[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (54 articles)

|

// AI-powered summary generated at 12:00

> Oct Recap: New and Newly Deniable GCP Privileged Permissions
As October 2025 wraps up, Sonrai’s latest analysis of Google Cloud Platform permissions reveals both newly introduced privileged actions and those that have become newly enforceable through the V2 API, meaning organizations can now explicitly deny their use. This month’s updates span Discovery Engin...
> Oracle Linux 10: ELSA-2025-19435 xorg-x11-server-Xwayland Moderate Threat
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 10 Advisory ELSA-2025-19403 expat Important Update
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> How social engineering works | Unlocked 403 cybersecurity podcast (S2E6)
Think you could never fall for an online scam? Think again. Here's how scammers could exploit psychology to deceive you – and what you can do to stay one step ahead
> Oracle Linux 9: ELSA-2025-19489 Tigervnc Important Use-after-free Fix
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 9: Moderate Advisory ELSA-2025-19433 for xorg-x11-server
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> DeFi Protocol Balancer Loses Over $120m in Cyber Heist
Digital thieves have got away with over $120m stolen from popular decentralized finance protocol Balancer
> Oracle Linux 9 ELSA-2025-19409 Kernel Moderate DoS Advisory
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 8: ELSA-2025-19434 xorg-x11-server Moderate CVE Fix
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> USN-7849-1: libssh vulnerability
Philippe Antoine discovered that libssh did not properly manage memory when calculating a session id during the key exchange process. An attacker could possibly use this issue to cause libssh to crash, resulting in a denial of service.
> Oracle Linux 8: ELSA-2025-19432 xorg-x11-server-Xwayland Moderate CVE Fix
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 8: ELSA-2025-25731 Kernel Important CVE-2025-39973
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Yes really, curl is still developed
A lot! One of the most common reactions or questions I get about curl when I show up at conferences somewhere and do presentations: — is curl still being actively developed? How many more protocols can there be? This of course being asked by people without very close proximity or insight into the cu...
> Oracle Linux 7 ELSA-2025-25731 Kernel Important CVE-2025-39973
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
> Android Update Patches Critical Remote Code Execution Flaw
The November 2025 Android patches resolve two vulnerabilities, both in the platform’s System component. The post Android Update Patches Critical Remote Code Execution Flaw appeared first on SecurityWeek.
> Sling TV turned privacy into a game you weren’t meant to win
California has fined Sling TV for misleading privacy controls that made opting out nearly impossible. Even children’s data ended up in ad targeting.
> Oct Recap: New AWS Privileged Permissions and Services
As October 2025 closes, Sonrai’s latest analysis of new AWS permissions reveals a continued trend: incremental privilege changes with outsized impact. This month’s additions span OpenSearch Ingestion, Aurora DSQL, QuickSight, Parallel Computing Service, ARC Region Switch, and RTB Fabric, touching cr...
> Dohop Uses DataDome to Block Millions of Scrapers & Protect 75+ Airline Partners
Dohop cut bot traffic by 70% with DataDome, blocking millions of scrapers and protecting 75+ airline partners from API overload and downtime. The post Dohop Uses DataDome to Block Millions of Scrapers & Protect 75+ Airline Partners appeared first on Security Boulevard.
> OpenAI dévoile Aardvark, un chercheur en sécurité agentique pour détecter et patcher les vulnérabilités
OpenAI a dévoilé Aardvark, un chercheur en sécurité agentique propulsé par le LLM GPT-5. Il est capable de détecter et de corriger les failles de sécurité. The post OpenAI dévoile Aardvark, un chercheur en sécurité agentique pour détecter et patcher les vulnérabilités first appeared on IT-Connect.
> Google’s AI ‘Big Sleep’ Finds 5 New Vulnerabilities in Apple’s Safari WebKit
Google's artificial intelligence (AI)-powered cybersecurity agent called Big Sleep has been credited by Apple for discovering as many as five different security flaws in the WebKit component used in its Safari web browser that, if successfully exploited, could result in a browser crash or memory cor...