[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> “Free” Surveillance Tech Still Comes at a High and Dangerous Cost
Surveillance technology vendors, federal agencies, and wealthy private donors have long helped provide local law enforcement “free” access to surveillance equipment that bypasses local oversight. The result is predictable: serious accountability gaps and data pipelines to other entities, including I...
> News alert: GitGuardian raises $50M to tackle non-human identities crisis, AI agent security gap
NEW YORK, Feb. 11, 2026, CyberNewswire — GitGuardian, a leading secrets and Non-Human Identity (NHI) security platform and #1 app on GitHub Marketplace, today announced a $50 million Series C funding round led by global software investor Insight Partners
 (more
) The post News alert: GitGuardian ra...
> 🗣 Homeland Security Wants Names | EFFector 38.3
Criticize the government online? The Department of Homeland Security (DHS) might ask Google to cough up your name. By abusing an investigative tool called "administrative subpoenas," DHS has been demanding that tech companies hand over users' names, locations, and more. We're explaining how companie...
> Ubuntu 24.04 Linux Kernel Critical Threats CVE-2024-36331
Several security issues were fixed in the Linux kernel.
> Ubuntu 22.04 24.04 Python Multipart Important Denial of Service USN-8027-1
Several security issues were fixed in Python-Multipart.
> Slackware 15.0 libpng Significant Heap Overflow Patch SSA-2026-042-02
New libpng packages are available for Slackware 15.0 and -current to fix a security issue.
> First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials
Cybersecurity researchers have discovered what they said is the first known malicious Microsoft Outlook add-in detected in the wild. In this unusual supply chain attack detailed by Koi Security, an unknown attacker claimed the domain associated with a now-abandoned legitimate add-in to serve a fake...
> Slackware 15.0 gnutls Important Security Fix CVE-2026-1584
New gnutls packages are available for Slackware 15.0 and -current to fix security issues.
> Proactive strategies for cyber resilience with Wazuh
Cyber resilience means anticipating threats, detecting them early, and recovering fast when incidents occur. Wazuh shows how its open source SIEM and XDR unify visibility, detection, and automated response to strengthen proactive defense. [...]
> Agentic AI Security Starter Kit: Where Autonomous Systems Fail and How to Defend Against It
4 min readMany teams are approaching agentic AI with a mixture of interest and unease. Senior leaders see clear potential for efficiency and scale. Builders see an opportunity to remove friction from repetitive work. Security teams, meanwhile, are asked to enable this progress without becoming a b...
> USN-8027-1: Python-Multipart vulnerabilities
It was discovered that Python-Multipart incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Python-Multipart to consume excessive resources, leading to a regular expression denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2024-24762...
> LummaStealer infections surge after CastleLoader malware campaigns
A surge in LummaStealer infections has been observed, driven by social engineering campaigns leveraging the ClickFix technique to deliver the CastleLoader malware. [...]
> The strategic SIEM buyer’s guide: Choosing an AI-ready platform for the agentic era
New guide details how a unified, AI ready SIEM platform empowers security leaders to operate at the speed of AI, strengthen resilience, accelerate detection and response, and more. The post The strategic SIEM buyer’s guide: Choosing an AI-ready platform for the agentic era appeared first on Microsof...
> USN-8028-1: Linux kernel vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331) Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...
> North Korean Hackers Use Deepfake Video Calls to Target Crypto Firms
Campaign combines stolen Telegram accounts, fake Zoom calls and ClickFix attacks to deploy infostealer malware
> CBP Signs Clearview AI Deal to Use Face Recognition for ‘Tactical Targeting’
US Border Patrol intelligence units will gain access to a face recognition tool built on billions of images scraped from the internet.
> Format OOXML : LibreOffice dénonce le verrouillage imposé par Microsoft
La compatibilité entre Office et LibreOffice est imparfaite à cause de Microsoft : le format OOXML est pointé du doigt par The Document Foundation. Le post Format OOXML : LibreOffice dénonce le verrouillage imposé par Microsoft a été publié sur IT-Connect.
> Espionnage présumé chez Dassault Aviation
IntĂ©rimaire chez Dassault soupçonnĂ© d’avoir filmĂ© des Rafale avec des lunettes-camĂ©ra, la DGSI en alerte....
> Kimwolf Botnet Swamps Anonymity Network I2P
For the past week, the massive "Internet of Things" (IoT) botnet known as Kimwolf has been disrupting the The Invisible Internet Project (I2P), a decentralized, encrypted communications network designed to anonymize and secure online communications. I2P users started reporting disruptions in the net...
> Moscow moves to throttle Telegram as Kremlin pushes its own messaging app
Russia’s communications regulator, Roskomnadzor, confirmed Tuesday that it has deliberately “slowed down” the app, which has nearly 90 million local users, citing the company’s failure to comply with Russian law.