De multiples vulnérabilités ont été découvertes dans HAProxy. Elles permettent à un attaquant de provoquer un déni de service à distance.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.
Just 58 CVEs to spar with in February, but plenty are already under attackCategories: Threat Research, X-opsTags: Patch Tuesday, Microsoft, Windows
There has been much discussion lately regarding the "Zero CVE" movement. At Red Hat, we welcome this focus, emphasized by our recent announcement of Project Hummingbird to provide more frequently updated container images. Hummingbird represents a shift in how customers receive Red Hat's open source...
Modern software development runs on open source, and that’s not hyperbole. Python alone pulls in dozens—sometimes hundreds—of third‑party libraries for even the simplest applications. While public repositories have fueled innovation at incredible speed, they’ve also created a new class of risk: Opaq...
Livingston HealthCare, un hôpital du Montana, a subi une atteinte à la cybersécurité qui a perturbé son système téléphonique et certaines de ses opérations. L'hôpital a temporairement mis hors ligne certaines de ses systèmes pour évaluer la situation et travailler avec des experts externes. Les soin...
In the world of enterprise software security, few metrics are as coveted, or as elusive, as "zero CVEs." Simply put, a zero CVE (Common Vulnerabilities and Exposures) approach aims to deliver software components that are completely free of known security vulnerabilities at the time of shipping. For...
Le groupe hôtelier japonais ワシントンホテル株式会社 a subi une attaque de ransomware le 13 février 2026, entraînant une violation de données et des perturbations dans certaines de ses opérations. L'entreprise a mis en place un centre de crise et travaille avec des experts externes pour contenir l'a...
Around February 13, the NHHS discovered unusual activity in its network environment. The investigation, concluded on March 9, revealed that some information might have been copied by an unauthorized individual.
The vendor said the memory-corruption defect was exploited to target specific people, but it did not describe the objectives of the attack.
The post Apple discloses first actively exploited zero-day of 2026 appeared first on CyberScoop.
Eyemart Express, LLC suffered a cybersecurity incident involving unauthorized access to their systems on February 12, 2026, which included information associated with employee employment, such as names, addresses, and payroll information. A cyberattack was claimed on April 30.
Le 7 septembre, la société Washington Hotel a publié le rapport final concernant une attaque par ransomware survenue le 13 février. L'intrusion, passée par un équipement connecté à l'extérieur, avait entraîné le chiffrement de certains serveurs et causé des pannes de terminaux de cartes bancaires da...
nginx could be made to insert content into proxied server data.
libpng could be made to crash if it opened a specially crafted file.
Ransomware has permanently changed how security leaders think about risk. Verizon’s 2025 Data Breach Investigations Report found that ransomware was involved in 44% of all breaches. For small and midsize businesses, the problem is big; ransomware was involved in nearly nine ou...
HAProxy could be made to crash if it received specially crafted network traffic.
Are you a good bot or a bad bot? More than 30 malicious Chrome extensions installed by at least 260,000 users purport to be helpful AI assistants, but they steal users' API keys, email messages, and other personal data. Even worse: many of these are still available on the Chrome Web Store as of this...
The Russian government is attempting to block WhatsApp in the country as its crackdown on communication platforms not under its control intensifies. [...]
※この記事は自動翻訳されています。正確な内容につきましては原文をご参照ください。 要約 主に東南アジアを拠点とする人身売買の疑いがあるサービスへの暗号資産の資金フローは、2025年に85%増加し、特定されたサービス全体で数億ドル規模に達しました。 Telegramベースの「インターナショナルエスコート」サービスは、中...
Securing Agentic AI Connectivity
AI agents are no longer theoretical, they are here, powerful, and being connected to business systems in ways that introduce cybersecurity risks! They’re calling APIs, invoking MCPs, reasoning across systems, and acting autonomously in production environments, rig...