[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 08:00

> CVE-2025-37731 Elasticsearch Improper Authentication
Information published.
> States Take On Tough Tech Policy Battles: 2025 in Review
State legislatures—from Olympia, WA, to Honolulu, HI, to Tallahassee, FL, and everywhere in between—kept EFF’s state legislative team busy throughout 2025. We saw some great wins and steps forward this year. Washington became the eighth state to enshrine the right to repair. Several states stepped u...
> SoundCloud confirms breach after member data stolen, VPN access disrupted
Audio streaming platform SoundCloud has confirmed that outages and VPN connection issues over the past few days were caused by a security breach in which threat actors stole a database containing user information. [...]
> USN-7937-1: Linux kernel (Azure FIPS) vulnerabilities
Jean-Claude Graf, Sandro RĂĽegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to e...
> AI-powered threat detection for MCP data manipulation attempts
Explore how AI-driven threat detection can secure Model Context Protocol (MCP) deployments from data manipulation attempts, with a focus on post-quantum security. The post AI-powered threat detection for MCP data manipulation attempts appeared first on Security Boulevard.
> [webapps] Summar Employee Portal 3.98.0 - Authenticated SQL Injection
Summar Employee Portal 3.98.0 - Authenticated SQL Injection
> [webapps] esm-dev 136 - Path Traversal
esm-dev 136 - Path Traversal
> Multiples vulnérabilités dans Tenable Nessus (16 décembre 2025)
De multiples vulnérabilités ont été découvertes dans Tenable Nessus. Elles permettent à un attaquant de provoquer un déni de service à distance et une atteinte à l'intégrité des données.
> Multiples vulnérabilités dans Moodle (16 décembre 2025)
De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une injection de code indirecte à distance (XSS) et un contournement de la politique de sécurité.
> Office of the Ombudsman
Le bureau de l'Ombudsman a subi une attaque de ransomware, les systèmes ont été désactivés pour minimiser les dommages. Une enquête forensique est en cours avec l'aide du Centre national de cybersécurité et des spécialistes externes. Le bureau travaille à rétablir les services en toute sécurité et à...
> Vulnérabilité dans Trend Micro Apex One (16 décembre 2025)
Une vulnérabilité a été découverte dans Trend Micro Apex One. Elle permet à un attaquant de provoquer une exécution de code arbitraire.
> Red Hat to acquire Chatterbox Labs: Frequently Asked Questions
On December 16, 2025, Red Hat announced the acquisition of Chatterbox Labs, a pioneer in model-agnostic AI safety and generative AI (gen AI) guardrails.The following questions and answers provide additional context on the acquisition and what it means for Red Hat customers and partners.The Announcem...
> Accelerating NetOps transformation with Ansible Automation Platform
2025 was an incredible year for network operations (NetOps) and Red Hat Ansible Automation Platform. To address growing network complexity, Red Hat provided the tools NetOps teams needed to implement a strategic automation approach. Through major platform releases, new partner integrations, and glob...
> The Center for Advanced Eye Care
The Center for Advanced Eye Care suffered a data security incident where unauthorized access to protected health information occurred. The incident was discovered on December 16, 2025, and the affected individuals were notified on February 19, 2026. The breach may have resulted in the unauthorized a...
> IMA Diligence Services
IMA Diligence Services, LLC suffered a data breach due to unauthorized access to a legacy server managed by a third-party. The incident occurred between December 8, 2025, and December 16, 2025, and potentially impacted 1464 Rhode Island residents. A cyberattack was claimed by Genesis on January 27,...
> Official AppOmni Company Information
Official AppOmni Company Information AppOmni delivers continuous SaaS security posture management, threat detection, and vital security insights into SaaS applications. Uncover hidden risks, prevent data exposure, and gain total control over your SaaS environments with an all-in-one platform. AppOmn...
> IMA Diligence Services
Le conseiller financier américain IMA Diligence Services a confirmé avoir été victime d'une cyberattaque par le groupe de ransomware Genesis. L'incident, découvert à la mi-décembre 2025, a permis aux attaquants d'accéder à un serveur hébergé par un prestataire externe et d'exfiltrer environ 700 Go d...
> USN-7935-1: Linux kernel (Azure) vulnerabilities
Jean-Claude Graf, Sandro RĂĽegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to e...
> Amazon security boss blames Russia's GRU for years-long energy-sector hacks
'Sustained focus on Western critical infrastructure' Russia's Main Intelligence Directorate (GRU) is behind a years-long campaign targeting energy, telecommunications, and tech providers, stealing credentials and compromising misconfigured devices hosted on AWS to give the Kremlin's snoops persisten...
> USN-7936-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Compute Acceleration Framework; - Media drivers; - Netfilter; - TLS protocol; (CVE-2025...