#security le 2026-10-13

1. 07:11 <Cassandra> The Hacker News | Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies info@thehackernews.com (The Hacker News) · 1h ago · 5 min read Midnight Mimosa ships in some low-cost Android firmware, silently installs apps, and uses payloads for ad fraud and residential proxies. Read full story
2. 08:45 <Sentinel> SecurityWeek | Refrigeration Controller Hack Spoils Food Across European Supermarkets Ionut Arghire · 16m ago · 4 min read Hackers targeted Danfoss refrigeration controllers, setting refrigerators and freezers in hundreds of European supermarkets to defrost. Read full story
3. 09:15 <Cassandra> The Hacker News | GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code info@thehackernews.com (The Hacker News) · 32m ago · 3 min read GitLab fixed CVE-2026-97229 (CVSS 10.0), a CI/CD flaw that could allow unauthenticated code execution under certain conditions. Read full story
4. 09:15 <Cassandra> The Hacker News | Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control info@thehackernews.com (The Hacker News) · 31m ago · 8 min read Progress fixed 31 MarkLogic Server flaws in 11.3.7 and 12.1.0, including two that could give delegated accounts persistent admin control. Read full story
5. 09:15 <Cassandra> The Hacker News | Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers info@thehackernews.com (The Hacker News) · 27m ago · 8 min read Danfoss controllers at hundreds of French supermarkets were compromised, with attackers forcing defrost and causing food losses at some stores. Read full story
6. 10:14 <Sentinel> SecurityWeek | Cyberattack Prompts Ahold Delhaize to Disconnect Systems Ionut Arghire · 37m ago · 4 min read Grocery giant Ahold Delhaize has taken some systems offline in response to a security incident that targeted its network. Read full story
7. 10:45 <Sentinel> SecurityWeek | $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant Ionut Arghire · 9m ago · 4 min read Hackers stole at least $86 million in cryptocurrency using a hardware implant in Ledger signers sold via CryptoBilis. Read full story
8. 11:15 <Sentinel> SecurityWeek | AI Turns Familiar Cyberattacks Into a Race Against Time Kevin Townsend · 15m ago · 6 min read IBM’s Steve Wallin explains why the speed and scale of AI-assisted attacks make proactive security, zero trust, resilience and recovery more urgent than ever. Read full story
9. 11:41 <Cassandra> The Hacker News | Product Walkthrough: Bitdefender AI Visibility and Control info@thehackernews.com (The Hacker News) · 1h ago · 9 min read Bitdefender GravityZone inventories AI assistants, local runtimes, and MCP servers on Windows endpoints and scores configuration risks. Read full story
10. 11:41 <Cassandra> The Hacker News | LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network info@thehackernews.com (The Hacker News) · 32m ago · 3 min read Three LG webOS flaws can be chained to give attackers on the same network root access on two tested TV models; LG has issued a fix. Read full story
11. 11:46 <Sentinel> SecurityWeek | XWorm RAT Evolves Into Surveillance Platform Ionut Arghire · 33m ago · 4 min read Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions. Read full story
12. 12:48 <Sentinel> SecurityWeek | Small AI Models May Soon Be Able to Self-Replicate on IoT Devices, Anthropic Warns Eduard Kovacs · 49m ago · 5 min read Anthropic’s red team says AI worms built on small models may soon be able to spread across poorly secured IoT devices. Read full story
13. 12:49 <Sentinel> Rapid7 | Rapid7 Rapid7 · 1h ago · 3 min read On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0. Under certain conditions, a remote attacker can execute arbi... Read full story
14. 13:19 <Cassandra> The Hacker News | [Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls info@thehackernews.com (The Hacker News) · 1h ago · 3 min read An upcoming webinar explores continuous access controls for compromised identities and the challenges posed by AI-powered attacks. Read full story
15. 14:20 <Cassandra> BleepingComputer | SAP warns of maximum severity OAuth2 SSRF security flaw Sergiu Gatlan · 29m ago · 2 min read SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. Read full story
16. 14:20 <Cassandra> BleepingComputer | The MFA Gaps Attackers are Still Exploiting Specops Software · 19m ago · 4 min read Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn't enough and how organizations can close these authentication gaps. Read full story
17. 14:47 <Cassandra> The Hacker News | Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation info@thehackernews.com (The Hacker News) · 1h ago · 5 min read Norway fined Microsoft-owned Xandr €8.6 million for unlawfully relaying Grindr users' sensitive data through real-time ad bidding. Read full story
18. 15:22 <Cassandra> BleepingComputer | Docker Hub flaw let attackers impersonate users, tamper with images Bill Toulas · 2m ago · 3 min read Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). Read full story
19. 15:52 <Cassandra> BleepingComputer | Ivanti warns of Connect Secure zero-day exploited in attacks Sergiu Gatlan · 7m ago · 2 min read Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. Read full story
20. 16:19 <Sentinel> SecurityWeek | Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach Eduard Kovacs · 18m ago · 5 min read Hackers have stolen source code and employee information after breaching Meta GitHub repositories using stolen credentials. Read full story
