[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> CVE-2025-55244 Azure Bot Service Elevation of Privilege Vulnerability
Information published.
> CVE-2025-55242 Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.
> ZDI-25-891: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The follo...
> CVE-2025-54914 Azure Networking Elevation of Privilege Vulnerability
Information published.
> CVE-2025-55238 Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
Information published.
> ZDI-25-890: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The follo...
> ZDI-25-889: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The follo...
> Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more
A vulnerability in Electron applications allows attackers to bypass code integrity checks by tampering with V8 heap snapshot files, enabling local backdoors in applications like Signal, 1Password, and Slack.
> ZDI-25-888: Digilent DASYLab DSB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The follo...
> ZDI-25-887: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The follo...
> Orleans Parish Sheriff's Office
Le bureau du shérif d'Orleans Parish a été victime d'une cyberattaque par rançongiciel, les employés ont rencontré des difficultés pour accéder à leurs ordinateurs, mais le système informatique de la prison n'a pas été compromis. L'équipe de technologie de l'information du bureau du shérif répond à...
> ZDI-25-886: Digilent DASYLab DSB File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The follo...
> ZDI-25-885: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The follo...
> Loterie Nationale
Un sous-traitant de la Loterie Nationale a été victime d'une attaque informatique, entraînant le vol de données. Les données des clients, telles que les noms, adresses, numéros de téléphone et coordonnées bancaires, ont été volées. La plateforme loteriesport.lu reste accessible et les clients ont ét...
> ZDI-25-884: QEMU uefi-vars Uninitialized Memory Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of QEMU. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The f...
> Corporate Services, LLC
L'attaque n'a pas été revendiquée, mais l'enseigne Qilin divulgue des données présentées comme issues des systèmes de Corporate Services, LLC.
> Barr and Barr
Barr & Barr suffered a data breach where unknown actors accessed their computer network on September 4, 2025, and copied files containing personal information of 62 Maine residents. A cyberattack against Barr & Barr was claimed by Akira on October 10.
> Médias et blogs
L'agglomération de Poitiers a subi une cyberattaque entraînant l'indisponibilité de certains services publics en ligne.Depuis le 29 août 2025, une panne informatique résultant d'une attaque a affecté la ville de Poitiers, le Grand Poitiers regroupant 40 communes, et son Centre communal d'action soci...
> Charlottesville Settlement Company
Charlottesville Settlement Company experienced a data security incident where an unknown actor gained unauthorized access to their network on September 2, 2025, potentially accessing and acquiring certain files containing personal information. The incident was discovered on September 4, 2025, and a...
> Malicious npm Packages Exploit Ethereum Smart Contracts
A malicious campaign using Ethereum smart contracts has been observed targeting developers via npm and GitHub