[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (7 articles)

|

// AI-powered summary generated at 04:00

> CVE-2025-68256 staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:38]
Information published.
> CVE-2025-68311 tty: serial: ip22zilog: Use platform device for probing
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:38]
Information published.
> Smashing Security podcast #449: How to scam someone in seven days
[SOURCE] Graham Cluley [LANGUAGE: EN] [DATE: 2026-01-08 00:31]
Romance scammers have apparently discovered astrology... and Taurus is their secret weapon. In episode 449 of "Smashing Security", we take a look inside an actual romance-fraud handbook - complete with scripts, personality “types”, corporate jargon, and a seven-day plan to get victims from hello...
> CVE-2025-38644 wifi: mac80211: reject TDLS operations when station is not associated
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:02]
Information published.
> CVE-2025-38630 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:02]
Information published.
> Quantum-Durable Integrity Verification for Machine-to-Machine Model Contexts
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2026-01-08 00:31]
Secure your MCP deployments with quantum-resistant integrity verification. Learn how to protect machine-to-machine model contexts from future quantum threats. The post Quantum-Durable Integrity Verification for Machine-to-Machine Model Contexts appeared first on Security Boulevard.
> CVE-2025-38639 netfilter: xt_nfacct: don't assume acct name is null-terminated
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:02]
Information published.
> CVE-2025-38499 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:02]
Information published.
> Analysis using Gephi with DShield Sensor Data, (Wed, Jan 7th)
[SOURCE] SANS ISC [LANGUAGE: EN] [DATE: 2026-01-08 00:13]
I&#;x26;#;39;m always looking for new ways of manipulating the data captured by my DShield sensor [1]. This time I used Gephi [2] and Graphiz [3] a popular and powerful tool for visualizing and exploring relationships between nodes, to examine the relationship between the source IP, filename and...
> CVE-2025-38635 clk: davinci: Add NULL check in davinci_lpsc_clk_register()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:02]
Information published.
> CVE-2025-38624 PCI: pnv_php: Clean up allocated IRQs on unplug
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:02]
Information published.
> 5 ways your firewall can keep ransomware out — and lock it down if it gets in
[SOURCE] Naked Security [LANGUAGE: EN] [DATE: 2026-01-08 00:00]
Categories: Sophos InsightsTags: Firewall, Ransomware
> CVE-2025-38634 power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:02]
Information published.
> CVE-2025-38502 bpf: Fix oob access in cgroup local storage
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:02]
Information published.
> Multiples vulnérabilités dans Trend Micro Apex Central (08 janvier 2026)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2026-01-08 00:00]
De multiples vulnérabilités ont été découvertes dans Trend Micro Apex Central. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
> CVE-2025-38497 usb: gadget: configfs: Fix OOB read on empty string write
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:02]
Information published.
> CVE-2025-38480 comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:01]
Information published.
> Multiples vulnérabilités dans GitLab (08 janvier 2026)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2026-01-08 00:00]
De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
> CVE-2025-38483 comedi: das16m1: Fix bit shift out of bounds
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:01]
Information published.
> CVE-2025-38495 HID: core: ensure the allocated report buffer can contain the reserved report ID
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-01-08 01:01]
Information published.