[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Ubuntu 24.04 LTS: USN-7861-5 Linux Kernel Issues Critical Fix
Several security issues were fixed in the Linux kernel.
> USN-7861-5: Linux kernel vulnerabilities
Jean-Claude Graf, Sandro RĂĽegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to e...
> Japan’s Askul resumes limited online sales 6 weeks after ransomware attack
Askul said Wednesday that corporate customers can now purchase a limited range of products on its platform and the company plans to gradually add more items as it restores its systems.
> The State of Ransomware in Manufacturing and Production 2025
332 IT and cybersecurity leaders reveal the ransomware realities for manufacturing and production organizations today.
> ESET PROTECT On-Prem version 13.0.8.0 has been released
ESET PROTECT On-Prem version 13.0.8.0 has been released and is available to download.
> Ubuntu 18.04: USN-7907-2 Linux Kernel Important Security Issues
Several security issues were fixed in the Linux kernel.
> USN-7907-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - Hardware monitoring drivers; - InfiniBand drivers; - Mailbox framework;...
> How attackers use real IT tools to take over your computer
We’ve seen a new wave of attacks exploiting legitimate Remote Monitoring and Management (RMM) tools to remotely control victims’ systems.
> Ubuntu 18.04 & 16.04: Linux Kernel Important Security Update USN-7907-1
Several security issues were fixed in the Linux kernel.
> JPMorganChase to Invest in AI, Tech to Foster Growth, Innovation, Resiliency 
JPMorganChase’s $1.5T Security & Resiliency Initiative targets AI, cybersecurity, quantum and critical industries. Learn what this investment means for national and enterprise resilience. The post JPMorganChase to Invest in AI, Tech to Foster Growth, Innovation, Resiliency  appeared first on Se...
> Niobium Raises $23 Million for FHE Hardware Acceleration
The startup will invest the funds in accelerating development of its second-generation fully homomorphic encryption (FHE) platforms. The post Niobium Raises $23 Million for FHE Hardware Acceleration appeared first on SecurityWeek.
> Aisuru botnet behind new record-breaking 29.7 Tbps DDoS attack
In just three months, the massive Aisuru botnet launched more than 1,300 distributed denial-of-service attacks, one of them setting a new record with a peak at 29.7 terabits per second. [...]
> Cloudflare's 2025 Q3 DDoS threat report -- including Aisuru, the apex of botnets
Welcome to the 23rd edition of Cloudflare’s Quarterly DDoS Threat Report. This report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the third quarter of 2025.
> USN-7908-1: PostgreSQL vulnerabilities
Jelte Fennema-Nio discovered that the PostgreSQL CREATE STATISTICS command did not correctly check for schema CREATE privileges. An authenticated attacker could possibly use this issue to create a denial of service against other CREATE STATISTICS users. (CVE-2025-12817) Aleksey Solovev discovered t...
> Sanctioned but Still Spying: Intellexa’s Prolific Zero-Day Exploits Continue
Introduction  Despite extensive scrutiny and public reporting, commercial surveillance vendors continue to operate unimpeded. A prominent name continues to surface in the world of mercenary spyware, Intellexa. Known for its “Predator” spyware, the company was sanctioned by the US Government. New Goo...
> Neue bösartige Browser-Erweiterungen entdeckt
Cyberangreifer nutzen Chrome- und Edge-Add-ons zur Datenerfassung, Suchmanipulation und als Backdoor.Ascannio – shutterstock.com Forscher des Security-Anbieters Koi haben eine Cyberbande namens „ShadyPanda“ dabei ertappt, wie sie vertrauenswürdige Browser-Erweiterungen für i...
> Critical King Addons Vulnerability Exploited to Hack WordPress Sites
A critical-severity vulnerability in the King Addons for Elementor plugin for WordPress has been exploited to take over websites. The post Critical King Addons Vulnerability Exploited to Hack WordPress Sites appeared first on SecurityWeek.
> Fileless protection explained: Blocking the invisible threat others miss
Your antivirus scans files. But what about attacks that never create files? Here's how we catch the threats hiding on your family's computers. 
> UK Ransomware Payment Ban to Come with Exemptions, Security Minster Say
The UK government’s proposed ransomware payment ban for public sector and critical infrastructure will come with national security exemptions
> University of Phoenix discloses data breach after Oracle hack
The University of Phoenix (UoPX) has joined a growing list of U.S. universities breached in a Clop data theft campaign targeting vulnerable Oracle E-Business Suite instances in August 2025. [...]