[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (9 articles)

|

// AI-powered summary generated at 12:01

> CVE-2025-38386 ACPICA: Refuse to evaluate a method if arguments are missing
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-17 01:01]
Information published.
> CVE-2025-38389 drm/i915/gt: Fix timeline left held on VMA alloc error
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-17 01:01]
Information published.
> Homomorphic Encryption for Privacy-Preserving Model Context Sharing
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-17 00:19]
Discover how homomorphic encryption (HE) enhances privacy-preserving model context sharing in AI, ensuring secure data handling and compliance for MCP deployments. The post Homomorphic Encryption for Privacy-Preserving Model Context Sharing appeared first on Security Boulevard.
> CVE-2025-38387 RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-17 01:01]
Information published.
> What is the Difference Between LDAP and Single Sign-On?
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-17 00:14]
Explore the differences between LDAP and Single Sign-On (SSO) for user authentication. Understand their use cases, benefits, and how they fit into your enterprise security strategy. The post What is the Difference Between LDAP and Single Sign-On? appeared first on Security Boulevard.
> Configuring Users Without OTP Login: A Guide
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-17 00:09]
Learn how to configure users without OTP login in your applications. This guide covers conditional authentication, account settings, and fallback mechanisms for seamless access. The post Configuring Users Without OTP Login: A Guide appeared first on Security Boulevard.
> Stay Secure: Why Cyber Hygiene Should Be Part of Your Personal Hygiene
[SOURCE] Palo Alto Unit 42 [LANGUAGE: EN] [DATE: 2025-12-17 00:00]
Cyber hygiene is just as vital as personal hygiene. Unit 42 shares tips for people of all experience levels to keep their digital lives secure. The post Stay Secure: Why Cyber Hygiene Should Be Part of Your Personal Hygiene appeared first on Unit 42.
> Assura Named to MSSP Alert and Cyber Alliance’s 2025 “Top 250 MSSPs,” Ranking at Number 94
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-17 00:05]
FOR IMMEDIATE RELEASE Richmond, VA — December 11, 2025 — Assura is proud to announce that it has been named to the MSSP Alert and CyberRisk Alliance partnership’s prestigious Top 250 MSSPs list for 2025, securing the #94 position among the world’s leading Managed Security Service Providers. “Making...
> Multiples vulnérabilités dans Google Chrome (17 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-17 00:00]
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
> Multiples vulnérabilités dans les produits Synology (17 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-17 00:00]
De multiples vulnérabilités ont été découvertes dans les produits Synology. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
> Introducing Pathfinding.cloud
[SOURCE] Datadog Security Labs [LANGUAGE: EN] [DATE: 2025-12-17 00:00]
Introducing Pathfinding.cloud, a library of AWS IAM privilege escalation paths
> Vulnérabilité dans Mozilla Firefox (17 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-17 00:00]
Une vulnérabilité a été découverte dans Mozilla Firefox. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
> Multiples vulnérabilités dans GLPI (17 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-17 00:00]
De multiples vulnérabilités ont été découvertes dans GLPI. Elles permettent à un attaquant de provoquer une injection de code indirecte à distance (XSS) et un contournement de la politique de sécurité.
> SecretarĂ­a de Hacienda del Gobierno de Sonora
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-17 00:00]
Un cyberattaque présumée a visé le système financier du gouvernement de Sonora, provoquant la suspension temporaire des services numériques de la Secretaría de Hacienda. Les autorités ont confirmé des tentatives de piratage et ont initié une analyse pour contenir les risques. Les services ont été ré...
> Enterprise automation resilience with EDB and Red Hat Ansible Automation Platform
[SOURCE] Red Hat Security [LANGUAGE: EN] [DATE: 2025-12-17 00:00]
In today's modern technological world, IT infrastructure must deliver uncompromising speed and reliability to meet the critical demands of the business. Centralized automated platforms, such as Red Hat Ansible Automation Platform, are essential for managing critical IT infrastructure. These platform...
> Servicio Nacional de GeologĂ­a y MinerĂ­a (Sernageomin)
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-17 00:00]
Le Servicio Nacional de Geología y Minería (Sernageomin) a été victime d'une attaque informatique, ce qui a provoqué une interruption temporaire de son portail institutionnel et de ses plateformes internes. Les protocoles d'urgence ont été activés pour protéger les opérations critiques et garantir l...
> KI in der Cybersicherheit: Gekommen, um zu bleiben
[SOURCE] Naked Security [LANGUAGE: EN] [DATE: 2025-12-17 00:00]
> Russian APT group pivots to network edge device misconfigurations
[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2025-12-16 23:54]
A Russian state-sponsored cyberespionage group has been targeting energy companies and critical infrastructure providers by exploiting misconfigurations in network-edge devices. The group has been operating since at least 2021 and has exploited device misconfigurations befo...
> A cyber attack hit PetrĂłleos de Venezuela (PDVSA) disrupting export operations
[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2025-12-16 23:48]
A cyber attack hit Petróleos de Venezuela (PDVSA), Venezuela’s state-owned oil company, over the weekend, disrupting its export operations. Venezuela’s state oil company PDVSA was hit by a cyberattack over the weekend that disrupted export operations. The company says the incident only affected some...
> Illusory Systems settles with FTC over 2022 cryptocurrency hack
[SOURCE] CyberScoop [LANGUAGE: EN] [DATE: 2025-12-16 23:46]
The company was charged with materially misrepresenting the cybersecurity of its Token Bridge software as executives failed to implement reasonable security. The post Illusory Systems settles with FTC over 2022 cryptocurrency hack appeared first on CyberScoop.