CORTEXCheck Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
Two critical Check Point VPN flaws could enable remote code execution. Patch now and restrict VPN access before exploitation begins.
Menaces, vulnérabilités, incidents et bonnes pratiques en sécurité informatique.
1120 articles
S’abonner (RSS)Two critical Check Point VPN flaws could enable remote code execution. Patch now and restrict VPN access before exploitation begins.
VPN and cybersecurity firm Surfshark has disclosed a data breach impacting limited internal engineering material stored on a test server.
Multiple vulnerabilities have been discovered in Ivanti products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the system. Ivanti Endpoint Manager Mobile (Ivanti EPMM) is a mobile management software engine that enables mobile device, application, and content management. Ivanti Neurons is a cloud-based automation platform that unifies IT operations and security management into a single system of record. Ivanti Sentry is an in-line gateway that manages, encrypts, and secures traffic between the mobile device and back-end enterprise systems. Depending on the privileges associated with the system, an attacker could then install programs; view, change, or delete data. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.
Amazon appointed cybersecurity veteran Kevin Mandia to its board of directors, strengthening the technology giant’s security expertise at the board level.
OpenAI n'a pas fini avec les mathématiques. À peine sortie d'une percée très contestée sur les équations de Navier-Stokes, l'entreprise dit déjà plancher s
L'Union européenne passe enfin au banc d'essai les "meilleurs modèles d'IA" américains, réputés comme "dangereux". Toutefois, l'institution souhaite améliorer sa propre sécurité, elle emploie alors les grands moyens.
Starting Friday, European organizations will have just 24 hours to notify the EU government any time they discover serious product security incidents.
On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVS...
Chrome 153 débarque avec une mise à jour de sécurité particulièrement chargée. Google y corrige 230 vulnérabilités, parmi lesquelles une nouvelle faille zero-day dans V8, déjà exploitée dans des attaques.
IDScan.net confirmed a data breach in which hackers may have accessed customer data stored on its cloud platform.
Selon un rapport de la société de cybersécurité GreyNoise, des agents IA ont piraté des centaines d'organisations en quelques heures, parfois sans même respecter les consignes de leur opérateur humain. PaperCut, voilà la cible sur laquelle se sont concentrés les attaquants. Ce logiciel de gestion d'impression très
Google Play Early Access is being abused to push thousands of deceptive apps, including fake casino and reward apps promoted via social media.
Les possesseurs de Switch 1ère génération devraient installer la version 23.0.0 du firmware de leur console séance tenante. Cette mise à jour corrige en…
Microsoft venait de corriger une faille de sécurité critique, mais un chercheur en cybersécurité a découvert qu’elle présente toujours un danger. Les tensions entre ce chercheur anonyme et la firme de Redmond ne risquent pas de s'apaiser.
Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model for malicious purposes.
AdaptHealth says the personal, health, and insurance information of over 4.1 million people was stolen from its systems.
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.
A vulnerability has been discovered in SAP Extended Passport (EPP) Processing that could allow for remote code execution. SAP Extended Passport (EPP) Processing is a core system data structure and tracing mechanism within SAP Kernel code used to track, log, and monitor end-to-end communication across distributed SAP and non-SAP landscapes. It is created automatically when a new user session opens and travels via communication protocols like RFC (Remote Function Call) and HTTP from the client to the server. Onapsis explained that, because EPP processing is shared kernel code, the vulnerability is reachable from the SAP GUI layer every end user connects to, and from the RFC layer that links SAP systems to one another. The bug is remotely exploitable without authentication and exists by default in a range of SAP components. Successful exploitation of this vulnerability may allow a remote attacker to run arbitrary operating system commands on the SAP host with SAP administrative privileges, leading to a total compromise of the underlying SAP business data and processes.
Perplexity uses Astra to write communications, change software, and monitor production systems, and checks in much less frequently than with earlier models.
Three threat groups are exploiting two Cisco FMC flaws to steal credentials, gain root access and deploy Qilin ransomware.
Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.
On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) proces...
Background informationDate of final decision: 3 September 2026National caseController: Hôpital Privé de la LoireLegal Reference: Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the data subject), Decision: Administrative fineKeywords: Cybersecurity, Personal data breaches, Health and researchSummary of the Decision