[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> LockBit 5.0 menace de publier des données d’Actua
LockBit 5.0 menace de publier fin août des documents attribués à Actua concernant plus de 100 000 personnes.
> Malware Hijacks Android Car Head Units
Malware is abusing car infotainment updates to install proxy software, turning Android head units into nodes for the BADBOX network. Kaspersky researchers found something in June 2026 that made them stop and look twice: an Android app with no interface at all, installed like any ordinary app but mak...
> Corée du Sud : des responsables politiques visés par une fuite
Corée du Sud : une agence de certification piratée aurait exposé les coordonnées de responsables présidentiels.
> Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight
The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware. The post Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight appeared first on SecurityWeek.
> Ransomware : avec 181 victimes, 2026 dépasse déjà toute l’année 2025
Ransomware en France : le nombre de cyberattaques de 2025 déjà dépassé en août 2026.
> Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution
A critical flaw (CVSS 9.4) in NASA/JPL’s AIT-GUI let anyone send unauthenticated commands to spacecraft instruments. Cycode researchers found that AIT-GUI, the browser-based operator console in NASA/JPL open-source AMMOS Instrument Toolkit, shipped with no authentication, no session checks, and no C...
> U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the Zimbra Collaboration Suite (ZCS) flaw CVE-2026-73570 to its Known Exploit...
> Golf Canada - 568,972 breached accounts
In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates of birth, genders and approximate geographic locations (city, province and postcode). Golf Canada did...
> BMS Engineering
Le prestataire informatique BMS Engineering, qui héberge des données de santé sensibles pour de nombreux cabinets médicaux au Luxembourg, a été victime d'une cyberattaque majeure. L'incident, détecté le 22 août 2026, a provoqué la paralysie des services digitaux et la perte ou corruption de données...
> AWS Security makes an inscrutable choice
Quarantining leaked credentials is not good enough
> Say it once: introducing Bot Preference SynC
Cloudflare's new Bot Preference Sync automatically aligns your robots.txt file with your AI bot policies for Search, Agent, and Training. Easily manage which bots access your content without maintaining static files.
> Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain
Attackers are targeting CI/CD pipelines and developer tools instead of application code, requiring total SDLC visibility and strict security controls The post Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain appeared first on Unit 42.
> Ubuntu 22.04 LTS Low Latency Kernel Key for Packet Injection 2026-8661-2
Ubuntu 22.04 LTS received updates addressing multiple Linux kernel vulnerabilities, including issues in network drivers and file systems that could allow system compromise by attackers.
> Ubuntu 22.04 LTS Linux Kernel Security Issues USN-8658-2
Ubuntu released an update addressing security vulnerabilities in the Linux kernel for version 22.04 LTS, requiring users to reboot and possibly recompile third-party kernel modules.
> USN-8658-2: Linux kernel (IBM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-64531)
> USN-8661-2: Linux kernel (Low Latency) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. (CVE-2025-27558...
> Debian DSA-6458-1 Gst-Plugins-Bad1.0 Critical DoS Code Exec
Debian has released an advisory regarding multiple vulnerabilities in gst-plugins-bad1.0, potentially allowing denial of service or code execution via malformed media files, and recommends updating to version 1.26.2-3+deb13u3.
> Debian OpenJDK 21 DSA-6457-1 Denial of Service Issues Fixed
Debian announced security updates for OpenJDK 21 to address multiple vulnerabilities that may cause denial of service or information disclosure, urging users to upgrade their packages.
> Friday Squid Blogging: Neon Flying Squid
The neon flying squid can fly in formation. The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and glided near the boat for about 30 metres. The astonished researchers were the first to capture photographs of such a thing, which looked like t...
> Ubuntu 24.04 LTS Linux Kernel NVIDIA Important Update Advisory 8669-1
Ubuntu has issued a security notice addressing multiple vulnerabilities in the Linux-nvidia-6.17 kernel for version 24.04 LTS, urging users to update and reboot their systems.