[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (2 articles)

|

// AI-powered summary generated at 08:00

> ZDI-26-120: GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs ar...
> ZDI-26-121: GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs ar...
> Public mobile networks are being weaponized for combat drone operations
On June 1, 2025, Ukraine launched a coordinated drone strike on five airfields inside Russia, disabling or destroying aircrafts. The attack involved more than 100 drones carrying explosive payloads and targeting aircraft on the ground. The drones used mobile networks to transmit telemetry, receive i...
> ZDI-26-122: PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of PDF-XChange Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The follo...
> Poland bans camera-packing cars made in China cars from military bases
Dell, however, is welcome to help build a local-language LLM Poland’s Ministry of Defence has banned Chinese cars – and any others include tech to record position, images, or sound – from entering protected military facilities.…
> Accès au fichier FICOBA : les données bancaires de plus d’un million de Français sont dans la nature !
La DGFiP affirme qu'un pirate est parvenu à accéder au fichier FICOBA et à mettre la main sur les données bancaires (RIB / IBAN) de 1,2 million de Français. Le post Accès au fichier FICOBA : les données bancaires de plus d’un million de Français sont dans la nature ! a été publié sur IT-Connect.
> Consumers feel less judged by AI debt collectors
Debt collection agencies are starting to use automated voice systems and AI-driven messaging to handle consumer calls. These systems help scale outreach, reduce call center staffing demands, and offer 24/7 service. A new study covering 11 European countries found that this shift changes how consumer...
> Attackers keep finding the same gaps in security programs
Attackers keep getting in, often through the same predictable weak spots: identity systems, third-party access, and poorly secured perimeter devices. A new threat report from Barracuda based on Managed XDR telemetry from 2025 shows that many successful incidents still start with basic access and con...
> Chromium: CVE-2026-2319 Race in DevTools
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
> Chromium: CVE-2026-2316 Insufficient policy enforcement in Frames
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
> ISC Stormcast For Thursday, February 19th, 2026 https://isc.sans.edu/podcastdetail/9816, (Thu, Feb 19th)
> Chromium: CVE-2026-2314 Heap buffer overflow in Codecs
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
> Chromium: CVE-2026-2322 Heap buffer overflow in Codecs
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
> A Busy Week for Cybersecurity Speaking Engagements
  I have a busy week with podcasts, webinars, and a keynote! Communicating and sharing is vital to the cybersecurity industry. It is how we leverage shared knowledge and experiences to make more informed decisions and gain better positions against our adversaries. Yesterday (Tuesday Feb 17th) I wa...
> Smashing Security podcast #455: Face off: Meta’s Glasses and America’s internet kill switch
Could America turn off Europe's internet? That’s one of the questions that Graham and special guest James Ball will be exploring as they discuss tech sovereignty. Could Gmail, cloud services, and critical infrastructure really become geopolitical leverage? And is anyone actually building a Plan...
> Adaptive HEAL Security for Multi-Agent Semantic Routing
Learn how to secure multi-agent semantic routing in MCP environments with Adaptive HEAL security, post-quantum cryptography, and zero-trust AI architecture. The post Adaptive HEAL Security for Multi-Agent Semantic Routing appeared first on Security Boulevard.
> University of Mississippi Medical Center
L'University of Mississippi Medical Center a confirmé avoir subi une cyberattaque, ce qui a entraîné la fermeture de ses cliniques et l'annulation de chirurgies. Les systèmes informatiques de l'hôpital, y compris les dossiers médicaux électroniques, sont actuellement hors service. Les autorités, don...
> Fundação Getúlio Vargas
La Fundação Getúlio Vargas a été victime d'une attaque de sequestro de données par le groupe Dragonforce, avec 1,52 To de données compromises, dont des informations personnelles sensibles. L'attaque a eu lieu après un incident de cybersécurité similaire en février. Le groupe Dragonforce exige un ran...
> Multiples vulnérabilités dans les produits Splunk (19 février 2026)
De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
> ACME Truck Line, Inc.
ACME Truck Line, Inc. suffered a data breach due to an unauthorized third-party gaining access to their computer systems. The breach occurred on February 19, 2026, and may have exposed personal information including names, Social Security numbers, and financial account information. ACME is offering...