[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (110 articles)

|

// AI-powered summary generated at 16:00

> Product showcase: Tuta – secure, encrypted, private email
Tuta, formerly known as Tutanota, is built for anyone who wants email that stays private. Instead of treating encryption like a bonus feature, the service encrypts almost everything by default. That means your messages are locked down from the moment you hit send until they reach the other side. Pri...
> USN-7924-1: libpng vulnerabilities
It was discovered that libpng incorrectly handled memory when processing certain PNG files, which could result in an out-of-bounds memory access. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting...
> Teamwork is failing in slow motion and security feels it
Security leaders often track threats in code, networks, and policies. But a quieter risk is taking shape in the everyday work of teams. Collaboration is getting harder even as AI use spreads across the enterprise. That tension creates openings for mistakes, shadow tools, and uncontrolled data flows....
> USN-7923-1: Qt vulnerability
It was discovered that Qt did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
> Mit MXDR gegen den Fachkräftemangel
Mit dem Einsatz von MXDR können Unternehmen ihr IT-Security-Team durch Experten erweitern und deren Expertise nutzen.G Data IT-Sicherheit ist für Unternehmen von entscheidender Bedeutung, um die Infrastruktur vor Angriffen zu schützen und die Verfügbarkeit von Ressourcen und...
> Using AI Gemma 3 Locally with a Single CPU , (Wed, Dec 10th)
Several months ago, I got a Nucbox K8 Plus minicomputer to use as a Proxmox 9 server. At the time of this acquisition, I didn&#;x26;#;39;t realize this minicomputer had an artificial intelligence (AI) engine [1] build in the CPU that could be used to run AI applications locally. A coworker recom...
> ISC Stormcast For Thursday, December 11th, 2025 https://isc.sans.edu/podcastdetail/9734, (Thu, Dec 11th)
> CVE-2025-11934 Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify
Information published.
> CVE-2025-11933 DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension
Information published.
> Fortinet admins urged to update software to close FortiCloud SSO holes
Admins using FortiCloud SSO (single sign on) to authenticate access to Fortinet products are urged to upgrade the software running some of the company’s gateway products as soon as possible, or risk their networks being compromised. “Users of Fortinet appliances should, for...
> CVE-2025-2486 UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu
Information published.
> CVE-2025-46818 Redis: Authenticated users can execute LUA scripts as a different user
Information published.
> Security researchers given new boost
Computer security researchers are in the spotlight as governments look to tackle the growing threat of cybercrime. Last week, British security minister Dan Jarvis set out a new approach to combatting computer crime, highlighting the damage that security breaches have done t...
> CVE-2025-40334 drm/amdgpu: validate userq buffer virtual address and size
Information published.
> CVE-2025-40336 drm/gpusvm: fix hmm_pfn_to_map_order() usage
Information published.
> Embracing our broad responsibility for securing digital infrastructure in the European Union
August 31, 2023: The date this blog post was first published. Over the past few decades, digital technologies have brought tremendous benefits to our societies, governments, businesses, and everyday lives. The increasing reliance on digital technologies comes with a broad responsibility for society,...
> CVE-2025-40338 ASoC: Intel: avs: Do not share the name pointer between components
Information published.
> CVE-2025-55753 Apache HTTP Server: mod_md (ACME), unintended retry intervals
Information published.
> Hidden .NET HTTP proxy behavior can open RCE flaws in apps — a security issue Microsoft won’t fix
Researchers uncovered an unexpected behavior of HTTP client proxies when created in .NET code, potentially allowing attackers to write malicious code to arbitrary files. This in turn can open remote code execution (RCE) attack paths through web shells and malicious PowerShell...
> CVE-2025-66418 urllib3 allows an unbounded number of links in the decompression chain
Information published.