[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (179 articles)

|

// AI-powered summary generated at 20:00

> CVE-2025-40217 pidfs: validate extensible ioctls
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:03]
Information published.
> CVE-2025-40219 PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:03]
Information published.
> Suspicious traffic could be testing CDN evasion, says expert
[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
An individual or group is doing new probing of content delivery networks (CDNs), an effort that CSOs, CIOs and network administrators should worry about if they use CDNs instead of web application firewalls to protect websites. That’s the conclusion of Johannes Ullrich, dea...
> CVE-2025-39833 mISDN: hfcpci: Fix warning when deleting uninitialized timer
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> CVE-2023-53218 rxrpc: Make it so that a waiting process can be aborted
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> An AI for an AI: Anthropic says AI agents require AI defense
[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2025-12-05 00:30]
Automated software keeps getting better at pilfering cryptocurrency Anthropic could have scored an easy $4.6 million by using its Claude AI models to find and exploit vulnerabilities in blockchain smart contracts.…
> CVE-2023-53221 bpf: Fix memleak due to fentry attach failure
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> CVE-2023-53240 xsk: check IFF_UP earlier in Tx path
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)
[SOURCE] AWS Security [LANGUAGE: EN] [DATE: 2025-12-05 00:18]
Within hours of the public disclosure of CVE-2025-55182 (React2Shell) on December 3, 2025, Amazon threat intelligence teams observed active exploitation attempts by multiple China state-nexus threat groups, including Earth Lamia and Jackpot Panda. This critical vulnerability in React Server Componen...
> CVE-2023-53247 btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> CVE-2025-38709 loop: Avoid updating block size under exclusive owner
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> ‘Signalgate’ Inspector General Report Wants Just One Change to Avoid a Repeat Debacle
[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2025-12-05 00:02]
The United States Inspector General report reviewing Secretary of Defense Pete Hegseth’s text messaging mess recommends a single change to keep classified material secure.
> CVE-2022-50316 orangefs: Fix kmemleak in orangefs_sysfs_init()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> CVE-2023-53248 drm/amdgpu: install stub fence into potential unused fence pointers
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> Vulnérabilité dans React Server Components (05 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-05 00:00]
Le 3 décembre 2025, React a publié un avis de sécurité relatif à la vulnérabilité CVE-2025-55182 affectant React Server Components et qui permet à un attaquant non authentifié de provoquer une exécution de code arbitraire à distance. L'éditeur de Next.js a également publié un avis de sécurité...
> CVE-2023-53254 cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> CVE-2025-12819 Untrusted search path in auth_query connection in PgBouncer
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> Vulnérabilité dans Apache Struts (05 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-05 00:00]
Une vulnérabilité a été découverte dans Apache Struts. Elle permet à un attaquant de provoquer un déni de service à distance.
> CVE-2025-66293 LIBPNG has an out-of-bounds read in png_image_read_composite
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:02]
Information published.
> CVE-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-05 01:01]
Information published.