[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (179 articles)

|

// AI-powered summary generated at 20:00

> CVE-2025-37822 riscv: uprobes: Add missing fence.i after building the XOL buffer
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:38]
Information published.
> CVE-2025-37807 bpf: Fix kmemleak warning for percpu hashmap
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:38]
Information published.
> Centre de formation pour l'audition et la vue de Mils
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-07 00:00]
Un système informatique d'une institution publique a été victime d'une attaque, mais les données sensibles n'ont pas été compromises, et les systèmes ont été restaurés grâce à des sauvegardes. Les personnes potentiellement affectées ont été informées, et des mesures de sécurité supplémentaires ont é...
> CVE-2023-52586 drm/msm/dpu: Add mutex lock in control vblank irq
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:38]
Information published.
> CVE-2025-21696 mm: clear uffd-wp PTE/PMD state on mremap()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:38]
Information published.
> KMS Solutions, LLC
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-07 00:00]
KMS Solutions, LLC experienced a data security incident involving unauthorized access to certain information within their systems between November 27, 2025, and December 7, 2025. The types of information that may have been impacted include first and last name, financial account information, and Soci...
> CVE-2025-21635 rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:38]
Information published.
> CVE-2024-38608 net/mlx5e: Fix netif state handling
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:38]
Information published.
> Quatrro Business Support Services, Inc.
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2025-12-07 00:00]
Quatrro Business Support Services, Inc. experienced a security incident where unauthorized access occurred to certain files from November 11-19, 2025. The investigation revealed that the files contained personal information of two Maine residents. Quatrro is offering complimentary credit monitoring...
> CVE-2024-24856 NULL pointer deference in acpi_db_convert_to_package of Linux acpi module
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:37]
Information published.
> CVE-2024-57898 wifi: cfg80211: clear link ID from bitmap during link delete after clean up
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:37]
Information published.
> React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable
[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2025-12-06 19:07]
Over 77,000 Internet-exposed IP addresses are vulnerable to the critical React2Shell remote code execution flaw (CVE-2025-55182), with researchers now confirming that attackers have already compromised over 30 organizations across multiple sectors. [...]
> CVE-2025-21682 eth: bnxt: always recalculate features after XDP clearing, fix null-deref
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:37]
Information published.
> CVE-2024-47794 bpf: Prevent tailcall infinite loop caused by freplace
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:37]
Information published.
> React2Shell : 4 700 serveurs vulnérables en France, plus de 77 000 dans le monde !
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2025-12-06 17:53]
Un scan du Web effectué par The Shadowserver Foundation montre que plus de 77 000 adresses IP, dont 4 710 en France, sont vulnérables à la faille React2Shell. Le post React2Shell : 4 700 serveurs vulnérables en France, plus de 77 000 dans le monde ! a été publié sur IT-Connect.
> CVE-2025-52881 runc: LSM labels can be bypassed with malicious config using dummy procfs files
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:37]
Information published.
> CVE-2025-37745 PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:36]
Information published.
> Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs
[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2025-12-06 16:08]
A hacking campaign is targeting GlobalProtect logins and scannig SonicWall APIs since December 2, 2025. A campaign began on December 2 targeting Palo Alto GlobalProtect portals with login attempts and scanning SonicWall SonicOS API endpoints. The activity came from over 7,000 IPs tied to German host...
> CVE-2025-37945 net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:36]
Information published.
> CVE-2025-46152 In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-07 01:36]
Information published.