Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Barracuda ESG — CVE-2026-116606 · CVE-2026-111560

Vulnerability Critical

Barracuda email gateways: two chained flaws give root access and are now exploited

Barracuda says attackers are exploiting two flaws that, combined, give root access to its Email Security Gateway appliances. One of them also affects its WAF, load balancers, arch…

BarracudaEmailWAF

Baromètre sécurité — Semaine 42 · 4 719 sites

This week’s barometer: compliance, flaws and speed, sector by sector

This week our panel of 4,719 websites averages 73/100 on compliance, 70 on vulnerability and 66 on speed. Banking and tech lead; the public sector and non-profits trail. Here is w…

barometerfrancecompliance

Cisco Secure Email Gateway — CVE-2026-76519

Vulnerability Critical

Cisco Secure Email Gateway: a single booby-trapped email gives attackers root, flaw already exploited

Cisco has fixed CVE-2026-76519, a critical flaw in its Secure Email Gateway that lets anyone send an email with a crafted attachment to write files and run commands as root on the…

CiscoEmail security

Vacaf · CAF

Vacaf, France's family holiday-aid platform, hit by a data breach claimed by a hacker

Vacaf, the holiday-aid service of France's family-benefit funds, was hit by a cyberattack. The attacker claims about 1.2 million files — names, children, benefit details — a figur…

Vacafdata breachphishing

Metabase — ANSSI · DINUM

France’s cybersecurity agency hit through Metabase: the “harmless” internal tools nobody watches

ANSSI, the French national cybersecurity agency, has confirmed that 118 accounts of its innovation lab were compromised through a critical zero-day in Metabase, a self-hosted dash…

Metabase

DGFiP · ANSSI — impots.gouv.fr · Zerobytes

Tax data stolen from France’s DGFiP: what ANSSI’s incident report teaches every company

ANSSI has published its investigation into this summer’s data thefts at the French tax administration. Its conclusion: no sophisticated attack, but stolen passwords, missing multi…

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux buildah Critical Denial of Service Resolution RLSA-2026-29195

Important: buildah security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux version 10 advisory RLSA-2026-29980 shows Golang input flaw

Moderate: golang security, bug fix, and enhancement update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux python27 Medium-Level CPU DoS RLSA-2023-2860

Moderate: python27:2.7 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 9 Python Wheel Moderate Denial of Service Risk RLSA-2023-6712

Moderate: python-wheel security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 libfastjson Moderate Integer Overflow CVE-2020-12762

Moderate: libfastjson security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux libpq Insufficient Memory Protection Patch RLSA-2023-7016

Low: libpq security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 RLSA-2023-2873 gcc-toolset-12-binutils Moderate Crash Issue

Moderate: gcc-toolset-12-binutils security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Rocky Linux 8 has a new advisory RLSA-2023-3067 for Autotrace issue

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux Lynx Moderate Disclosure Risk RLSA-2022-2129 CVE-2021-38165

Moderate: lynx security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 RLSA-2023-2589 Identified Moderate Heap Buffer Overflow Issue

Moderate: autotrace security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 collectd Important Patch for CVE-2025-8671 and CVE-2026-34475

Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka CVE-2026-34475…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Fedora 44 Python-Django-Haystack Faces Critical Deserialization Risk

Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…

Linux GitHub Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 ruby Important Command Injection Issues RLSA-2026-33514

Important: ruby:2.5 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux RLSA-2026-33514 ruby Important Command Injection CVE-2026-42258

Important: ruby:2.5 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 Ruby Critical IMAP Command Injection Alerts RLSA-2026-33514

Important: ruby:2.5 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux ruby Important Command Injection Threat RLSA-2026-33514

Important: ruby:2.5 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux RLSA-2026-33514 Ruby Important IMAP Command Injection

Important: ruby:2.5 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 RLSA-2026-33514 Ruby Important IMAP Attack Fix

Important: ruby:2.5 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 Ruby Command Injection Denial of Service RLSA-2026-33515

Important: ruby:3.3 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux Ruby-3.3 Important Net--IMAP DoS CI Issues RLSA-2026-33515

Important: ruby:3.3 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 ruby Important Net--IMAP Issues RLSA-2026-33515

Important: ruby:3.3 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Rocky Linux Ruby Important Denial Of Service Advisory RLSA-2026-33515

Important: ruby:3.3 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux RLSA-2026-33515 Ruby Important Denial of Service Threats

Important: ruby:3.3 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Rocky Linux 8 RLSA-2026-33515 Ruby Important IMAP Issues

Important: ruby:3.3 security update