[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (195 articles)

|

// AI-powered summary generated at 20:00

> CVE-2026-23320 usb: gadget: f_ncm: align net_device lifecycle with bind/unbind
Information published.
> CVE-2026-23304 ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
Information published.
> CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard
Une nouvelle alerte de sécurité pour les solutions Citrix NetScaler après la découverte de 2 failles, dont l'une particulièrement inquiétante : CVE-2026-3055. Le post CVE-2026-3055 : appliquez ce patch Citrix avant qu’il ne soit trop tard a été publié sur IT-Connect.
> CVE-2026-23303 smb: client: Don't log plaintext credentials in cifs_set_cifscreds
Information published.
> CVE-2026-23334 can: usb: f81604: handle short interrupt urb messages properly
Information published.
> AI SOC vendors are selling a future that production deployments haven’t reached yet
Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in analyst workload, and an accelerating path toward humanless operations. Practitioners buying and deploying those platforms de...
> CVE-2026-23346 arm64: io: Extract user memory type in ioremap_prot()
Information published.
> CVE-2026-23313 i40e: Fix preempt count leak in napi poll tracepoint
Information published.
> WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls. "Instead of the usual HTTP requests or image beacons, this malware uses WebRTC data channels to load its payload...
> CVE-2026-23306 scsi: pm8001: Fix use-after-free in pm8001_queue_command()
Information published.
> CVE-2026-23383 bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
Information published.
> Enhancing User Experience with Passwordless Authentication: A Design-First Approach
Improve user experience with passwordless authentication. Reduce login friction, boost security, and increase conversions with UX-first design. The post Enhancing User Experience with Passwordless Authentication: A Design-First Approach appeared first on Security Boulevard.
> CVE-2026-23307 can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
Information published.
> CVE-2026-23364 ksmbd: Compare MACs in constant time
Information published.
> A nearly undetectable LLM attack needs only a handful of poisoned samples
Prompt engineering has become a standard part of how large language models are deployed in production, and it introduces an attack surface most organizations have not yet addressed. Researchers have developed and tested a prompt-based backdoor attack method, called ProAttack, that achieves attack su...
> CVE-2026-23292 scsi: target: Fix recursive locking in __configfs_open_file()
Information published.
> CVE-2026-23390 tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow
Information published.
> Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP
Les pirates de TeamPCP sont parvenus à compromettre LiteLLM, un paquet téléchargé plus de 90 millions de fois par mois. L'objectif : voler des identifiants. Le post Piratage de LiteLLM : des millions d’utilisateurs Python sous la menace de TeamPCP a été publié sur IT-Connect.
> CVE-2026-23368 net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
Information published.
> CVE-2026-23286 atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
Information published.