[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (14 articles)

|

// AI-powered summary generated at 20:00

> CVE-2026-44631 Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:02]
Information published.
> CVE-2026-42535 Apache HTTP Server: mod_dav_fs protected directory access
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:02]
Information published.
> JDY Botnet Evolves After KV Takedown, Targets Military Networks
[SOURCE] Security Affairs [LANGUAGE: EN] [DATE: 2026-06-11 07:46]
JDY botnet scans SOHO/IoT devices globally to map services and targets, especially US military networks. Lumen’s Black Lotus Labs reported the resurgence of the JDY botnet, a covert reconnaissance network tied to Chinese state-sponsored hacking groups including Volt Typhoon. The network was first sp...
> CVE-2026-29167 Apache HTTP Server: mod_ldap per-dir use-after-free
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:02]
Information published.
> CVE-2026-43951 Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:02]
Information published.
> Microsoft corrige la faille YellowKey, il révèle GreatXML pour contourner BitLocker !
[SOURCE] IT-Connect [LANGUAGE: FR] [DATE: 2026-06-11 07:37]
À peine la faille YellowKey corrigée, une nouvelle zero-day nommée GreatXML menace BitLocker sur les machines Windows. Voici ce que l'on sait. Le post Microsoft corrige la faille YellowKey, il révèle GreatXML pour contourner BitLocker ! a été publié sur IT-Connect.
> CVE-2026-29170 Apache HTTP Server: mod_proxy_ftp XSS
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:01]
Information published.
> CVE-2026-44119 Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:01]
Information published.
> Nottingham University data breach affects over 450,000 students
[SOURCE] BleepingComputer [LANGUAGE: EN] [DATE: 2026-06-11 07:27]
The University of Nottingham confirmed on Wednesday that a hacking group gained access to its student records system in a breach affecting both current students and alums. [...]
> CVE-2026-48913 Apache HTTP Server: mod_http2 memory corruption when file handles exhausted
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:01]
Information published.
> CVE-2026-10846 Insufficient verification that responses belong to a query
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:01]
Information published.
> Ubuntu 26.04 LTS libcrypt-saltedhash Important Salt Weakness USN-8418-1
[SOURCE] LinuxSecurity - Ubuntu [LANGUAGE: EN] [DATE: 2026-06-11 07:10]
Crypt-SaltedHash incorrectly generated random numbers.
> CVE-2026-11824 SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:01]
Information published.
> CVE-2026-46433 lldpd: Heap OOB Read in VLAN Decapsulation memmove
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:01]
Information published.
> Every employee’s password was stored in a single Excel file
[SOURCE] The Register Security [LANGUAGE: EN] [DATE: 2026-06-11 07:00]
The CEO thought this was the best way to deal with some email issues
> CVE-2026-42536 Apache HTTP Server: mod_xml2enc heap overflow
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:01]
Information published.
> CVE-2026-11822 SQLite before 3.53.2 Memory Corruption in FTS5 Extension
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-06-11 08:01]
Information published.
> USN-8420-1: .NET vulnerabilities
[SOURCE] Ubuntu Security Notices [LANGUAGE: EN] [DATE: 2026-06-11 06:57]
It was discovered that .NET did not properly handle link resolution before file access. A local attacker could use this issue to perform unauthorized file tampering and write arbitrary files outside of the intended extraction directory. (CVE-2026-45491) It was discovered that .NET did not properly...
> Microsoft Patches Exploited Exchange Server Vulnerability
[SOURCE] SecurityWeek [LANGUAGE: EN] [DATE: 2026-06-11 06:52]
The company warned about zero-day attacks exploiting the Exchange Server vulnerability CVE-2026-42897 on May 14.  The post Microsoft Patches Exploited Exchange Server Vulnerability appeared first on SecurityWeek.
> GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-06-11 06:23]
GitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat attack techniques that abuse the "npm install" command to trigger the execution of malicious code u...