[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Test EcoFlow DELTA 3 Max Plus : une station électrique portable pour la maison et en dehors
EcoFlow DELTA 3 Max Plus : voici un avis complet sur cette nouvelle station électrique portable lancée en octobre 2025, avec une capacité de 2 kWh. Le post Test EcoFlow DELTA 3 Max Plus : une station électrique portable pour la maison et en dehors a été publié sur IT-Connect.
> Randall Munroe’s XKCD ‘Geologic Core Sample’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Geologic Core Sample’ appeared first on Security Boulevard.
> New spyware discovered on Belarusian journalist’s phone after interrogation
Researchers at the nonprofit Reporters Without Borders discovered a previously unknown spyware tool on the phone of a Belarusian journalist who had been detained by security services.
> Roblox in talks with Russia to restore access after platform ban sparks backlash
According to Russia’s media regulator Roskomnadzor, the U.S.-based company acknowledged shortcomings in moderating in-game content and securing user chats, and reached out to the agency to discuss potential changes.
> Sonicwall warns of new SMA1000 zero-day exploited in attacks
SonicWall warned customers today to patch a vulnerability in the SonicWall SMA1000 Appliance Management Console (AMC) that was chained in zero-day attacks to escalate privileges. [...]
> Maybe a Little Bit More Interesting React2Shell Exploit, (Wed, Dec 17th)
I have already talked about various React2Shell exploit attempts we have observed in the last weeks. But new varieties of the exploit are popping up, and the most recent one is using this particular version of the exploit:
> Access Fabric: A modern approach to identity and network access
An Access Fabric is a unified access security solution that continuously decides who can access what, from where, and under what conditions—in real time. The post Access Fabric: A modern approach to identity and network access appeared first on Microsoft Security Blog.
> UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager
Cisco Talos is tracking the active targeting of Cisco AsyncOS Software for Cisco Secure Email Gateway, formerly known as Cisco Email Security Appliance (ESA), and Cisco Secure Email and Web Manager, formerly known as Cisco Content Security Management Appliance (SMA).
> Motors WordPress Vulnerability Exposes Sites to Takeover
A critical flaw in the Motors WordPress theme affecting more than 20,000 installations allows low-privileged users to gain full control of websites
> Actively exploited SonicWall zero-day patched (CVE-2025-40602)
SonicWall has patched a local privilege escalation vulnerability (CVE-2025-40602) affecting its Secure Mobile Access (SMA) 1000 appliances and is urging customers to apply the provided hotfix, as the flaw is being leveraged by attackers. “This vulnerability was reported to be leveraged in combinatio...
> Privacy advocates see risk in new Meta policy that uses AI chats to serve targeted ads
The new feature, which was announced October 1 and rolled out Tuesday, will “start personalizing content and ad recommendations on our platforms based on people’s interactions with our generative AI features."
> Critical React2Shell flaw exploited in ransomware attacks
A ransomware gang exploited the critical React2Shell vulnerability (CVE-2025-55182) to gain initial access to corporate networks and deployed the file-encrypting malware less than a minute later. [...]
> Blockchain company Nomad to repay users under FTC deal after $186M cyberattack
Regulator makes various additional demands over alleged cybersecurity failings In proposing a settlement agreement, the Federal Trade Commission (FTC) says that Illusory Systems must repay users funds lost in a 2022 cyberattack.…
> Two Chrome flaws could be triggered by simply browsing the web: Update now
Google's patched two flaws in Chrome, both of which can be triggered remotely when a user loads specially crafted web content.
> PwC on securing AI: building trust, compliance and confidence at scale
Buckle up to innovate at speed, says PwC Sponsored Post  As AI spreads across the enterprise, so too do the security and compliance risks. Regulations are evolving, risk postures are shifting, and organizations must find a way to innovate responsibly without slowing down.…
> New “Lies-in-the-Loop” Attack Undermines AI Safety Dialogs
A novel attack technique dubbed ”Lies-in-the-Loop” (LITL) has been observed manipulating human approval prompts in agentic AI systems
> Inside the Global Airline that Eliminated 14,600 SaaS Security Issues with AppOmni
28 apps secured. 37 orgs monitored. 14,600 issues resolved. See how a global airline strengthened SaaS security with AppOmni. The post Inside the Global Airline that Eliminated 14,600 SaaS Security Issues with AppOmni appeared first on AppOmni. The post Inside the Global Airline that Eliminated 14,6...
> NDSS 2025 – Blindfold: Confidential Memory Management By Untrusted Operating System
Session 6B: Confidential Computing 1 Authors, Creators & Presenters: Caihua Li (Yale University), Seung-seob Lee (Yale University), Lin Zhong (Yale University) PAPER Blindfold: Confidential Memory Management by Untrusted Operating System Confidential Computing (CC) has received increasing atte...
> Digital Forensics Round-Up, December 17 2025
Read the latest DFIR news – gaps in UK police well-being standards for DFIs, mobile device reboot risks reshaping evidence handling, OSINT tool picks for 2025, and more.
> European police bust Ukraine-based call center network behind $11 million in scams
The group recruited employees from the Czech Republic, Latvia, Lithuania and other European countries, bringing them to Ukraine to work in the call centers.