Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 24, 2026.
Become a free member and compose your press board
331–345 of 1067
Cisco Confirms Active Exploitation of Two Catalyst SD-WAN Manager Vulnerabilities
Cisco warns CVE-2026-20122 and CVE-2026-20128 in Catalyst SD-WAN Manager are actively exploited; patches released across multiple software versions.
Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor
Iran-linked MuddyWater hackers breached U.S. networks with new Dindoor malware as regional cyber attacks escalate amid Middle East conflict.
WordPress – CVE-2026-1492 : une faille dans un plugin permet de devenir admin très facilement
Une faille de sécurité critique affecte l'extension User Registration & Membership. Elle permet à un attaquant de pirater complètement le site WordPress.
Authorities from 14 countries shut down major cybercrime forum LeakBase
The marketplace was one of the world’s largest hubs for cybercrime with more than 142,000 members. Officials identified and arrested multiple suspects after seizing the site’s database.
Anthropic AI ultimatums and IP theft: The unspoken risk
Two recent high-profile events concerning Anthropic's Claude AI underscore a little-discussed risk at the heart of the enterprise's rush to capitalize on leading AI capabilities. The first incident involved a China-based extraction campaign against Anthropic's intellectual property.
Russia-linked APT28 exploited MSHTML zero-day CVE-2026-21513 before patch
Russia-linked APT28 reportedly exploited MSHTML zero-day CVE-2026-21513 before Microsoft patched it, a high-severity bypass flaw. Akamai reports that Russia-linked APT28 may have exploited CVE-2026-21513 CVSS score of 8.8), a high-severity MSHTML vulnerability (CVSS 8.8), before Microsoft patched it in February 2026.
APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday
APT28 exploited CVE-2026-21513, an MSHTML zero-day (CVSS 8.8), using malicious LNK files to bypass security controls and execute code.
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 86
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Technical Deep Dive: The Monero Mining Campaign Operation Olalampo: Inside MuddyWater’s Latest Campaign VShell and SparkRAT Observed in Exploitation of BeyondTrust…
‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA – Krebs on Security
‘Starkiller’ Phishing Service Proxies Real Login Pages, MFA – Krebs on Security
Pourquoi les mots de passe générés par IA deviennent un vrai problème
Une énième analyse met en doute la robustesse des mots de passe que génèrent les LLM et en aborde les conséquences sous le prisme des assistants de codage.
PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence
PromptSpy Android malware abuses Google Gemini to analyze screens, automate persistence, block removal, and enable VNC-based remote device control.
Sort