[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (5 articles)

|

// AI-powered summary generated at 04:00

> CVE-2026-59890 setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:07]
Information published.
> CVE-2026-58207 NATS Server: Remote crash via integer overflow in Connz pagination
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:07]
Information published.
> Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions
[SOURCE] The Hacker News [LANGUAGE: EN] [DATE: 2026-07-11 06:45]
Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. The vulnerability has been described as a case of stored cross-site scripting (XSS) that could allow specially crafted emails to e...
> CVE-2026-58251 NATS Server: Queue Subscribe Authz Bypass
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:07]
Information published.
> CVE-2026-59922 Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:07]
Information published.
> US cyber agency CISA had to build its incident playbook during the incident, agency reveals
[SOURCE] TechCrunch Security [LANGUAGE: EN] [DATE: 2026-07-11 01:01]
CISA said it "missed" an opportunity to get ahead of the security incident by not creating a response plan ahead of time.
> CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU consumption
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:07]
Information published.
> CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:06]
Information published.
> Borough de Petersburg
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2026-07-11 00:00]
Le Borough de Petersburg, en Alaska, a révélé avoir été victime d'une cyberattaque par ransomware le 11 juillet 2026. L'incident a ciblé le logiciel de facturation des services publics, permettant l'accès aux noms des clients et aux numéros de compte. Les informations bancaires et les données de car...
> CVE-2026-14740 DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:06]
Information published.
> CVE-2026-59926 Mistune: XSS via unescaped class option in Admonition directive
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:06]
Information published.
> Solid Advance Co., Ltd.
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2026-07-11 00:00]
Solid Advance Co., Ltd. a détecté une infection par un logiciel malveillant sur certains de ses systèmes internes suite à un accès non autorisé depuis l'extérieur. En réponse, l'entreprise a mis en place des mesures d'urgence, notamment la coupure du réseau, ce qui a entraîné la suspension de certai...
> CVE-2026-14739 DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:06]
Information published.
> CVE-2026-59928 Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:06]
Information published.
> Nihon Kotsu
[SOURCE] Ransomware.live [LANGUAGE: EN] [DATE: 2026-07-11 00:00]
La société japonaise Nihon Kotsu, l'un des plus grands opérateurs de taxis du Japon, a confirmé avoir subi un accès non autorisé à ses systèmes internes et une infection par un logiciel malveillant. L'incident, découvert le 11 juillet, a conduit à l'isolement immédiat des systèmes affectés (tels que...
> CVE-2026-14461 Out-of-bound read in mtr
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:04]
Information published.
> CVE-2026-20244 ClamAV DMG File Processing Denial of Service Vulnerability
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:02]
Information published.
> Slackware p11-kit Addresses Critical Stack Overflow Issue 2026-191-01
[SOURCE] LinuxSecurity - Slackware [LANGUAGE: EN] [DATE: 2026-07-10 22:37]
New p11-kit packages are available for Slackware 15.0 and -current to fix a security issue.
> CVE-2026-59998 sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:02]
Information published.
> CVE-2026-59856 Vim: Arbitrary Code Execution via PHP Omni-Completion
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2026-07-11 08:01]
Information published.