[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Le scanner Trivy piraté une seconde fois : attention au vol de secrets
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-03-20 08:07]
Le jeudi 19 mars 2026, une version malveillante de Trivy a été publiée par les pirates : v0.69.4. Elle contenait un script permettant de voler des secrets. Le post Le scanner Trivy piraté une seconde fois : attention au vol de secrets a été publié sur IT-Connect.
> International joint action disrupts world’s largest DDoS botnets
[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-03-20 08:05]
Authorities from the United States, Germany, and Canada have taken down Command and Control (C2) infrastructure used by the Aisuru, KimWolf, JackSkid, and Mossad botnets to infect Internet of Things (IoT) devices. [...]
> CVE-2026-23214 btrfs: reject new transactions if the fs is fully read-only
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]
Information published.
> CVE-2026-23221 bus: fsl-mc: fix use-after-free in driver_override_show()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]
Information published.
> Semgrep Multimodal brings AI reasoning and rule-based analysis to code security
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-20 07:47]
Semgrep announced Semgrep Multimodal, a system that combines AI reasoning with rule-based analysis for detection, triage, and remediation. Its detection finds up to 8x more true positives while cutting noise by 50% compared to foundation models alone, and has already discovered dozens of zero-days a...
> CVE-2026-23213 drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]
Information published.
> CVE-2026-23227 drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]
Information published.
> ConductorOne unveils AI Access Management to accelerate secure, compliant AI adoption
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-03-20 07:39]
ConductorOne has announced its AI Access Management product extension, a unified control plane for managing access to AI tools, agents, and MCP connections across the enterprise. The platform enables organizations to accelerate AI adoption while maintaining full visibility, policy enforcement, and c...
> CVE-2006-10002 XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]
Information published.
> CVE-2006-10003 XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:04]
Information published.
> Microsoft: March Windows updates break Teams, OneDrive sign-ins
[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-03-20 07:33]
Microsoft says the March Windows 11 update breaks sign-ins with Microsoft accounts across multiple Microsoft apps, including Teams and OneDrive. [...]
> CVE-2026-23110 scsi: core: Wake up the error handler when final completions race against each other
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:03]
Information published.
> CVE-2026-23171 bonding: fix use-after-free due to enslave fail after slave array update
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:03]
Information published.
> Why MCP Gateways are a Bad Idea (and What to Do Instead)   
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-03-20 07:33]
MCP Gateways are the wrong abstraction for AI security. Discover why runtime hooks and MCP registries offer a superior, context-aware defense against data leaks and unauthorized tool calls in modern agentic architectures. The post Why MCP Gateways are a Bad Idea (and What to Do Instead)    appeare...
> CVE-2026-23113 io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:03]
Information published.
> CVE-2026-23118 rxrpc: Fix data-race warning and potential load/store tearing
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:03]
Information published.
> Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation
[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-03-20 07:32]
The lesser-known JackSkid and Mossad botnets have also been targeted in the operation. The post Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation appeared first on SecurityWeek.
> CVE-2026-23126 netdevsim: fix a race issue related to the operation on bpf_bound_progs list
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:03]
Information published.
> CVE-2026-23154 net: fix segmentation of forwarding fraglist GRO
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-03-20 08:03]
Information published.
> While you're here, could you go out of your way to do an impossible job?
[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2026-03-20 07:30]
He would have gotten away with it too, if it weren't for a meddling security team's fear of USB On Call  Each Friday The Register offers a fresh installment of On Call, the reader-contributed column that celebrates the fine art of tech support.…