Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Barracuda ESG — CVE-2026-116606 · CVE-2026-111560

Vulnerability Critical

Barracuda email gateways: two chained flaws give root access and are now exploited

Barracuda says attackers are exploiting two flaws that, combined, give root access to its Email Security Gateway appliances. One of them also affects its WAF, load balancers, arch…

BarracudaEmailWAF

Baromètre sécurité — Semaine 42 · 4 719 sites

This week’s barometer: compliance, flaws and speed, sector by sector

This week our panel of 4,719 websites averages 73/100 on compliance, 70 on vulnerability and 66 on speed. Banking and tech lead; the public sector and non-profits trail. Here is w…

barometerfrancecompliance

Cisco Secure Email Gateway — CVE-2026-76519

Vulnerability Critical

Cisco Secure Email Gateway: a single booby-trapped email gives attackers root, flaw already exploited

Cisco has fixed CVE-2026-76519, a critical flaw in its Secure Email Gateway that lets anyone send an email with a crafted attachment to write files and run commands as root on the…

CiscoEmail security

Vacaf · CAF

Vacaf, France's family holiday-aid platform, hit by a data breach claimed by a hacker

Vacaf, the holiday-aid service of France's family-benefit funds, was hit by a cyberattack. The attacker claims about 1.2 million files — names, children, benefit details — a figur…

Vacafdata breachphishing

Metabase — ANSSI · DINUM

France’s cybersecurity agency hit through Metabase: the “harmless” internal tools nobody watches

ANSSI, the French national cybersecurity agency, has confirmed that 118 accounts of its innovation lab were compromised through a critical zero-day in Metabase, a self-hosted dash…

Metabase

DGFiP · ANSSI — impots.gouv.fr · Zerobytes

Tax data stolen from France’s DGFiP: what ANSSI’s incident report teaches every company

ANSSI has published its investigation into this summer’s data thefts at the French tax administration. Its conclusion: no sophisticated attack, but stolen passwords, missing multi…

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 39: chromium 2024-decb7e94a1 Security Advisory Updates

update to 124.0.6367.78 * Critical CVE-2024-4058: Type Confusion in ANGLE * High CVE-2024-4059: Out of bounds read in V8 API * High CVE-2024-4060: Use after fr…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Mageia 2024-0151: thunderbird Security Advisory Updates

CVE-2024-3852: GetBoundName in the JIT returned the wrong object CVE-2024-3854: Out-of-bounds-read after mis-optimized switch statement CVE-2024-3857: Incorrec…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:1450-1 low: java-1_8_0-openjdk Security Advisory Updates

* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:1451-1 low: java-1_8_0-openjdk Security Advisory Updates

* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:1452-1 low: java-11-openjdk Security Advisory Updates

* bsc#1213470 * bsc#1222979 * bsc#1222983 * bsc#1222984 * bsc#1222986

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:1453-1 important: frr Security Advisory Updates

* bsc#1220548 * bsc#1222518 Cross-References: * CVE-2024-27913

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:1454-1 important: the Linux Kernel Security Advisory Updates

* bsc#1186060 * bsc#1192145 * bsc#1194516 * bsc#1208995 * bsc#1209635

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:1447-1 moderate: openCryptoki Security Advisory Updates

* bsc#1219217 * jsc#PED-3360 * jsc#PED-3361 Cross-References:

The Hacker News

The Hacker News Breaches & leaks

10 Critical Endpoint Security Tips You Should Know

In today's digital world, where connectivity is rules all, endpoints serve as the gateway to a business’s digital kingdom. And because of this, endpoints are o…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:1438-1 important: qemu Security Advisory Updates

* bsc#1213269 * bsc#1218889 * bsc#1222843 * bsc#1222845

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:1439-1 moderate: python-idna Security Advisory Updates

* bsc#1222842 Cross-References: * CVE-2024-3651

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:1440-1 important: python-gunicorn Security Advisory Updates

* bsc#1222950 Cross-References: * CVE-2024-1135

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:1444-1 moderate: php7 Security Advisory Updates

* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:1445-1 moderate: php74 Security Advisory Updates

* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:1446-1 moderate: php8 Security Advisory Updates

* bsc#1222857 * bsc#1222858 Cross-References: * CVE-2024-2756

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Mageia 2024-0148: webkit2 Security Advisory Updates

Due to issues in our build system this package is very outdated, now that the issues are fixed we are publishing the current upstream version. Lot of CVEs are …

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 38: xen 2024-a676697123 Security Advisory Updates

x86: Native Branch History Injection [XSA-456, CVE-2024-2201] update to xen 4.17.4, remove patches now included upstream rebase xen.gcc12.fixes.patch x86 HVM h…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Ubuntu 6753-1: CryptoJS Security Advisory Updates

CryptoJS could be made to expose sensitive information.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS: DLA-3794-1: putty Security Advisory Updates

Putty, a Telnet/SSH client for X, was vulnerable. CVE-2019-17069

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:1437-1 important: MozillaThunderbird Security Advisory Updates

* bsc#1222535 Cross-References: * CVE-2024-2609 * CVE-2024-3302

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Debian: DSA-5674-1: pdns-recursor Security Advisory Updates

It was discovered that PDNS Recursor, a resolving name server, was susceptible to denial of service if recursive forwarding is configured. For the stable distr…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: 2024:0113-1 important: dcmtk Advisory Security Update

An update that solves one vulnerability and has one errata is now available.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Ubuntu 6751-1: Zabbix Security Advisory Updates

Zabbix could allow reflected cross-site scripting (XSS) attacks.

LinuxSecurity - Security Articles

LinuxSecurity - Security Articles Vulnerabilities

Native Spectre v2 Exploit Uncovered: Implications & Analysis for Linux Security Practitioners

The recently uncovered "Native Branch History Injection (BHI)" exploit against the Linux kernel marks a significant milestone in the ongoing battle against Spe…