L'installation du pilote réseau de 6 mini PC Geekom est détecté comme malveillant par 4 plateformes d'analyse, mais tous les PC ne sont pas infectés.
Le post Geekom : un pilote réseau malveillant était téléchargeable depuis son site de support a été publié sur IT-Connect.
A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs
A malicious executable masquerading as a Google Gemini installer was used to deliver the Vidar infostealer on a company network in the EMEA region, according to Darktrace researchers who investigated the incident. “During the initial analysis, it was noted that the top search result for the suspicio...
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE CISA added a critical flaw in the open-source Ray distributed computing framework to its Known Exploited Vulnerabilities catalog after confirming active exploitation. The bug, rated 9.4 in severity, stems from Ray’s lack of au...
Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally.
Zimperium zLabs, in a Wednesday report, said the Android malware also features...
The action taken by OpenAI comes in light of the Hugging Face incident and the discovery of the Astra model’s advanced capabilities.Â
The post OpenAI Overhauls Model Security With Sandboxing, 30-Minute Alerts, and Training Pauses appeared first on SecurityWeek.
Oracle Linux has released updates for PHP 8.4.24 addressing CVEs 2026-17543 and 2026-17544, with new RPMs for x86_64 and aarch64 architectures available via the Unbreakable Linux Network.
Oracle Linux 10 has new MySQL 8.4.11 packages addressing multiple CVEs, enhancing security. The updates include various components for x86_64 and aarch64 architectures available via the Unbreakable Linux Network.
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices. [...]
Oracle Linux Security Advisory ELSA-2026-56971 announces updated rpms for version 10 to address CVE-2026-60075, fixing a potential regex DoS vulnerability in date/time parsing.
Oracle Linux 10 has updated glib2 packages available, addressing multiple CVEs including buffer overflows and validation issues to enhance security and system stability.
The newly identified SPECTRE implant represents an evolution in commodity intrusion tooling, integrating cross-platform C2 operations, process injection, credential theft, anti-analysis protections, and kernel-level endpoint detection and response (EDR) bypass functionality.Â
Oracle Linux 10 has released updates for the yggdrasil package, fixing CVE-2026-33810 and rebuilding it against an updated golang. New RPMs are available for x86_64 and aarch64.
Oracle Linux 10 has received updated RPMs for curl due to several vulnerabilities, including fixes for proxy issues, OAuth2 token leakage, and connection reuse problems, addressing numerous CVEs.
Cisco Talos discovered a Chinese-speaking cybercrime group, tracked as UAT-10147, that targets a wide range of vulnerable web servers. This is an overview of the campaign, examining the countries affected, potential impact of BadIIS infections, the attack chain, and post-compromise tactics.
Oracle Linux 10 has received an update with various kernel RPMs addressing multiple CVEs, enhancing security and adding new certificates, along with numerous bug fixes across different subsystems.
Oracle Linux released updates for .NET SDK and runtime, addressing multiple CVEs and adding support for Oracle Linux 9, with packages available for x86_64 and aarch64 architectures.
Unit 42 details how attackers exploit enterprise collaboration tools for identity phishing and credential theft. Discover key defense strategies.
The post Identity Abuse Through Trusted Communication Channels appeared first on Unit 42.
Oracle Linux 9 has released security updates for the Performance Co-Pilot (PCP) package, addressing multiple vulnerabilities and adding various enhancements and options in its tools.
Zimperium lifts the lid on the ToxicPanda 2.0 Android banking Trojan