[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> ISC Stormcast For Friday, December 19th, 2025 https://isc.sans.edu/podcastdetail/9746, (Fri, Dec 19th)
[SOURCE] SANS ISC [LANGUAGE: EN] [DATE: 2025-12-19 02:00]
> HPE OneView vulnerable to remote code execution attack
[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2025-12-19 01:49]
A maximum severity remote code execution vulnerability in Hewlett Packard Enterprise (HPE) OneView network and systems management suite is “bad” and needs to be patched immediately, says a cybersecurity expert. “Vendors typically downplay the severity of a vulnerability,” s...
> Windows 10 OOB update released to fix Message Queuing (MSMQ) issues
[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2025-12-19 01:15]
This month's extended security update for Windows 11 broke Message Queuing (MSMQ), which is typically used by enterprises to manage background tasks. [...]
> CVE-2025-38063 dm: fix unconditional IO throttle caused by REQ_PREFLUSH
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-19 01:01]
Information published.
> CVE-2025-38071 x86/mm: Check return value from memblock_phys_alloc_range()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-19 01:01]
Information published.
> AI-Driven Anomaly Detection in Post-Quantum Context Streams
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-19 00:34]
Discover how AI-driven anomaly detection safeguards post-quantum context streams in Model Context Protocol (MCP) environments, ensuring robust security for AI infrastructure against future threats. The post AI-Driven Anomaly Detection in Post-Quantum Context Streams appeared first on Security Boulev...
> CVE-2025-38074 vhost-scsi: protect vq->log_used with vq->mutex
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-19 01:01]
Information published.
> CVE-2025-38067 rseq: Fix segfault on registration when rseq_cs is non-zero
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-19 01:01]
Information published.
> How to Integrate SSO: Developer Guide with Code Examples & Flow Diagrams
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-19 00:23]
Learn how to integrate Single Sign-On (SSO) into your applications with this comprehensive developer guide. Includes code examples, flow diagrams, and best practices for secure authentication. The post How to Integrate SSO: Developer Guide with Code Examples & Flow Diagrams appeared first on Sec...
> CVE-2025-38118 Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-19 01:01]
Information published.
> CVE-2025-38126 net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-19 01:01]
Information published.
> Exploring Biometric Multi-Factor Authentication
[SOURCE] Security Boulevard [LANGUAGE: EN] [DATE: 2025-12-19 00:17]
Explore biometric mfa for enhanced security. Learn about implementation, benefits, hacking techniques, and how to protect your systems. A must-read for developers. The post Exploring Biometric Multi-Factor Authentication appeared first on Security Boulevard.
> CVE-2025-38131 coresight: prevent deactivate active config while enabling the config
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-19 01:01]
Information published.
> CVE-2025-37951 drm/v3d: Add job to pending list if the reset was skipped
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-19 01:01]
Information published.
> Multiples vulnérabilités dans PHP (19 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-19 00:00]
De multiples vulnérabilités ont été découvertes dans PHP. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
> Multiples vulnérabilités dans le noyau Linux de Red Hat (19 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-19 00:00]
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et une atteinte à la confidentialité des données.
> Turning automation spend into a measurable advantage
[SOURCE] Red Hat Security [LANGUAGE: EN] [DATE: 2025-12-19 00:00]
IT automation is no longer optional for executives; it is a critical strategy. Organizations have moved beyond simple scripting to focus on speed and impact, using automation to power growth and reduce risk.But a critical gap remains: visibility. How do you, as a business leader, prove the return on...
> Multiples vulnérabilités dans Microsoft Edge (19 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-19 00:00]
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
> Multiples vulnérabilités dans Centreon Web (19 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-19 00:00]
De multiples vulnérabilités ont été découvertes dans Centreon Web. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
> Attestation vs. integrity in a zero-trust world
[SOURCE] Red Hat Security [LANGUAGE: EN] [DATE: 2025-12-19 00:00]
The complex risks facing modern IT environments make IT security a strategic imperative, not a back-end detail. Furthering this is cloud computing, which serves as the foundation of the AI economy, meaning that enterprises and nations require greater control, transparency, and assurance over data lo...