[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1272 articles)

|

// AI-powered summary generated at 20:00

> CVE-2025-47912 Insufficient validation of bracketed IPv6 hostnames in net/url
Information published.
> CVE-2025-61723 Quadratic complexity when parsing some invalid inputs in encoding/pem
Information published.
> OpenAI expands ‘defense in depth’ security to stop hackers using its AI models to launch cyberattacks
OpenAI is preparing for the possibility that threat groups will try to abuse its increasingly powerful AI frontier models to carry out sophisticated cyberattacks. In a blog, the company describes how the evolving capabilities of its models could be used to “develop working...
> CVE-2025-58187 Quadratic complexity when checking name constraints in crypto/x509
Information published.
> CVE-2025-58186 Lack of limit when parsing cookies can cause memory exhaustion in net/http
Information published.
> Behavioral Analysis of AI Models Under Post-Quantum Threat Scenarios.
Explore behavioral analysis techniques for securing AI models against post-quantum threats. Learn how to identify anomalies and protect your AI infrastructure with quantum-resistant cryptography. The post Behavioral Analysis of AI Models Under Post-Quantum Threat Scenarios. appeared first on Securit...
> CVE-2025-49178 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore
Information published.
> CVE-2025-49176 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension
Information published.
> Learn about changes to your online account management
Discover the latest changes in online account management, focusing on Enterprise SSO, CIAM, and enhanced security. Learn how these updates streamline login processes and improve user experience. The post Learn about changes to your online account management appeared first on Security Boulevard.
> CVE-2025-49180 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension
Information published.
> CVE-2023-45284 Incorrect detection of reserved device names on Windows in path/filepath
Information published.
> Meet ConsentFix, a new twist on the ClickFix phishing attack
A new variation of the ClickFix scam tries to get around phishing defenses by capturing an employee’s OAuth authentication token for Microsoft logins. Researchers at Push Security this week outlined the tactic, which they call ConsentFix, in a blog, calling it “a dangerous...
> CVE-2025-49175 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors
Information published.
> CVE-2025-49177 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode
Information published.
> Is Facial Recognition Classified as a Passkey?
Explore if facial recognition meets the criteria to be classified as a passkey. Understand the security, usability, and standards implications for passwordless authentication. The post Is Facial Recognition Classified as a Passkey? appeared first on Security Boulevard.
> CVE-2025-49179 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension
Information published.
> CVE-2025-39927 ceph: fix race condition validating r_parent before applying state
Information published.
> Multiples vulnérabilités dans les produits Netgate (12 décembre 2025)
De multiples vulnérabilités ont été découvertes dans les produits Netgate. Elles permettent à un attaquant de provoquer un déni de service à distance et un contournement de la politique de sécurité.
> Vulnérabilité dans Microsoft Windows Admin Center (12 décembre 2025)
Une vulnérabilité a été découverte dans Microsoft Windows Admin Center. Elle permet à un attaquant de provoquer une élévation de privilèges.
> West Pierce Fire & Rescue
West Pierce Fire & Rescue a subi une atteinte à la sécurité de ses systèmes d'information, ce qui a perturbé ses systèmes internes, mais les services d'urgence et le système 911 restent opérationnels. L'agence travaille avec le FBI et des experts pour analyser les systèmes et restaurer l'accès. Les...