> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape highlights significant threats and vulnerabilities. Check Point has linked a suspected Chinese malware supplier to multiple hacking campaigns utilizing a shared malware framework. Meanwhile, critical flaws in Xen Orchestra have been exploited, allowing attackers to execute arbitrary code with admin privileges. Microsoft’s November Patch Tuesday addressed over 1,200 vulnerabilities, including a zero-day in Outlook that could leak NTLM hashes. Additionally, hackers are targeting Qlik Sense servers and exploiting vulnerabilities in Cisco BroadWorks and Openwave. Lastly, the rise of AI-enhanced impersonation fraud continues to pose challenges, with three arrests reported in connection to these schemes. Organizations are urged to prioritize patch management and enhance their security posture against evolving threats.
|
// AI-powered summary generated at 16:00
Signature Healthcare et l'hôpital de Brockton ont confirmé un incident de cybersécurité perturbant certains systèmes informatiques, entraînant la diversion du trafic des ambulances et l'annulation des services d'infusion de chimiothérapie pour le 6 avril. Bien que les services d'urgence et les inter...
Le gouverneur du Minnesota, Tim Walz, a autorisé la Garde nationale à fournir une assistance d'urgence au comté de Winona suite à une cyberattaque survenue le lundi 7 avril 2026. Cette attaque, qui s'est prolongée jusqu'au mardi, a considérablement entravé la capacité du comté à fournir des services...
Desktop Window Manager Core Library 10.0.10240.0 - Privilege Escalation
Le Lycée Jean-Moulin de Béziers a été victime d'une cyberattaque par ransomware en avril 2026. Le groupe cybercriminel russe Medusa a exploité la vétusté de 700 ordinateurs sous Windows 7 pour crypter les fichiers de plus de 1285 postes pédagogiques. Bien qu'aucune rançon n'ait été demandée et qu'au...
ASP.net 8.0.10 - Bypass
Grafana 11.6.0 - SSRF
Le journal local Standard-Examiner, basé à Ogden, Utah, a signalé des difficultés de production importantes qui ont perturbé l'impression et la livraison de son édition papier en avril. Bien qu'un groupe de ransomware, Qilin, ait listé le journal le 2 mai, la publication n'a pas confirmé publiquemen...
Zhiyuan OA - arbitrary file upload leading
WBCE CMS 1.6.4 - Remote Code Execution
This week on the Lock and Code podcast, we speak with Peter Asaro about killer robots, how to stop them, and their obvious consequences.
RiteCMS 3.1.0 - Authenticated Remote Code Execution
WordPress Madara - Local File Inclusion
What Makes Non-Human Identity Security Protocols So Crucial? Where increasingly reliant on machine interactions, a critical question emerges for cybersecurity professionals: how do we secure these digital entities known as Non-Human Identities (NHIs)? With cyber threats becoming more sophisticated,...
is-localhost-ip 2.0.0 - SSRF
Fortinet FortiWeb v8.0.1 - Auth Bypass
What Are Non-Human Identities (NHIs) and Why Are They Crucial? Are you aware of the security gaps that can jeopardize your organization due to poorly managed machine identities? In cybersecurity, Non-Human Identities (NHIs) serve as the fundamental building blocks for securing machine-to-machine int...
Windows Kernel - Elevation of Privilege
How Can Proactive NHI Management Transform Cybersecurity? What do machine identities have in common with tourists? In cybersecurity, Non-Human Identities (NHIs) represent the digital equivalent of tourists, and their secrets are akin to passports. Mismanagement of these identities can lead to vulner...
Two security vulnerabilities (TROVE-2026-004 and TROVE-2025-015) were discovered in Tor, a connection-based low-latency anonymous communication system, which could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 0.4.9.6-0+deb12u1.
Two vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or HTTP request smuggling. For the oldstable distribution (bookworm), these problems have been fixed in version 9.2.5+ds-0+deb12u4.