[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (179 articles)

|

// AI-powered summary generated at 20:00

> CVE-2025-37942 HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:46]
Information published.
> CVE-2025-37747 perf: Fix hang while freeing sigtrap event
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:46]
Information published.
> Centre de formation pour l'audition et la vue de Mils
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-07 00:00]
Un système informatique d'une institution publique a été victime d'une attaque, mais les données sensibles n'ont pas été compromises, et les systèmes ont été restaurés grâce à des sauvegardes. Les personnes potentiellement affectées ont été informées, et des mesures de sécurité supplémentaires ont é...
> CVE-2025-37750 smb: client: fix UAF in decryption with multichannel
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:46]
Information published.
> CVE-2024-49972 drm/amd/display: Deallocate DML memory if allocation fails
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:46]
Information published.
> KMS Solutions, LLC
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-07 00:00]
KMS Solutions, LLC experienced a data security incident involving unauthorized access to certain information within their systems between November 27, 2025, and December 7, 2025. The types of information that may have been impacted include first and last name, financial account information, and Soci...
> CVE-2024-49945 net/ncsi: Disable the ncsi work before freeing the associated structure
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:46]
Information published.
> CVE-2024-49968 ext4: filesystems without casefold feature cannot be mounted with siphash
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:46]
Information published.
> Quatrro Business Support Services, Inc.
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-07 00:00]
Quatrro Business Support Services, Inc. experienced a security incident where unauthorized access occurred to certain files from November 11-19, 2025. The investigation revealed that the files contained personal information of two Maine residents. Quatrro is offering complimentary credit monitoring...
> CVE-2024-49971 drm/amd/display: Increase array size of dummy_boolean
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:46]
Information published.
> CVE-2025-21825 bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:46]
Information published.
> React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable
[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2025-12-06 19:07]
Over 77,000 Internet-exposed IP addresses are vulnerable to the critical React2Shell remote code execution flaw (CVE-2025-55182), with researchers now confirming that attackers have already compromised over 30 organizations across multiple sectors. [...]
> CVE-2025-37861 scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:45]
Information published.
> CVE-2024-38595 net/mlx5: Fix peer devlink set for SF representor devlink port
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:45]
Information published.
> React2Shell : 4 700 serveurs vulnérables en France, plus de 77 000 dans le monde !
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2025-12-06 17:53]
Un scan du Web effectué par The Shadowserver Foundation montre que plus de 77 000 adresses IP, dont 4 710 en France, sont vulnérables à la faille React2Shell. Le post React2Shell : 4 700 serveurs vulnérables en France, plus de 77 000 dans le monde ! a été publié sur IT-Connect.
> CVE-2024-49893 drm/amd/display: Check stream_status before it is used
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:44]
Information published.
> CVE-2024-49920 drm/amd/display: Check null pointers before multiple uses
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:44]
Information published.
> Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs
[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2025-12-06 16:08]
A hacking campaign is targeting GlobalProtect logins and scannig SonicWall APIs since December 2, 2025. A campaign began on December 2 targeting Palo Alto GlobalProtect portals with login attempts and scanning SonicWall SonicOS API endpoints. The activity came from over 7,000 IPs tied to German host...
> CVE-2024-50028 thermal: core: Reference count the zone in thermal_zone_get_by_id()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:44]
Information published.
> CVE-2024-49922 drm/amd/display: Check null pointers before using them
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:44]
Information published.