Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Baromètre sécurité — Semaine 42 · 4 719 sites

This week’s barometer: compliance, flaws and speed, sector by sector

This week our panel of 4,719 websites averages 73/100 on compliance, 70 on vulnerability and 66 on speed. Banking and tech lead; the public sector and non-profits trail. Here is w…

barometerfrancecompliance

Cisco Secure Email Gateway — CVE-2026-76519

Vulnerability Critical

Cisco Secure Email Gateway: a single booby-trapped email gives attackers root, flaw already exploited

Cisco has fixed CVE-2026-76519, a critical flaw in its Secure Email Gateway that lets anyone send an email with a crafted attachment to write files and run commands as root on the…

CiscoEmail security

Vacaf · CAF

Vacaf, France's family holiday-aid platform, hit by a data breach claimed by a hacker

Vacaf, the holiday-aid service of France's family-benefit funds, was hit by a cyberattack. The attacker claims about 1.2 million files — names, children, benefit details — a figur…

Vacafdata breachphishing

Metabase — ANSSI · DINUM

France’s cybersecurity agency hit through Metabase: the “harmless” internal tools nobody watches

ANSSI, the French national cybersecurity agency, has confirmed that 118 accounts of its innovation lab were compromised through a critical zero-day in Metabase, a self-hosted dash…

Metabase

DGFiP · ANSSI — impots.gouv.fr · Zerobytes

Tax data stolen from France’s DGFiP: what ANSSI’s incident report teaches every company

ANSSI has published its investigation into this summer’s data thefts at the French tax administration. Its conclusion: no sophisticated attack, but stolen passwords, missing multi…

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Mageia 2024-0312: gtk+2.0 and gtk+3.0 Security Advisory Updates

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working dire…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Mageia 2024-0311: glib2.0 Security Advisory Updates

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Ubuntu 7034-1: ca-certificates updateSecurity Advisory Updates

The CA certificates in the ca-certificates package were updated.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Ubuntu 7032-1: Tomcat Security Advisory Updates

Tomcat could allow unintended access to network services.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:3432-1 moderate: xen Security Advisory Updates

* bsc#1230366 Cross-References: * CVE-2024-45817

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:3433-1 important: quagga Security Advisory Updates

* bsc#1202023 * bsc#1229438 * bsc#1230866 Cross-References:

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Gentoo: GLSA-202409-25: Xpdf: Security Advisory Updates

Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service.

The Hacker News

The Hacker News Vulnerabilities

CISA Flags Critical Ivanti vTM Vulnerability Amid Active Exploitation Concerns

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting Ivanti Virtual Traffic Manager (vTM) to it…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:3426-1 important: quagga Security Advisory Updates

* bsc#1069468 * bsc#1079798 * bsc#1079799 * bsc#1079800 * bsc#1079801

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:3427-1 important: python311 Security Advisory Updates

* bsc#1229596 * bsc#1229704 * bsc#1230227 Cross-References:

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:3428-1 moderate: apr Security Advisory Updates

* bsc#1229783 Cross-References: * CVE-2023-49582

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:3429-1 moderate: apr Security Advisory Updates

* bsc#1229783 Cross-References: * CVE-2023-49582

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:3430-1 important: python36 Security Advisory Updates

* bsc#1230227 Cross-References: * CVE-2024-6232

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:3425-1 important: the Linux Kernel (Live Patch 18 for SLE 15 SP4) Security Advisory Updates

* bsc#1223521 * bsc#1225099 * bsc#1225313 Cross-References:

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:3418-1 important: python311 Security Advisory Updates

* bsc#1229596 * bsc#1229704 * bsc#1230227 Cross-References:

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:3421-1 moderate: xen Security Advisory Updates

* bsc#1230366 Cross-References: * CVE-2024-45817

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:3422-1 moderate: xen Security Advisory Updates

* bsc#1230366 Cross-References: * CVE-2024-45817

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:3423-1 important: xen Security Advisory Updates

* bsc#1222453 * bsc#1227355 * bsc#1228574 * bsc#1228575 * bsc#1230366

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2024:3424-1 moderate: xen Security Advisory Updates

* bsc#1230366 Cross-References: * CVE-2024-45817

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Debian LTS: DLA-3894-1: booth Security Advisory Updates

Invalid HMAC could have been accepted in the Booth Cluster Ticket Manager. For Debian 11 bullseye, this problem has been fixed in version

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: 2024:0311-1 important: chromium Advisory Security Update

An update that fixes 6 vulnerabilities is now available.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: 2024:0312-1 important: chromium Advisory Security Update

An update that fixes 6 vulnerabilities is now available.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:3408-1 important: the Linux Kernel Security Advisory Updates

* bsc#1193629 * bsc#1194111 * bsc#1194765 * bsc#1194869 * bsc#1196261

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

SUSE: 2024:3411-1 important: python39 Security Advisory Updates

* bsc#1229596 * bsc#1229704 * bsc#1230227 Cross-References: