Google releases Chrome 157 with 213 fixes, seven rated critical
Moyen · SecurityWeek ·
Google's Chrome 157 update resolves over 200 issues, including seven critical-severity flaws tied to memory safety and authorization weaknesses.
Archives de la veille cyber
Toutes les alertes cyber notables pour l'éducation et le secteur public (126 articles), y compris les références CVE.
Résumés et correctifs assistés par IA, sources citées.
Talos Tracks VOLTA Operators Using LLMs to Rank Windows Data Theft Targets
Moyen · Security Affairs ·
Cisco Talos reports VOLTA operators using VOLTA and VOLTA-AUTODOXER on Windows to collect personal data, assess victim value, and prioritize targets with LLM assistance.
Attackers Exploit Zero-Day in Zyxel Switches for OS Command Execution
Élevé · SecurityWeek ·
A high-severity Zyxel switch flaw, CVE-2026-107441, is being exploited in the wild to run operating-system commands through specially formed HTTP requests.
Subnet Solutions PowerSYSTEM Center Flaws Let Low-Privilege Users Run SQL
Moyen · CISA Advisories ·
Two 2026 vulnerabilities in Subnet Solutions PowerSYSTEM Center can let an authenticated low-privilege account run unauthorized SQL and reach restricted resources.
Unknown Actors Hit Synology, SAP, Flowise and Trezor in Multi-Vendor Campaign
Élevé · SecurityWeek ·
A multi-vendor wave of attacks has prompted warnings across NAS, SAP, LLM and hardware-wallet products, with ransomware, breaches and seven-figure costs reported.
D-Link warns of multiple zero-days in DGS-3130 Series switches
Élevé · BleepingComputer ·
D-Link is alerting customers to several unpatched zero-day vulnerabilities affecting DGS-3130, managed Gigabit, and stackable switches, and has published mitigation guidance while no CVEs are listed.
Queens Public Library ransomware attack disrupts Wi-Fi and computers at 66 branches
Élevé · The Record ·
A ransomware incident on Wednesday knocked out Wi-Fi and public computers across Queens Public Library's 66 branches, prompting alerts to residents.
Ransomware Outage Hits Queens Public Library Wi-Fi, Checkout and Website
Élevé · The Register — Security ·
On November 5, 2026, an unclaimed ransomware incident knocked out Queens Public Library’s website, wireless access and checkout services across New York City.
Zyxel GS1900 Switches Face Active Zero-Day Exploitation, Firmware Fix Released
Élevé · The Hacker News ·
Binarly reports attackers are actively exploiting an unauthenticated root command flaw in Zyxel GS1900 switch web management, prompting a new firmware release.
Zyxel GS1900 Switch Zero-Day Exploited Against Nearly 1,000 Devices
Élevé · BleepingComputer ·
Unidentified attackers exploited an unknown Zyxel GS1900 flaw to compromise close to 1,000 switches globally and steal credentials and configuration files.
Ransomware Operators Encrypt Files on Unpatched Synology NAS Systems
Élevé · Security Affairs ·
During 2024, ransomware crews have been encrypting data on Synology storage systems whose DiskStation Manager software was not current, and administrators are being told to update now.
Frontline Education breach exposes data of about 1.3 million school staff and students
Élevé · SecurityWeek ·
Attackers used a software weakness at Frontline Education to take personal records belonging to roughly 1.3 million school employees and students, prompting urgent review.
Synology NAS Campaign Targets Unpatched DSM With Encryption, Ransom Demands
Élevé · The Hacker News ·
Attackers in December 2024 targeted Synology NAS systems running outdated DiskStation Manager, using a fixed vulnerability to encrypt data and demand ransom.
Harvard alumni fundraising systems breached, exposing about 851,000 accounts
Élevé · BleepingComputer ·
Unidentified intruders accessed Harvard's alumni-relations and fundraising platforms in November 2025 and took data tied to roughly 851,000 accounts, including about 850,000 distinct email addresses.
Microsoft Fixes Windows Paint Flaw CVE-2026-83844 Tied to RCE Risk
Élevé · The Hacker News ·
Microsoft has released a Store-delivered patch for CVE-2026-83844, a Windows Paint vulnerability that can enable remote code execution, with Windows Update not included in the rollout.
Barracuda Email Security Gateway Flaw CVE-2026-116606 Allows Unauthenticated Root Access
Élevé · The Hacker News ·
watchTowr detailed a chained exploit for CVE-2026-116606 in Barracuda Email Security Gateway that lets an unauthenticated attacker bypass authorization and gain root-level command execution; patches are available.
Barracuda patches two chainable ESG flaws enabling root access
Élevé · Security Affairs ·
Unauthenticated attackers could combine two Barracuda ESG vulnerabilities to bypass authentication, change device configuration, and obtain root; patches are available.
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
Élevé · The Hacker News ·
Two flaws in SonicWall Global Management System, including CVE-2026-109593, allow unauthenticated network attackers to read internal files and change database records on versions up to 9.5.2.
Google fixes Android 14–17 FrameDecoder.cpp bug enabling remote code execution
Élevé · Security Affairs ·
Google has fixed CVE-2026-58868, a heap-based memory overflow in Android's FrameDecoder.cpp that lets outside attackers execute code on versions 14 through 17 without user action.
Google Patches High-Severity Android Flaw Allowing Silent Remote Code Execution
Élevé · The Hacker News ·
Google’s November 2026 Android advisory addresses CVE-2026-58868, a high-severity flaw that lets attackers run code remotely without any victim action on versions 14 through 17.
Barracuda appliances exposed to CVE-2026-116606 auth bypass and root takeover
Élevé · The Hacker News ·
A newly disclosed Barracuda flaw lets attackers skip authorization checks, inject commands, and reach root on vulnerable appliances — and it can be chained with other weaknesses.
Node-RED Flaw CVE-2026-58115 Enables Auth Bypass and Backdoor Deployment
Élevé · Help Net Security ·
VulnCheck has flagged a Node-RED authentication bypass, tracked as CVE-2026-58115, that attackers are using to plant backdoors and spread a Linux bot.
Max-severity Siemens IoT2050 flaw exploited to implant remote backdoors
Critique · The Hacker News ·
Unknown attackers are exploiting a maximum-severity authentication bypass in Siemens SIMATIC IoT2050 Advanced devices, enabling code execution and persistent remote access.
Iris Ohyama: Intruders Hit External Cloud, Exposing 7.7M Records
Élevé · BleepingComputer ·
Unidentified intruders reached an outside cloud environment linked to Iris Plaza, and Iris Ohyama says personal information for about 7.7 million individuals was exposed.