing User Experience with Passwordless Authentication: A Design-First Approach appeared first on Security Boulevard.
> CVE-2026-23368 net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> CVE-2026-23390 tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> A nearly undetectable LLM attack needs only a handful of poisoned samples
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-26 06:00]
Prompt engineering has become a standard part of how large language models are deployed in production, and it introduces an attack surface most organizations have not yet addressed. Researchers have developed and tested a prompt-based backdoor attack method, called ProAttack, that achieves attack su...
> CVE-2026-23292 scsi: target: Fix recursive locking in __configfs_open_file()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> CVE-2026-23364 ksmbd: Compare MACs in constant time
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:03]
Information published.
> Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-03-26 05:53]
Les pirates de TeamPCP sont parvenus à compromettre LiteLLM, un paquet téléchargé plus de 90 millions de fois par mois. L'objectif : voler des identifiants. Le post Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP a été publié sur IT-Connect.
> CVE-2026-23325 wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:02]
Information published.
> CVE-2026-23359 bpf: Fix stack-out-of-bounds write in devmap
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-26 08:02]
Information published.