[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Two more Serbian opposition figures targeted with spyware, researchers say
A phone belonging to the rector of the University of Belgrade was discovered to have been infected with Pegasus spyware, the latest in a series of such discoveries in the lead-up to Serbia's national elections.
> Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners
Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is designed to make movies, music, and other media available across devices. But when a server is exposed to the internet and runs vulnerable software, it c...
> Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic
At risk, the Oregon Democrat warned, are online crime tipsters, whistleblowers and others. The post Wyden seeks adoption of encryption tech at hundreds of federal agencies to protect visitors’ sensitive traffic appeared first on CyberScoop.
> Security patches need patches now that attackers have AI
Terra finds sharp rise in GitHub security fixes reported broken within 90 days
> Oracle Linux 8 libsoup Fixes WebSocket Buffer Overflows
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 9 xorg-x11-server Patch for Five Security Issues
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Ubuntu libXtst Fixes X Server Reply and Memory Handling
Several security issues were fixed in libXtst.
> Oracle WebKit 2.54.1 Critical Security Update and Important Fixes
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Oracle perl-URI Moderate Hostname Encoding Bypass ELSA-2026-84588
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures. The post Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks appeared first on SecurityWeek.
> Oracle Linux 9 environment-modules Fixes Bash Completion Injection
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Announcing Privacy Badger for Safari on macOS
Exciting news for Safari users: Privacy Badger is now available on Safari for macOS! You’ll need Safari version 26.5 or higher to use it. Whether you want to protect yourself from data brokers or just don’t want Big Tech profiting off your browsing data, Privacy Badger is here to help. More than 4 m...
> Introducing Clairic, a new System One class of extraction models
Add your teaser here. It should complement the headline, not repeat it. Teaser cannot be longer than 240 characters. The Blog Review Gem will suggest an excerpt. Clairic is a new model from Cloudflare that is a System One extraction modeI, capable of extracting, computing, estimating, and forecastin...
> Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involve...
> OpenCode hack exposes API keys amid AI distillation attacks
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]
> USN-8939-1: libXtst vulnerabilities
It was discovered that libXtst did not properly handle certain RECORD replies from the X server. A malicious X server could possibly use this issue to cause libXtst clients to crash, resulting in a denial of service. (CVE-2026-94286) Tobias Stoeckmann discovered that libXtst did not properly handle...
> Ahold Delhaize confirms 'malicious actions' behind cyber outages affecting grocery brands
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.
> SMB protection from cyberattacks: weak spots and how to fix them
We break down a real-world breach of a cloud ERP system, and explain how to avoid the key mistakes.
> Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site th...
> AZOP - autorité croate
L'Agence pour la protection des données personnelles (AZOP) de Croatie a tenu une réunion de travail avec son homologue de Bosnie-Herzégovine pour renforcer leur coopération.Le 16 octobre, le directeur de l'autorité croate et le directeur adjoint de l'autorité de Bosnie-Herzégovine ont échangé sur l...