CORTEXCybersécurité
Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
CVE-2026-55040 after a Rapid7 PoC release, forging JWTs to impersonate site users or admins.
CVE-2026-55040 after a Rapid7 PoC release, forging JWTs to impersonate site users or admins.
Multiple vulnerabilities have been discovered in SonicWall Global Management System (GMS), the most severe of which could allow for remote code execution. The SonicWall Global Management System (GMS) is a centralized management interface used to deploy and centrally manage SonicWall firewall, wireless, email security, secure remote access and Dell X-Series solutions from a single console. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution in the context of the affected service account. Depending on the privileges associated with the service account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Services whose accounts are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.
Troisième mois consécutif à plusieurs centaines de correctifs pour Windows. Le décompte impressionne, mais une seule vulnérabilité est réellement exploitée. Le casse-tête a changé de nature.
Bloctel devait protéger les utilisateurs opposés au démarchage téléphonique… mais ce n’était pas un franc succès. Bloctel a tiré officiellement sa…
Repérée dans le code source Android de Signal, une nouvelle fonctionnalité baptisée "Signal Login" permettrait de créer un compte sans communiquer son numéro de téléphone, moyennant un paiement unique dont le montant reste encore à déterminer.
A public AI tool found the dangerous Zoom flaw in under 20 prompts.
Threat actors have begun exploiting a critical Microsoft SharePoint flaw following the release of PoC exploit code by Rapid7.
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.
Lazarus targets defense professionals with fake Lockheed Martin jobs, exploiting a Windows zero-day to deploy backdoors.
Adobe patches seven ColdFusion, Commerce, and Campaign Classic flaws that could enable code execution, privilege escalation, or denial-of-service.
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
Nightmare Eclipse has dropped ShieldBreak, a Windows zero-day exploit that allows any user to gain System privileges.
95% of the 2,500 organizations supposedly affected by the LiteLLM supply chain attack were exposed by the Trivy hack.
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday.
Cisco says attackers are exploiting CVE-2026-20349 in ASA and FTD, letting crafted HTTP requests trigger DoS via Remote Access SSL VPN.
Saisie en mars, arrestation en mai : les autorités pensaient avoir cassé le botnet. La version 7 tournait déjà depuis février, avec un carnet d'adresses logé sur Ethereum.
A vulnerability has been discovered in Zoom Clients that could allow for remote code execution. Zoom is a cloud-based communications platform that allows users to connect via video, audio, chat, and content sharing. Successful exploitation could allow an attacker to target meeting participants, execute code without user interaction, steal data, activate cameras or microphones, and install malware.
Microsoft patches 398 flaws, including exploited CVE-2026-68820 that lets local attackers reach SYSTEM, plus four unauthenticated 9.8 RCEs.
Iran-linked hackers targeted water systems in New Jersey and Alabama, bringing confirmed attacks to at least 12 states.
Canal+ obtient quatorze ordonnances contre l’IPTV pirate, visant FAI, DNS, VPN et moteurs avant une réforme du blocage sportif automatisé en France