aws

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.

darkreading.com12 août

Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws

Adobe patches seven ColdFusion, Commerce, and Campaign Classic flaws that could enable code execution, privilege escalation, or denial-of-service.

feeds.feedburner.com12 août

August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day

Microsoft patches 398 flaws, including exploited CVE-2026-68820 that lets local attackers reach SYSTEM, plus four unauthenticated 9.8 RCEs.

feeds.feedburner.com11 août

Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC

Cisco warns that 7 ClamAV flaws affect Secure Endpoint Connector products, with two having public PoCs that could enable remote DoS attacks

securityaffairs.com11 août

Hackers breach TrueConf to trojanize client installers with backdoors

Head Mare exploits two TrueConf flaws to gain SYSTEM privileges and replace client installers with PhantomCore malware across Russian companies.

feeds.feedburner.com10 août

Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities

Cisco patches 12 Catalyst SD-WAN and IOS XE flaws, including three 9.9-rated bugs and a 9.8 command injection issue.

feeds.feedburner.com6 août

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

CVE-2026-41679, a critical vulnerability in Paperclip, allowed attackers to gain administrative privileges and code execution capabilities.

securityweek.com6 août

Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privilege levels to trigger automation that could compromise the supply chain.

darkreading.com6 août

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM Langflow, N-central, and Apache Tomcat, all actively exploited.

bleepingcomputer.com5 août

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

Fifteen TP-Link Omada vulnerabilities let attackers hijack devices with guessed serial numbers, default credentials and a hard-coded key.

helpnetsecurity.com5 août

Apple is getting this wrong

The clapback isn’t a blog this time.

theverge.com4 août

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks

INC Ransomware is suspected of chaining CVE-2026-15409 and CVE-2026-15410 to steal credentials, TOTP seeds, and reach internal networks.

feeds.feedburner.com3 août

Bring Google AI directly to your AWS and Azure data

Historically, running advanced analytics or training ML models across clouds meant a cross-cloud tax: high egress fees, network latency, and fragile ETL pipelines. The borderless Lakehouse solves this with Cross-Cloud Interconnects. These private, dedicated links deliver consistent bandwidth and lower latency than the public internet, at a fraction of the cost of traditional cross-cloud connections. The borderless Lakehouse supports zero variable egress costs when accessing your data from AWS1.

The AWS IAM attack path problem

Most AWS security tooling asks a configuration question: Is this policy overly permissive? Does this role violate best practice? Those are undoubtedly useful questions, but they are also incomplete for understanding real compromise risk. The question an attacker asks is different. An attacker does not care whether a policy is “overly permissive.” They care whether the one they compromised, via an exposed EC2 instance, lambda function, or CI/CD compromise, can reach a sensitive resource. Can they

AWS attack path management features supported at release

At launch, the AWS collector models the AWS services where privilege escalation and lateral movement are used most frequently on our own AWS engagements: IAM – Users, groups, roles, policies, and federated identity providers. AWS Organizations – The full account hierarchy, service control policies and resource control policies that govern permissions across the organization STS – Role assumption and federation including ‘AssumeRole’, SAML, and web identity federation S3 – Buckets, bucke

AWS attack path management: why now

AWS IAM attack paths let attackers chain roles and permissions to admin. BloodHound Enterprise maps them as paths defenders can sever.

The Shawshank Redemption (1994)

One of the all-time classics in the “wronged person serving time” genre, The Shawshank Redemption is simultaneously an inspiring story of friendship, a stirring tale of surviving in the face of horrific loss and injustice, and one of the greatest twisty stories of all time. Its steady pacing and careful characterization let you really get to know the wrongly convicted man at its core, and the ending lets you appreciate how resolute and determined he was while experiencing the worst horrors a hum

Critical wp2shell WordPress flaws exploited to install webshells

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain - Icex0/wp2shell-poc

Two critical flaws in Oracle Database Server

Oracle a corrigé deux vulnérabilités critiques dans son serveur de base de données : CVE-2026-61211 (score CVSS 9.9) dans le package DBMS_CLOUD permettant à un attaquant peu privilégié de compromettre le système, et CVE-2026-47040 affectant Connection Manager, exploitable à distance sans authentification. Ces failles impactent les versions 19.3 à 19.31 et 23.4.0 à 23.26.2, avec une fenêtre critique de 72 heures pour les environnements exposés.

DNS interne Cloudflare, Nouveaux carnets de notes Relic, AWS OpenTelemetry

TLDR Data22 juil.

Reconnaissance at scale: How AI redraws the attacker’s map

Patch what's patchable, mitigate what isn't, and govern every Windows, macOS, and Linux endpoint with Automox (at the speed of AI).