Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi
implementation in the Linux kernel did not properly handle aggregated
frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A
physically proximate attacker could use this issue to inject packets.
(CVE-2025-27558...
Patrick Keshishian discovered that libpng incorrectly handled certain
text chunks. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10087)
It was discovered that libpng incorrectly handled certain malformed
images. An attac...
Don't worry, this one was via a bug bounty program
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- InfiniBand drivers;
- Network drivers;
- Network traffic control;
- IPv4 networking;
-...
The company at the center of a series of incidents in which AI models compromised real-world computer systems during security evaluations is facing criticism after the release of a report that security experts say leaves key questions unanswered.
MyDr, a privately-owned Polish company that supplies software to doctors, clinics and other healthcare providers, said on Friday that it had identified and removed the cause of the incident and introduced additional security measures.
Attackers are targeting Steam forums with malicious PowerShell commands disguised as fixes for game launch issues. Here’s how this version of the ClickFix scam works.
UNISOC modem flaw enabled kernel-level code execution through video calls
GitHub subit une panne mondiale ce 17 août 2026 : 20 % d'erreurs sur le web et l'API, Actions, Copilot et les pull requests dégradés. Voici ce que l'on sait.
Le post Lundi 17 août 2026 : Microsoft confirme que GitHub est en panne à l’échelle mondiale ! a été publié sur IT-Connect.
GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests, and several other services. [...]
About 20 years ago, with macOS 10.5 (Leopard), Apple introduced screen sharing. Apple did not invent a new protocol for screen sharing. Instead, it used the established VNC protocol. VNC is a pretty simple, unencrypted protocol using TCP port 5900. Historically, the protocol used a simple global pas...
Microsoft explique le retard de la CU1 d'Exchange Server SE : les failles remontées par ses outils d'IA saturent ses équipes. Aucune date n'est annoncée.
Le post Exchange Server SE : Microsoft explique pourquoi la CU1 n’arrive toujours pas a été publié sur IT-Connect.
France’s tax authority has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems, saying the intrusion exposed data on 678,000 individuals and professionals. The incident came to light after an alleged attacker using the alias “ZeroBytes” took...
A cybersecurity expert has demonstrated how computer-generated patterns can successfully prevent surveillance cameras from detecting vehicles - such as the controversial AI-powered Flock licence plate readers that are becoming increasingly common on American streets.
Read more in my article on th...
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. [...]
As AI takes on more security operations center (SOC) workflows to automate threat triage, indicator extraction, and incident report generation, security operations leaders face a persistent question: Does SOC performance depend more on the large language model (LLM) deployed o...
Hackers used compromised credentials to access enterprise and personal tax-related data.
The post 680,000 Impacted by French Tax Authority Data Breach appeared first on SecurityWeek.
Fortinet has acquired Virtue AI, strengthening its broader Security for AI strategy and its vision for securing the agentic enterprise. The acquisition builds on Fortinet’s existing AI security portfolio, which includes the FortiGate Hyperscale Firewall. As organizations deploy AI applications and a...
Proton a dévoilé un nouveau socle logiciel écrit en Rust pour remplacer wireguard-go dans ses applications VPN, ainsi que muon pour lutter contre la censure.
Le post Proton VPN migre vers Rust : un nouveau cœur WireGuard pour ses applications a été publié sur IT-Connect.
For the latest discoveries in cyber research for the week of 17th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Colombia’s Ministry of Justice has experienced a ransomware attack that affected part of its technology infrastructure and disrupted public services re...