21. 16:45 <Cassandra> The Hacker News | GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking info@thehackernews.com (The Hacker News) · 27m ago · 7 min read GitHub now expires unvalidated npm trusted publisher bindings after 48 hours to limit package hijacks through reclaimed repository names. Read full story
22. 16:52 <Cassandra> BleepingComputer | TFG London cyberattack disrupts systems at Hobbs and Whistles retailers Bill Toulas · 8m ago · 3 min read TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. Read full story
23. 17:18 <Sentinel> SecurityWeek | Google Partially Reverses Chrome Bug Bounty Cuts Eduard Kovacs · 18m ago · 4 min read Google is raising bug bounty rewards for some Chrome vulnerabilities, quadrupling base rates for memory safety issues. Read full story
24. 17:18 <Sentinel> SecurityWeek | Adobe Patches 140 Vulnerabilities Across 10 Products Eduard Kovacs · 3m ago · 4 min read Adobe has published 10 new security advisories to inform customers about roughly 140 vulnerabilities found in its products. Read full story
25. 17:18 <Sentinel> Rapid7 | Rapid7 Rapid7 · 10m ago · 3 min read On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands. Read full story
26. 17:53 <Cassandra> BleepingComputer | Windows 11 KB5127648 & KB5126653 cumulative updates released Mayank Parmar · 3m ago · 7 min read Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs and add new features. Read full story
27. 18:23 <Cassandra> BleepingComputer | UK Housing Ombudsman Service investigates 'security incident' Sergiu Gatlan · 3m ago · 2 min read The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. Read full story
28. 19:17 <Cassandra> BleepingComputer | Microsoft: Windows 11 24H2 Home and Pro reached end of support Sergiu Gatlan · 12m ago · 2 min read Microsoft announced today that devices running Windows 11 24H2 Home and Pro editions have reached the end of support and will no longer receive monthly security and non-security preview updates. Read full story
29. 19:17 <Cassandra> The Hacker News | SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft info@thehackernews.com (The Hacker News) · 1h ago · 6 min read Six SAP Cloud SDK for Python releases skip tenant checks in Destination calls, enabling OAuth2 client secret leaks if attackers control tenant names. Read full story
30. 19:17 <Cassandra> The Hacker News | Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far info@thehackernews.com (The Hacker News) · 1h ago · 4 min read An attacker exploited three Ivanti Connect Secure zero-days to run commands as root and steal stored credentials from one appliance. Read full story
31. 19:17 <Cassandra> The Hacker News | Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another info@thehackernews.com (The Hacker News) · 1h ago · 8 min read Docker fixed a critical Hub account conversion flaw that let transferred tokens push images as other users; it found no evidence of exploitation. Read full story
32. 19:17 <Cassandra> The Hacker News | Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets info@thehackernews.com (The Hacker News) · 57m ago · 5 min read Anthropic warns small AI models could form IoT botnets; GLM-5.2 propagated Llama3.1-8B to eight nodes in four of five tests. Read full story
33. 19:18 <Sentinel> SecurityWeek | Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN Eduard Kovacs · 35m ago · 4 min read Ivanti has patched CVE-2026-104935, a Connect Secure (ICS) zero-day exploit that allows unauthenticated remote code execution. Read full story
34. 19:47 <Cassandra> BleepingComputer | Microsoft releases Windows 10 KB5126657 extended security update Lawrence Abrams · 1m ago · 4 min read Microsoft released the Windows 10 KB5126657 extended security update, which includes this month's record-breaking October 2026 Patch Tuesday fixes and a few bug fixes and changes. Read full story
35. 20:17 <Cassandra> BleepingComputer | Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days Lawrence Abrams · 21m ago · 119 min read Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. Read full story
36. 21:18 <Cassandra> BleepingComputer | Anthropic warns self-replicating AI could spread to your smart devices Bill Toulas · 1m ago · 4 min read Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers. Read full story
37. 21:48 <Cassandra> BleepingComputer | Ghostscript flaw lets hackers hijack servers via PDF uploads Bill Toulas · 14m ago · 4 min read A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. Read full story
38. 22:49 <Cassandra> BleepingComputer | OpenAI engineer arrested for allegedly planting spy device in office Lawrence Abrams · 16m ago · 4 min read A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to secretly record sensitive conversations. Read full story
39. 23:16 <Sentinel> Rapid7 Cybersecurity Blog | Patch Tuesday - October 2026 Adam Barnett · 1h ago · 4 min read Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerabilit... Read full story
40. 23:21 <Sentinel> SecurityWeek | Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say Associated Press · 14m ago · 5 min read An engineer at OpenAI has been charged with secretly installing a recording device inside a conference room. Read full story
41. 23:54 <Cassandra> Krebs on Security | Microsoft Patches More Than 1,400 Security Flaws BrianKrebs · 29m ago · 2 min read Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Read full story

Tous les jours · Rejoindre #security