CISA Adds Two Known Exploited Vulnerabilities to Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical.
← Thèmes
📰
aws
127 articles
Une IA a piraté une entreprise toute seule, cette fois en Espagne, et c'est carrément la CNIL loc...
In security research, Claude Opus 5 helped chain forum and login flaws to take over OpenAI staff accounts and reach an internal repository.
AWS incapable de récupérer certaines données endommagées pendant la guerre Iran-USA - zdnet.fr
Amazon Web Services (AWS), la branche cloud d’Amazon, confirme la perte irrémédiable de données clients stockées dans ses data centers visés par des frappes iraniennes. Une première mondiale : jamais un conflit armé n’avait détruit aussi durablement des données hébergées dans le cloud.
Iran strikes on Amazon data centers caused permanent loss of customer data
The AWS Middle East outage caused by Iranian drone strikes has resulted in permanent customer data loss in Bahrain and the UAE.
ISC Patches 14 Vulnerabilities in BIND 9 Security Update
Fresh BIND 9 updates resolve 14 high- and medium-severity vulnerabilities leading to cache poisoning and DoS conditions.
Hackers target exposed Vite dev servers to steal AWS, Azure secrets
Attackers exploit a Vite flaw in exposed dev servers to extract cloud credentials, configuration files, and infrastructure state.
CISA Adds Three Known Exploited Vulnerabilities to Catalog
U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog.
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
Threat actors have been chaining three JFrog Artifactory vulnerabilities to gain admin privileges and deploy backdoors.
GitLab urges users to patch max severity path traversal flaw
CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
Two critical Check Point VPN flaws could enable remote code execution. Patch now and restrict VPN access before exploitation begins.
Ivanti Patches Critical Flaws Across Enterprise Security Products
Multiple vulnerabilities have been discovered in Ivanti products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the system. Ivanti Endpoint Manager Mobile (Ivanti EPMM) is a mobile management software engine that enables mobile device, application, and content management. Ivanti Neurons is a cloud-based automation platform that unifies IT operations and security management into a single system of record. Ivanti Sentry is an in-line gateway that manages, encrypts, and secures traffic between the mobile device and back-end enterprise systems. Depending on the privileges associated with the system, an attacker could then install programs; view, change, or delete data. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
Qualcomm et Amazon veulent déjà réinventer les data centers de l'intelligence artificielle
Ça bouge toujours dans le monde de l’IA et des datacenters. Cette semaine, Arm annonce son Neoverse CSS N4, avec jusqu’à 128 cœurs CPU, du PCIe 7 et de…
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
Selon un rapport de la société de cybersécurité GreyNoise, des agents IA ont piraté des centaines d'organisations en quelques heures, parfois sans même respecter les consignes de leur opérateur humain. PaperCut, voilà la cible sur laquelle se sont concentrés les attaquants. Ce logiciel de gestion d'impression très
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA adds three exploited Cisco, Citrix, and Fortinet flaws to KEV, requiring federal agencies to patch by September 12, 2026.
CISA Adds Four Known Exploited Vulnerabilities to Catalog
U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog.
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
Three threat groups are exploiting two Cisco FMC flaws to steal credentials, gain root access and deploy Qilin ransomware.
Multiple Chinese hacking groups seen using identical Chrome zero-day exploit
Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
The settlement concludes a legal fight that dates to April 2024, when UK users sued for the alleged violations of their country’s privacy laws.
After SAP settlement, Oracle draws EU antitrust attention over licensing practices
La Commission européenne examine les pratiques de licences logicielles d’Oracle, avant une éventuelle enquête formelle. Aucune procédure n’est ouverte à ce stade, mais Bruxelles a déjà consulté des tiers sur le sujet.
Microsoft Plugs Nearly 1,000 Security Holes
On September 2026 Patch Tuesday Microsoft delivered a record-breaking number of patches, including for two bugs exploited as zero-days.
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
Microsoft n’a jamais corrigé autant de vulnérabilités en un seul Patch Tuesday. Derrière ce volume hors norme, des enjeux de sécurité toujours plus pressants, alors que l’IA accélère la course entre découverte et exploitation des failles.
2026 Cloud Security Index: How Risk Differs Across AWS, Azure, and Google Cloud
Intruder analyzed 3,000 organizations, finding exposed services in 76% of AWS accounts versus 8% on Google Cloud.
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
MikroTik has patched six RouterOS vulnerabilities, including flaws dubbed MikroTrick and chained in the wild to take over devices.
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
Attackers are exploiting 2 new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the US and EU