[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (109 articles)

|

// AI-powered summary generated at 16:00

> Oracle Linux 10 python-idna Moderate IDNA Fix Advisory ELSA-2026-54481
Oracle Linux has released an update for python3-idna to address CVE-2026-45409, which involves a security fix for quadratic time complexity in IDNA validation.
> Oracle Linux Grafana Moderate Fix Advisory ELSA-2026-54178 CVE-2026-8609
Oracle Linux has released updated RPMs for Grafana 10.2.6 addressing multiple CVEs, including CVE-2026-8609 and CVE-2026-33377, available for x86_64 and aarch64 architectures.
> Cl0p industrialise ses attaques via PTC Windchill
Cl0p revendique près de 50 entreprises après l’exploitation présumée d’une faille critique dans PTC Windchill et FlexPLM.
> Oracle Linux 10 ELSA-2026-36541 Kernel Important Bug Fix Advisory
Oracle Linux 10 has released kernel updates addressing multiple vulnerabilities and related changes, including driver signing certificate updates and fixes for various CVEs to enhance system security.
> Oracle Linux 9 Python3.9 Important Security Advisory ELSA-2026-54268
Oracle Linux 9 has released security updates for Python packages addressing multiple vulnerabilities, including CVE-2026-11940, with several RPMs available for x86_64 and aarch64 architectures.
> Slackware 15.0 rsync Security Update Advisory 2026-225-01
Slackware has released updated rsync packages for version 15.0 and -current to address security issues and bugs, with various download links and MD5 signatures provided.
> A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
The “philosophical shift” that the memo authorizes raises legal, practical and moral questions, experts say. The post A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo. appeared first on CyberScoop.
> Flock says its new tool will help identify police abuse, but hasn’t explained how it works
The surveillance company announced it's making a tool called "Audit Assistance" mandatory for all customers, claiming it's already helped catch abuse. But the company has yet to explain how the tool works in detail, raising questions about its effectiveness.
> Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack
Cameron Curry stole corporate data and employee information, which he used to threaten the company as his six-month contract gig came to a close. He ultimately extorted the company for $7,540.92. The post Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack appeare...
> If Apple sends you a push notification alerting you to a spyware attack, take it seriously
Apple now sends out push notifications to iPhone lock screens when the company identifies government spyware targeting someone's devices.
> Ubuntu 22.04 LTS Linux Kernel Security Fix USN-8631-3 CVE-2025-27558
Ubuntu 22.04 LTS has resolved multiple vulnerabilities in the Linux kernel affecting NVIDIA Tegra IGX systems, including issues with WiFi and various subsystems requiring kernel updates.
> Ubuntu Linux Kernel Advisory USN-8633-2 - Important Security Fixes
Ubuntu released a security notice for version 16.04 LTS addressing multiple Linux kernel vulnerabilities that could allow attackers to compromise systems, with necessary updates detailed.
> USN-8631-3: Linux kernel (NVIDIA Tegra IGX) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. (CVE-2025-27558...
> USN-8633-2: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. (CVE-2025-27558...
> AWS Certificate Manager will discontinue email validation to prove domain validation for certificates
Today, we’re announcing that AWS Certificate Manager (ACM) will discontinue support for email-validated public certificates by September 30, 2027. If you use email validation for your ACM public certificates, you need to migrate to DNS validation before that date. This change aligns with the Certifi...
> Ubuntu 16.04 Kernel Important Flaw Escalates Privileges USN-8548-2
Ubuntu 16.04 LTS received an update addressing multiple Linux kernel vulnerabilities, including a logic flaw allowing privilege escalation, along with several other critical subsystem fixes.
> Ubuntu 16.04 LTS Kernel Important Flaw Escalation CVE-2026-43503
Ubuntu Security Notice USN-8529-2 reveals multiple vulnerability fixes in the Linux kernel affecting Ubuntu 16.04 LTS, with local attackers potentially escalating privileges or escaping containers.
> USN-8529-2: Linux kernel vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503) Several security issues w...
> Ubuntu 16.04 Linux Kernel Important Privilege Escalation Issues USN-8530-2
Ubuntu 16.04 LTS received security updates for the linux-aws-hwe kernel to correct several vulnerabilities that could allow local attackers to escalate privileges or escape containers.
> Debian PostgreSQL DSA-6438-1 Multiple Security Issues Detected
Debian's security advisory DSA-6438-1 warns of multiple vulnerabilities in PostgreSQL 17, possibly allowing arbitrary code execution and privilege escalation, urging users to upgrade their packages.