[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (2 articles)

|

// AI-powered summary generated at 04:00

> CVE-2026-71227 Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:03]
Information published.
> CVE-2026-44605 Rpm: heap buffer overflow in ndb slot table parsing
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:03]
Information published.
> Webmail CSS Attacks Expose a New Risk for AI-Powered Email Tools
[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-08-09 08:01]
CSS attacks on major webmail services can steal credentials, hijack sessions and manipulate AI tools connected to users’ inboxes. PortSwigger researcher Gareth Heyes demonstrated something that should make every webmail team a little nervous: plain CSS, the styling language that’s supposed to just m...
> CVE-2026-47243 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:02]
Information published.
> CVE-2025-49506 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:02]
Information published.
> Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026
[SOURCE] Help Net Security [LANGUAGE: EN] [DATE: 2026-08-09 08:00]
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Mapping the malware blast radius a single alert won’t show you In this interview with Help Net Security, Mike Wiacek, founder and CTO of Stairwell, explains Backstory, an AI agent that takes a single al...
> CVE-2026-34191 Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:02]
Information published.
> CVE-2026-34501 Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:02]
Information published.
> Cyber actualités ZATAZ de la semaine du 3 au 9 août 2026
[SOURCE] ZATAZ [LANGUAGE: FR] [DATE: 2026-08-09 07:52]
Bonjour à toutes et tous Cette semaine, ZATAZ découvre 1,7 milliard d’identifiants français uniques stockés dans un cloud pirate, tandis que 43 revendications de rançongiciels ciblent la France en un mois. Qilin menace de publier des données du Stade français et expose déjà des pièces d’identité. Cu...
> CVE-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:02]
Information published.
> CVE-2026-68081 KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:02]
Information published.
> Debian Chromium Critical Code Exec Denial of Service Advisories DSA-6422-1
[SOURCE] LinuxSecurity - Debian [LANGUAGE: EN] [DATE: 2026-08-09 01:16]
Debian's security advisory DSA-6422-1 reports multiple vulnerabilities in Chromium that may lead to code execution, denial of service, or information disclosure, recommending users update to the latest version.
> CVE-2026-68082 libceph: fix two unsafe bare decodes in decode_lockers()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:02]
Information published.
> CVE-2026-64676 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:01]
Information published.
> CSDD
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2026-08-09 00:00]
La Direction de la Sécurité Routière (CSDD) a été victime d'une cyberattaque complexe et ciblée survenue le week-end. Les attaquants sont parvenus à pénétrer partiellement le système informatique de la CSDD et à obtenir des données historiques de paiement contenant des informations personnelles des...
> CVE-2026-50540 Kata Containers: Config Path Annotation Arbitrary File Loading
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-08-09 08:01]
Information published.
> Itaguaí Construções Navais (ICN)
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2026-08-09 00:00]
L'Itaguaí Construções Navais (ICN) a été victime d'une cyberattaque par ransomware qui a touché ses systèmes informatiques, y compris les serveurs de messagerie, les systèmes de fichiers et les bases de données. L'attaque a été détectée le dimanche soir (9) et a entraîné la cryptographie des données...
> Sakura
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2026-08-09 00:00]
Sakura confirmé une intrusion par un tiers dans une partie de ses serveurs de location ('Sakura Rental Server'). L'incident, survenu le 9 août 2026, impliquait l'accès non autorisé à environ 583 comptes. Il a été confirmé que des données personnelles, y compris des informations clients, ont pu être...
> Slackware Issues Security Update for wpa_supplicant Advisory 2026-220-01
[SOURCE] LinuxSecurity - Slackware [LANGUAGE: EN] [DATE: 2026-08-08 22:38]
Slackware has released updated wpa_supplicant packages for version 15.0 and -current to address various security vulnerabilities, with installation instructions provided for users.
> LexisNexis
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2026-08-09 00:00]
LexisNexis a a dû mettre hors ligne ses services Diligence, Metabase API et Newsdesk suite à une activité inhabituelle détectée sur des serveurs gérés par un fournisseur tiers. L'entreprise enquête sur l'incident avec l'aide d'un cabinet de cybersécurité forensique et est en train de reconstruire le...