[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> Ubuntu 25.10: cups-filters Critical Denial Of Service Issues USN-7878-1
Several security issues were fixed in cups-filters.
> Ubuntu 25.10: libcupsfilters Critical Vulnerabilities RCE USN-7877-1
Several security issues were fixed in libcupsfilters.
> Techstrong Group and DigiCert Unveil the “Quantum Security 25” to Spotlight Leaders Shaping the Future of Quantum Security
Inaugural awards celebrate the pioneers turning quantum’s promise into real-world impact, bridging theory and practice in the next era of secure computing  Boca Raton, FL, November 20, 2025 — Techstrong Group, in collaboration with DigiCert, today announced the launch of Quantum Security 25, a new...
> USN-7876-1: ImageMagick vulnerability
It was discovered that ImageMagick did not properly handle memory when encoding BMP images. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue exists due to an incomplete fix for CVE-2025-57803.
> PowerToys 0.96 : Advanced Paste évolue pour se connecter aux IA Cloud et locales
PowerToys 0.96 permet à l'outil Advanced Paste de se connecter à une IA Cloud ou une IA locale, y compris via Ollama. Voici un récapitulatif sur les nouveautés. The post PowerToys 0.96 : Advanced Paste évolue pour se connecter aux IA Cloud et locales first appeared on IT-Connect.
> WhatsApp compromise leads to Astaroth deployment
Another campaign targeting WhatsApp users in Brazil spreads like a worm and employs multiple payloads for credential theft, session hijacking, and persistence
> New Android malware can capture private messages, researchers warn
The malware can monitor everything displayed on a phone in real time — including contacts, full message threads and the content of encrypted chats — by accessing data after it has been decrypted by legitimate apps.
> ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet
Oligo Security has warned of ongoing attacks exploiting a two-year-old security flaw in the Ray open-source artificial intelligence (AI) framework to turn infected clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet. The activity, codenamed ShadowRay 2.0, is an evolution o...
> UK’s new cybersecurity bill takes aim at ransomware gangs and state-backed hackers
After years of delays, the UK government has finally introduced landmark cybersecurity legislation that could reshape how British organisations defend against digital attacks. Read more in my article on the Fortra blog.
> GlobalProtect VPN portals probed with 2.3 million scan sessions
A major spike in malicious scanning against Palo Alto Networks GlobalProtect portals has been detected, starting on November 14, 2025. [...]
> How to update CRLs without public access using AWS Private CA
Certificates and the hierarchy of trust they create are the backbone of a secure infrastructure. AWS Private Certificate Authority is a highly available certificate authority (CA) that you can use to create private CA hierarchies, secure your applications and devices with private certificates, and m...
> Débuter avec Traefik : un reverse proxy moderne pour vos services Web Docker
Tutoriel complet pour installer et configurer Traefik : un reverse proxy moderne pour exposer vos services Web exécutés sur des conteneurs Docker. The post Débuter avec Traefik : un reverse proxy moderne pour vos services Web Docker first appeared on IT-Connect.
> Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing
Posted by Dave Kleidermacher, VP, Platforms Security & Privacy, Google Technology should bring people closer together, not create walls. Being able to communicate and connect with friends and family should be easy regardless of the phone they use. That’s why Android has been building experienc...
> FCC spikes Biden-era cyber regulations prompted by Salt Typhoon telecom breaches
The Republican-led FCC voted to remove cybersecurity rules for telecom companies that were put in place before Donald Trump's inauguration as a response to 2024 breaches attributed to state-backed Chinese hackers.
> Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control (C2) server, Kaspersky researcher Lisandro Ubiedo said in an a...
> Oracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)
Searchlight Cyber today released a blog detailing CVE-2025-61757, a vulnerability they reported to Oracle. Oracle released a patch for the vulnerability as part of its October Critical Patch Update, which was released on October 21st.
> Salesforce investigates customer data theft via Gainsight breach
Salesforce says it revoked refresh tokens linked to Gainsight-published applications while investigating a new wave of data theft attacks targeting customers. [...]
> Windows 11 Point-in-time restore : une nouvelle fonction de restauration plus efficace !
A l'Ignite 2025, Microsoft a présenté une nouvelle fonction de récupération pour Windows 11 : Point-in-time restore. Comment ça marche ? Voici un récapitulatif. The post Windows 11 Point-in-time restore : une nouvelle fonction de restauration plus efficace ! first appeared on IT-Connect.
> Fired techie admits sabotaging ex-employer, causing $862K in damage
PowerShell script locked thousands of workers out of their accounts An Ohio IT contractor has pleaded guilty to breaking into his former employer's systems and causing nearly $1 million worth of damage after being fired.…
> What the Flock is happening with license plate readers?
What Flock's ALPR cameras really collect, how they’re used in neighborhoods, and what you can do to stay in control.