Personnalisez votre veille

Inscrivez-vous gratuitement.

Espace publicitaire · 728×90

Brevo Breach Exposes Customer Websites to ClickFix Malware

https://www.itsecuritynews.info • Publié le 18 septembre 2026

Email marketing and customer relationship management platform Brevo, formerly known as Sendinblue, suffered a supply chain attack in which malicious code…

The post Brevo Breach Exposes Customer Websites to ClickFix Malware appeared first on IT Security News.

Espace publicitaire · 300×250

Unauthenticated RCE Bug Fixed in SolarWinds Access Rights Manager

SolarWinds has issued an urgent security advisory for a high-severity vulnerability in its Access Rights Manager (ARM) product, tracked as CVE-2026-28326.… Read more → The post Unauthenticated RCE Bug Fixed in SolarWinds Access…

itsecuritynews.info•

🇬🇧 → 🇫🇷

Gyazo Server Vulnerability Targeted to Steal Millions of User Records

Gyazo, an image-sharing platform, has confirmed a breach after attackers exploited a vulnerability in its upload server, gaining unauthorized access to… Read more → The post Gyazo Server Vulnerability Targeted to Steal Millions of…

itsecuritynews.info•

🇬🇧 → 🇫🇷

Plugin4Shell: The Zero-Click Flaw That Broke Every Prominent AI Coding Agent at Once

The security promise was simple. A plugin marketplace reviews a piece of code, locks it to a specific, verified version, and every AI coding agent that… Read more → The post Plugin4Shell: The Zero-Click Flaw That Broke Every…

itsecuritynews.info•

🇬🇧 → 🇫🇷

Microsoft Fixes Critical Azure AI Flaw Rated CVSS 10.0

Microsoft has patched a maximum-severity vulnerability in Azure AI Foundry that could allow unauthorized attackers to escalate their privileges over a… Read more → The post Microsoft Fixes Critical Azure AI Flaw Rated CVSS 10.0…

itsecuritynews.info•

🇬🇧 → 🇫🇷

WeaselBiscuit Stealer Found in 13 Malicious npm Packages

Researchers have discovered 13 npm packages carrying a previously undocumented JavaScript information stealer called WeaselBiscuit, introducing yet… Read more → The post WeaselBiscuit Stealer Found in 13 Malicious npm Packages…

itsecuritynews.info•

🇬🇧 → 🇫🇷

RatHat Android Malware Uses AI to Control Infected Devices

A new Android backdoor called RatHat utilizes an AI-powered system to remotely navigate compromised devices, while also stealing sensitive information and… Read more → The post RatHat Android Malware Uses AI to Control Infected…

itsecuritynews.info•

🇬🇧 → 🇫🇷

The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI

Read the full stories at CISOSeries.com . This week's Department of Know is hosted by Sarah Lane, with guests Jason Thomas , senior director of technology… Read more → The post The Department of Know: Passkeys phished, Cisco hits…

itsecuritynews.info•

🇬🇧 → 🇫🇷

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a… Read more → The post Public Exploits Released for Four Linux Kernel Flaws…

itsecuritynews.info•

Personnalisez votre veille

Articles similaires

Unauthenticated RCE Bug Fixed in SolarWinds Access Rights Manager

Gyazo Server Vulnerability Targeted to Steal Millions of User Records

Plugin4Shell: The Zero-Click Flaw That Broke Every Prominent AI Coding Agent at Once

Microsoft Fixes Critical Azure AI Flaw Rated CVSS 10.0

WeaselBiscuit Stealer Found in 13 Malicious npm Packages

RatHat Android Malware Uses AI to Control Infected Devices

The Department of Know: Passkeys phished, Cisco hits root, nuclear red lines for AI

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root