[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (83 articles)

|

// AI-powered summary generated at 16:00

> CVE-2026-15709 Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service
Information published.
> Fresh SharePoint Vulnerability Exploited Soon After Disclosure
The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server. The post Fresh SharePoint Vulnerability Exploited Soon After Disclosure appeared first on SecurityWeek.
> CISA urges immediate action on actively exploited Fortinet flaws
CISA on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform. [...]
> Senior executives are killing your shadow AI strategy
Shadow IT has long been a major problem for CISOs, but the biggest problem may be coming from the executive suite’s hunger for unsanctioned AI. Nearly two-thirds of senior decision-makers admit to using unapproved AI tools, compared to just 31% of lower-level employees, acc...
> Microsoft saborde toujours le choix du navigateur sur Windows, selon Mozilla
Le rapport Over the Edge 2.0 publié par Mozilla révèle que Windows, Copilot et l'outil de sauvegarde continuent de chercher à imposer Microsoft Edge. Le post Microsoft saborde toujours le choix du navigateur sur Windows, selon Mozilla a été publié sur IT-Connect.
> CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by July 19, 2026...
> Oracle ELSA-2026-500004 Kernel Important Update for Threats
The following updated rpms for have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 9 ELSA-2026-500004 Kernel Important DoS CVE-2026-31663
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack
The company says the incident has not affected product quality and safety, nor Fairlife’s Canada production. The post Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack appeared first on SecurityWeek.
> Oracle Linux 9 hplip Important Buffer Overflow Security Fix ELSA-2026-40831
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 9 ELSA-2026-40751 GIMP Important CVE-2026-58380 CVE-2026-58384
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Aspirateurs robots Shark : un seul certificat suffit pour espionner ceux des voisins
Un chercheur affirme pouvoir espionner à distance des aspirateurs Shark d'autres foyers à cause d'une politique AWS mal configurée. Toujours aucun correctif. Le post Aspirateurs robots Shark : un seul certificat suffit pour espionner ceux des voisins a été publié sur IT-Connect.
> Oracle Linux 9 Python3.9 Important Bug Fix ELSA-2026-39798 CVE-2026-15308
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Prompt injection is becoming the XSS of the web agent era
Autonomous web agents read whatever a page displays, and much of that content comes from strangers. Product reviews, seller listings, and advertisements sit beside trusted site menus on a single page. An agent that reads all of that text as instructions can be steered by any of it. A group at UC Ber...
> The script, not the voice, is what makes AI voice phishing work
The call comes in at 4:40 on a Friday. The voice belongs to a senior manager, or sounds close enough, and she needs a password reset before a flight. She is polite, she is in a hurry, and she has the last four of the badge number. Researchers at Harvard Kennedy School, Meta and elsewhere ran a versi...
> ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)
> The five step plan that cuts security budget waste
In this Help Net Security video, Viktor Bulanek, CTO of Penetrify, explains where security budget waste comes from. Budgets get built around vendor categories, compliance checkboxes, and last year’s headlines. Attackers work along attack paths, and that mismatch is where the money goes. He walks thr...
> A hard drive reliability check on 341,263 drives, from 4TB to past 20TB
Large cloud storage operators track their hard drives every day, recording which units keep running and which ones drop off the racks. Backblaze does this at scale, and its Q1 2026 report covers a fleet built for continuous use. The analysis covered 341,263 hard drives, after boot drives and a small...
> South Korea making its own security-centric AI model
Adapting existing local LLM project for security and sovereignty purposes and hopes to one day match Mythos
> New infosec products of the week: July 17, 2026
Here’s a look at the most interesting products from the past week, featuring releases from Cloudflare, Lineation.ai, Nudge Security, and Polygraf AI. Polygraf AI Meeting Guard delivers real-time deepfake detection for enterprise meetings Polygraf AI has announced Meeting Guard, a real-time AI fraud...