[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (5 articles)

|

// AI-powered summary generated at 04:00

> CVE-2026-53374 drm/amdgpu: zero-initialize GART table on allocation
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:02]
Information published.
> CVE-2026-53392 NFSv4/flexfiles: reject zero filehandle version count
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:02]
Information published.
> Faille dans 7-Zip : pourquoi vous devriez installer la version 26.02 sans attendre
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-07-20 07:46]
La version 26.02 de 7-Zip corrige CVE-2026-14266, un débordement de tampon dans le décodage XZ. Faute de mise à jour automatique, l'installation reste manuelle. Le post Faille dans 7-Zip : pourquoi vous devriez installer la version 26.02 sans attendre a été publié sur IT-Connect.
> CVE-2026-63810 block: Avoid mounting the bdev pseudo-filesystem in userspace
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:02]
Information published.
> CVE-2026-63853 drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:01]
Information published.
> X open source : Elon Musk promet d’ouvrir tout le code du réseau social
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-07-20 07:29]
Elon Musk annonce que le code de X va passer en open source, mais sans spécifier de calendrier, et juste après le scandale Grok Build, prudence ! Le post X open source : Elon Musk promet d’ouvrir tout le code du réseau social a été publié sur IT-Connect.
> CVE-2026-63825 gcov: use atomic counter updates to fix concurrent access crashes
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:01]
Information published.
> CVE-2026-63816 f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:01]
Information published.
> Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances
[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-07-20 07:29]
Unknown hackers exploited two SonicWall SMA 1000 zero-days to gain root access on VPN appliances before patches became available. Volexity published its findings after conducting an incident response investigation involving a compromised organization whose SonicWall SMA 1000 series VPN appliances we...
> CVE-2026-63805 crypto: nx - fix nx_crypto_ctx_exit argument
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:01]
Information published.
> CVE-2026-53386 iio: adc: ti-ads1298: add bounds check to pga_settings index
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:01]
Information published.
> A week in security (July 13 – July 19)
[SOURCE] Malwarebytes [LANGUAGE: EN] [DATE: 2026-07-20 07:02]
A list of topics we covered in the week of July 13 to July 19 of 2026
> CVE-2026-63815 f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-20 08:01]
Information published.
> SOCs face a human challenge as AI speeds alerts and threats
[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2026-07-20 07:00]
Security operations centers (SOCs) have spent years struggling under the weight of growing alert volumes, expanding attack surfaces, and chronic staffing shortages. Now artificial intelligence is adding a new complication: not just more information, but more machine-generated...
> Cette arnaque FaceTime vide les comptes bancaires en direct
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-07-20 06:59]
Des escrocs se font passer pour votre banque ou le support Apple lors d'un appel FaceTime, puis captent en direct vos identifiants et vos codes bancaires. Le post Cette arnaque FaceTime vide les comptes bancaires en direct a été publié sur IT-Connect.
> Claude Mythos FAQ: Capabilities, access, competitors, implications
[SOURCE] CSO Online [LANGUAGE: EN] [DATE: 2026-07-20 06:30]
1. What is Claude Mythos? Claude Mythos is an advanced AI model developed by Anthropic and is optimized for cybersecurity and healthcare applications. Mythos 5 was originally released in April to a small group of vetted technology partners ahead of a planned wider roll...
> Meet Dusseldorf, Microsoft’s open-source out-of-band security platform
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-07-20 06:00]
Out-of-band vulnerabilities surface when an application quietly reaches out to an external system during an attack, and capturing that traffic calls for infrastructure that many researchers assemble on their own. A new open-source project from Microsoft supplies that infrastructure in a package mean...
> Windows 11 – KB5121767 : Microsoft corrige en urgence le bug Intel qui bloquait des PC Dell
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-07-20 05:45]
Microsoft a publié les KB5121767 et KB5121768, deux correctifs pour les PC Dell dont un pilote Intel IPF bloquait la mise à jour Windows de juillet 2026. Le post Windows 11 – KB5121767 : Microsoft corrige en urgence le bug Intel qui bloquait des PC Dell a été publié sur IT-Connect.
> More alerts are making your team slower, and an outcome-based SOC fixes that
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-07-20 05:30]
In this Help Net Security video, Thom Langford, EMEA CTO, Rapid7, explains why piling on more security alerts makes a SOC slower to respond. Attackers log in with stolen credentials and use trusted tools like PowerShell instead of custom malware. He shares a case where attackers called a help desk,...
> World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-07-20 05:27]
In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system. The company said it detected and responded to the incident targeting its production infrastructure earlier last week. "We ident...