[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> CVE-2025-38225 media: imx-jpeg: Cleanup after an allocation error
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:02]
Information published.
> CVE-2025-38230 jfs: validate AG parameters in dbMount() to prevent crashes
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:02]
Information published.
> Russia was behind a destructive cyber attack on a water utility in 2024, Denmark says
[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2025-12-20 00:46]
Denmark has blamed Russia for a destructive cyberattack on a water utility, calling it part of Moscow’s hybrid campaign against Western critical infrastructure. Denmark has accused Russia of orchestrating destructive cyberattacks against a water utility in 2024, framing them as part of broader hybri...
> CVE-2025-38245 atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:02]
Information published.
> CVE-2025-38249 ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:02]
Information published.
> Here’s What’s in the DOJ’s Epstein File Release—and What’s Missing
[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2025-12-20 00:34]
From photos of former president Bill Clinton to images of strange scrapbooks, the Justice Department’s release is curious but far from revelatory.
> CVE-2025-38259 ASoC: codecs: wcd9335: Fix missing free of regulator supplies
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:02]
Information published.
> CVE-2025-68324 scsi: imm: Fix use-after-free bug caused by unfinished delayed work
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:01]
Information published.
> FedRAMP Audit Log Retention Rules and Storage Options
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-20 00:30]
Every cloud service provider that seeks an authorization to operate with the federal government using the FedRAMP framework has to undergo and pass an audit. Beyond passing the audit, the CSP needs to keep and maintain proof of not just their external audit, but also internal audits, continuous moni...
> CVE-2025-68390 Elasticsearch Allocation of Resources Without Limits or Throttling
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:01]
Information published.
> CVE-2025-68384 Elasticsearch Allocation of Resources Without Limits or Throttling
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:01]
Information published.
> Lepido Rocco
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-20 00:00]
Le centre de formation professionnelle Lepido Rocco de Villorba a subi une attaque hacker, les données personnelles des étudiants ont disparu. L'attaque a eu lieu entre le 20 et le 21 décembre 2025. Les investigations sont en cours pour déterminer l'ampleur de la fuite de données.
> CVE-2025-38062 genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:01]
Information published.
> CVE-2025-38040 serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:01]
Information published.
> Warren County Sheriff's Office
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-20 00:00]
Le bureau du shérif du comté de Warren a détecté une activité suspecte sur son réseau informatique le 20 décembre 2025, déclenchant une enquête pour une cyberattaque. Des criminels cybernétiques ont accédé au réseau de l'office, copié et supprimé certaines données, affectant les employés et leurs fa...
> CVE-2025-38148 net: phy: mscc: Fix memory leak when using one step timestamping
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:01]
Information published.
> CVE-2025-38166 bpf: fix ktls panic with sockmap
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:01]
Information published.
> Ukrainian national pleads guilty to Nefilim ransomware attacks
[SOURCE] CyberScoop [LANGUAGE: EN] [DATE: 2025-12-19 22:53]
The 35-year-old faces up to 10 years in jail and authorities announced an $11 million reward for information on his alleged co-conspirator who remains at large. The post Ukrainian national pleads guilty to Nefilim ransomware attacks appeared first on CyberScoop.
> CVE-2025-38191 ksmbd: fix null pointer dereference in destroy_previous_session
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:01]
Information published.
> CVE-2025-38177 sch_hfsc: make hfsc_qlen_notify() idempotent
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-20 01:01]
Information published.