[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> Oracle Linux 9 Advisory ELSA-2025-18815 Java Moderate Update
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 9: ELSA-2025-20721 Kernel Important Security Threat
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> ISC Stormcast For Tuesday, October 28th, 2025 https://isc.sans.edu/podcastdetail/9674, (Tue, Oct 28th)
> Oracle Linux 8: ELSA-2025-20721 Kernel Important Security Advisory
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Merkle
Dentsu a subi une attaque informatique, entraînant la fuite de données sensibles de son réseau Merkle, notamment des informations sur les clients, les fournisseurs et les employés actuels et anciens. L'entreprise a engagé des entreprises spécialisées dans la réponse aux incidents de cybersécurité et...
> Multiples vulnérabilités dans Liferay (28 octobre 2025)
De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une injection de code indirecte à distance (XSS).
> Multiples vulnérabilités dans Apache Tomcat (28 octobre 2025)
De multiples vulnérabilités ont été découvertes dans Apache Tomcat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
> Introducing Red Hat’s STIG-hardened UBI for NVIDIA GPUs on Red Hat OpenShift
Deploying cutting-edge AI in U.S. government environments can present a formidable challenge. While the power of accelerated computing is essential for modern workloads, the path to achieving an Authority to Operate (ATO) is paved with the complex and time-consuming demands of applying controls such...
> Vulnérabilité dans StrongSwan (28 octobre 2025)
Une vulnérabilité a été découverte dans StrongSwan. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
> Family Health West Hospital
Family Health West Hospital a été victime d'une cyberattaque, mais les soins aux patients n'ont pas été impactés grâce à des opérations manuelles. L'hôpital a isolé ses systèmes pour une analyse forensique et les fera vérifier par des experts en cybersécurité avant de les remettre en ligne. L'incide...
> Yau Yat Chuen Garden City Club
Une enquête de la Commission de la protection de la vie privée a révélé que le club privé Yau Yat Chuen Garden City Club n'a pas pris les mesures nécessaires pour protéger les données de plus de 9 000 personnes lors d'une cyberattaque par rançongiciel. Les failles de sécurité identifiées incluent l'...
> WSUS attacks hit 'multiple' orgs as Google and other infosec sleuths ring Redmond’s alarm bell
If at first you don’t succeed, patch and patch again More threat intel teams are sounding the alarm about a critical Windows Server Update Services (WSUS) remote code execution vulnerability, tracked as CVE-2025-59287 and now under active exploitation, just days after Microsoft pushed an emergency p...
> Ghosts of Incidents Past: Exorcise Threats with Hero AI
The post Ghosts of Incidents Past: Exorcise Threats with Hero AI appeared first on AI Security Automation. The post Ghosts of Incidents Past: Exorcise Threats with Hero AI appeared first on Security Boulevard.
> Ubuntu 20.04 LTS GStreamer Good Plugins Critical DoS CVE-2025-47219
GStreamer Good Plugins could be made to crash as your login if it opened a specially crafted file.
> Assured Compliance Through Effective IAM
How Do Non-Human Identities Transform Security for Organizations? Where increasingly driven by technology, how do organizations ensure the safety of their digital environments? The answer lies in Non-Human Identities (NHIs) and Secrets Security Management. While many are familiar with traditional id...
> Secrets Security That Delivers Business Value
Can Your Organization Afford to Overlook Non-Human Identities in Cybersecurity? Non-Human Identities (NHIs) are quickly becoming pivotal in cybersecurity. But what exactly are NHIs, and why should businesses prioritize their management? NHIs, essentially machine identities, are made up of encrypted...
> US declines to join more than 70 countries in signing UN cybercrime treaty
More than 70 countries signed the landmark UN Convention against Cybercrime in Hanoi this weekend, a significant step in the yearslong effort to create a global mechanism to counteract digital crime.
> Innovative Strategies for NHI Security
How Secure Are Your Non-Human Identities in the Cloud? Where technology continuously evolves, how confident are you in your Non-Human Identities (NHIs) within cloud environments? These NHIs, essentially machine identities, serve as critical components in modern cybersecurity frameworks. Their manage...
> Google disputes false claims of massive Gmail data breach
Google was once again forced to announce that it had not suffered a data breach after numerous news outlets published sensational stories about a fake breach that purportedly exposed 183 million accounts. [...]
> Memento Labs, the ghost of Hacking Team, has returned — or maybe it was never gone at all.
Kaspersky links the first Chrome zero-day of 2025 to tools used in attacks attributed to Memento Labs, formerly known as the Hacking Team. The actor behind Operation ForumTroll used the same tools seen in Dante spyware attacks. Kaspersky researchers linked the first Chrome zero-day of 2025 (CVE-2025...