[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (120 articles)

|

// AI-powered summary generated at 16:00

> CVE-2026-33937 Handlebars.js has JavaScript Injection via AST Type Confusion
Information published.
> CVE-2026-33941 Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
Information published.
> Ubuntu 20.04 LTS Pyasn1 High Risk DoS Vulnerabilities USN-8134-1
Several security issues were fixed in pyasn1.
> CVE-2026-33916 Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection
Information published.
> CVE-2026-33940 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
Information published.
> Ubuntu 24.04 ImageMagick Critical DoS Risk USN-8127-1 CVE-2026-23952
Several security issues were fixed in ImageMagick.
> CVE-2026-34353
Information published.
> CVE-2026-33750 brace-expansion: Zero-step sequence causes process hang and memory exhaustion
Information published.
> Piratage Commission européenne : 350 Go de données volées sur des serveurs AWS
Le groupe de pirates ShinyHunters a revendiqué une cyberattaque contre la Commission européenne, et plus particulièrement la plateforme web Europa.eu. Le post Piratage Commission européenne : 350 Go de données volées sur des serveurs AWS a été publié sur IT-Connect.
> CVE-2026-33895 Forge has signature forgery in Ed25519 due to missing S > L check
Information published.
> CVE-2026-33896 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
Information published.
> Dutch Finance Ministry takes treasury banking portal offline after breach
The Dutch Ministry of Finance took some of its systems offline, including the digital portal for treasury banking, while investigating a cyberattack detected two weeks ago. [...]
> CVE-2026-33891 Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
Information published.
> CVE-2026-33542 Incus does not verify combined fingerprint when downloading images from simplestreams servers
Information published.
> Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install
See how the attack works, what to look for, and how to remediate. The post Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install appeared first on Security Boulevard.
> CVE-2026-0965 Libssh: libssh: denial of service via improper configuration file handling
Information published.
> CVE-2026-21712
Information published.
> Common Entra ID Security Assessment Findings – Part 2: Privileged Unprotected Groups
In part 2 of our 4-part series on common Entra ID security findings, we show how seemingly harmless group configurations can be abused to bypass security controls and gain high privileges. The post shows scenarios where insufficiently protected groups are used to: weaken Conditional Access protect...
> CVE-2026-0967 Libssh: libssh: denial of service via inefficient regular expression processing
Information published.
> CVE-2026-0966 Libssh: buffer underflow in ssh_get_hexa() on invalid input
Information published.