— Veille & Actualités

Veille & Actualités

Vulnérabilités, actualités et mises à jour cybersécurité — chaque élément est attribué à sa source d'origine. Rien n'est republié en intégral.

dernière MAJ :
EPSS min: 0%
KEV CVE-2026-20316 A vulnerability in the web interface of Cisco Secure Firewall Managem… ajouté 2026-07-29 KEV CVE-2026-16812 VeloCloud Orchestrator (VCO) on-prem has a security issue where this … ajouté 2026-07-27 KEV CVE-2025-68686 An Exposure of Sensitive Information to an Unauthorized Actor vulnera… ajouté 2026-07-27

346 résultats

  • ToxicPanda Android malware uses VPN permissions to block Google Play

    The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote commands. [...]

    BleepingComputer

  • DSA-6461-1 thunderbird - security update

    Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure https://security-tracker.debian.org/tracker/DSA-6461-1

    Debian Security Advisories

  • DSA-6460-1 openjdk-25 - security update

    Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure. https://security-tracker.debian.org/tracker/DSA-6460-1

    Debian Security Advisories

  • TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

    The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing the company of violating child privacy laws in the country.

    The Hacker News

  • Hackers infect Android car head units with proxy botnet malware

    A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. [..

    BleepingComputer

  • Named Pipes Under Attack: Securing Windows Interprocess Communication

    Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted processes. ThreatLocker explains how endpoint verification, command au

    BleepingComputer

  • Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight

    The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware. The post Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Sp

    SecurityWeek

  • DSA-6459-1 libnet-dns-perl - security update

    Two vulnerabilities were discovered in libnet-dns-perl, a Perl module to perform DNS queries, which could result in denial of service or remote code execution. https://security-tracker.debian.org/trac

    Debian Security Advisories

  • USN-8658-2: Linux kernel (IBM) vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch; - SC

    Ubuntu Security Notices

  • USN-8661-2: Linux kernel (Low Latency) vulnerabilities

    Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE

    Ubuntu Security Notices