#aws · Cortex

Multiples vulnérabilités dans Google Chrome (04 septembre 2026)

Cette actualité de cybersécurité signale deux vulnérabilités critiques dans Chrome nécessitant une mise à jour immédiate, ainsi que la vente de plus de 153 millions de pièces d'identité sur le dark web. Elle alerte également sur des cyberattaques ciblant les portefeuilles crypto via de fausses fuites de GTA 6 et le détournement de comptes Claude par des volateurs d'informations. Enfin, Malwarebytes met en avant une analyse sur la diversification des plateformes exploitées par les escrocs.

Malwarebytes4 sept.

Critical Elementor Pro flaw exploited to take over WordPress sites

Attackers are exploiting Super Forms and Elementor Pro flaws to upload PHP files and execute code on WordPress sites.

feeds.feedburner.com4 sept.

Plex warns users to patch security vulnerabilities immediately

Plex fixes multiple undisclosed flaws in Media Server 1.43.3 and Desktop 1.115.0, urging users to update.

feeds.feedburner.com4 sept.

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA adds seven exploited flaws affecting SonicWall, Artifactory, Switchvox, Starlette, Kestra, and LiteLLM to its KEV catalog.

feeds.feedburner.com3 sept.

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks

Multiple Vulnerabilities have been discovered in SonicWall SMA1000 Series Appliances, which when chained together could allow for remote code execution, potentially leading to full system compromise. SonicWall Secure Mobile Access (SMA) 1000 Series appliances are enterprise-grade secure access and SSL VPN gateways. Successful exploitation of the vulnerabilities could allow for remote code execution.

cisecurity.org2 sept.

9.5 Million Impacted by Aesto Health Data Breach

The healthcare data company Aesto informed federal regulators this week that more than 9.5 million people had sensitive information leaked during a cyberattack last December.

therecord.media1 sept.

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems.

securityaffairs.com1 sept.

Critical Avada WordPress theme flaw enables zero-click RCE

Critical flaws in WPMU DEV, Avada, TranslatePress, Pods, and GiveWP can enable admin takeover or remote code execution.

feeds.feedburner.com29 août

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

A researcher chained two Unitree G1 flaws to gain root access remotely and showed how a compromised robot could attack others nearby.

securityaffairs.com29 août

Elon Musk’s xAI used child porn to train Grok models, lawsuit says

Une victime accuse xAI d'avoir nourri son intelligence artificielle avec les images de son propre calvaire. Une première judiciaire, qui ne vise plus les garde-fous du chatbot, mais le cœur même du modèle.

journaldugeek.com28 août

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

ServiceNow patched four AI Platform flaws, including three CVSS 10.0 bugs that can enable unauthenticated code execution or data access.

feeds.feedburner.com28 août

Unknown PaperCut NG/MF vulnerability is under active attack

PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes.

bleepingcomputer.com27 août

Nvidia’s AI boom hits $96B 🚀, Salesforce puts CRM inside Claude 🤝, AWS bets on DuckDB 🦆

Nvidia’s AI boom hits $96B 🚀 html <table align="center" border="0"...

TLDR IT27 août

CISA Adds Six Known Exploited Vulnerabilities to Catalog

U.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog.

securityaffairs.com27 août

Base de données : Amazon acquiert DuckLabs, la société derrière DuckDB

Amazon Web Services a signé un accord pour racheter DuckLabs, l'entreprise néerlandaise à l'origine de la base de données DuckDB. L'opération, confirmée mercredi, doit se conclure d'ici septembre sans bouleverser le statut open source du projet.

clubic.com26 août

Hackers target WordPress sites in miniOrange auth bypass attacks

Two miniOrange SAML WordPress plugin auth bypasses were exploited while paid editions never appeared in any vulnerability database.

securityaffairs.com25 août

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children's Online Privacy Protection Act (COPPA).

bleepingcomputer.com24 août

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

A critical flaw (CVSS 9.4) in NASA/JPL's AIT-GUI let anyone send unauthenticated commands to spacecraft instruments.

securityaffairs.com22 août

Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities

Cisco patched nine critical flaws, including six rated CVSS 10.0, found during internal testing. None are known to be exploited.

securityaffairs.com21 août

CISA Adds Two Known Exploited Vulnerabilities to Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform.

bleepingcomputer.com21 août

Citrix urges admins to patch new NetScaler flaws as soon as possible

Des failles de sécurité majeures ont été identifiées dans les dispositifs NetScaler ADC et NetScaler Gateway, exigeant une attention immédiate des administrateurs. Encore une fois.

lemagit.fr20 août

Propagate user authorization context in AI agents with Amazon Bedrock AgentCore

AWS details AI access controls for Amazon Bedrock AgentCore, helping restrict agents to data each user is authorized to access.

helpnetsecurity.com20 août

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA urges federal agencies to immediately patch exploited vulnerabilities in Microsoft, VMware, and Apple products.

securityweek.com19 août

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.

darkreading.com18 août

aws

Multiples vulnérabilités dans Google Chrome (04 septembre 2026)

Critical Elementor Pro flaw exploited to take over WordPress sites

Plex warns users to patch security vulnerabilities immediately

CISA Adds Two Known Exploited Vulnerabilities to Catalog

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks

9.5 Million Impacted by Aesto Health Data Breach

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Critical Avada WordPress theme flaw enables zero-click RCE

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Elon Musk’s xAI used child porn to train Grok models, lawsuit says

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

Unknown PaperCut NG/MF vulnerability is under active attack

Nvidia’s AI boom hits $96B 🚀, Salesforce puts CRM inside Claude 🤝, AWS bets on DuckDB 🦆

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Base de données : Amazon acquiert DuckLabs, la société derrière DuckDB

Hackers target WordPress sites in miniOrange auth bypass attacks

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Citrix urges admins to patch new NetScaler flaws as soon as possible

Propagate user authorization context in AI agents with Amazon Bedrock AgentCore

CISA Adds Four Known Exploited Vulnerabilities to Catalog

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Explorer d'autres thèmes