[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (179 articles)

|

// AI-powered summary generated at 20:00

> CVE-2025-64436 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:39]
Information published.
> CVE-2025-64434 KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:39]
Information published.
> Corée du Sud : 120 000 caméras piratées pour du porno
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2025-12-06 14:26]
Piratage de 120 000 caméras sud-coréennes et enquête sur les risques pour la vie privée et la cybersécurité domestique....
> CVE-2025-64433 KubeVirt Arbitrary Container File Read
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:39]
Information published.
> CVE-2025-64435 KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:39]
Information published.
> Arnaque aux faux abonnements gratuits dans les transports publics
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2025-12-06 13:18]
Plus de 200 faux sites de transports publics mis en place par des pirates informatiques. Ils vous promettent des cartes de bus pour 2 €....
> CVE-2025-64437 KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:39]
Information published.
> CVE-2025-64432 KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:39]
Information published.
> Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation
[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2025-12-06 11:40]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting React Server Components (RSC) to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerability, CVE-2025-55182 (CVS...
> CVE-2024-47866 RGW DoS attack with empty HTTP header in S3 object copy
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:39]
Information published.
> CVE-2025-55554 pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:38]
Information published.
> Faux sites administratifs : enquĂŞte sur une menace silencieuse
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2025-12-06 11:32]
Enquête ZATAZ sur la prolifération de faux sites administratifs et leurs risques d’usurpation d’identité, avec un décryptage cyber précis et des conseils de protection....
> CVE-2025-9086 Out of bounds read for cookie path
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:37]
Information published.
> CVE-2025-55551 An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:37]
Information published.
> Security News This Week: Oh Crap, Kohler’s Toilet Cameras Aren’t Really End-to-End Encrypted
[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2025-12-06 11:30]
Plus: The Trump administration declines to issue sanctions over Salt Typhoon’s hacking spree, officials warn of a disturbingly stealthy Chinese malware specimen, and more.
> CVE-2025-8277 Libssh: memory exhaustion via repeated key exchange in libssh
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:37]
Information published.
> CVE-2025-10911 Libxslt: use-after-free with key data stored cross-rvt
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:37]
Information published.
> Disruption dans l’espionnage numérique alimenté par l’IA
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2025-12-06 10:51]
Analyse d’une opération d’espionnage automatisée utilisant une IA agentique....
> CVE-2025-55560 An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:37]
Information published.
> CVE-2023-45229 Out-of-Bounds Read in EDK II Network Package
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-06 14:36]
Information published.