Cybersecurity News

Barracuda email gateways: two chained flaws give root access and are now exploited

Barracuda says attackers are exploiting two flaws that, combined, give root access to its Email Security Gateway appliances. One of them also affects its WAF, load balancers, arch…

BarracudaEmailWAF

This week’s barometer: compliance, flaws and speed, sector by sector

This week our panel of 4,719 websites averages 73/100 on compliance, 70 on vulnerability and 66 on speed. Banking and tech lead; the public sector and non-profits trail. Here is w…

barometerfrancecompliance

Cisco Secure Email Gateway: a single booby-trapped email gives attackers root, flaw already exploited

Cisco has fixed CVE-2026-76519, a critical flaw in its Secure Email Gateway that lets anyone send an email with a crafted attachment to write files and run commands as root on the…

CiscoEmail security

Vacaf, France's family holiday-aid platform, hit by a data breach claimed by a hacker

Vacaf, the holiday-aid service of France's family-benefit funds, was hit by a cyberattack. The attacker claims about 1.2 million files — names, children, benefit details — a figur…

Vacafdata breachphishing

France’s cybersecurity agency hit through Metabase: the “harmless” internal tools nobody watches

ANSSI, the French national cybersecurity agency, has confirmed that 118 accounts of its innovation lab were compromised through a critical zero-day in Metabase, a self-hosted dash…

Metabase

Tax data stolen from France’s DGFiP: what ANSSI’s incident report teaches every company

ANSSI has published its investigation into this summer’s data thefts at the French tax administration. Its conclusion: no sophisticated attack, but stolen passwords, missing multi…