https://www.hackerposts.org/en/blog/bronze-sandcastle-sandboxie-dll-sideloading Hacker Posts en 2026-10-21T00:00:00.000Z Bronze Sandcastle abuses Sandboxie sideloading for backdoors https://www.hackerposts.org/en/blog/dhs-fascsa-order-deepseek-federal-civilian-ban Hacker Posts en 2026-10-21T00:00:00.000Z DHS orders DeepSeek stripped from federal civilian systems https://www.hackerposts.org/en/blog/emudhra-ca-key-compromise-browsers-block Hacker Posts en 2026-10-21T00:00:00.000Z Browsers block 8 compromised eMudhra intermediate CA keys https://www.hackerposts.org/en/blog/gitlab-cve-2026-110264-regex-overflow-unauth-rce Hacker Posts en 2026-10-21T00:00:00.000Z GitLab patches a second CVSS 10.0 regex RCE (CVE-2026-110264) https://www.hackerposts.org/en/blog/litellm-1-107-0-compromise-credential-stealer Hacker Posts en 2026-10-21T00:00:00.000Z LiteLLM 1.107.0 pushed to PyPI and Docker with a credential stealer https://www.hackerposts.org/en/blog/partisan-zmiy-vasilek-vmware-tools-backdoor Hacker Posts en 2026-10-21T00:00:00.000Z Vasilek backdoor hid in fake VMware Tools for two years https://www.hackerposts.org/en/blog/php-emergency-release-two-critical-rce-cvss-92 Hacker Posts en 2026-10-21T00:00:00.000Z PHP ships emergency release for two critical flaws (CVSS 9.2) https://www.hackerposts.org/en/blog/plex2shell-plex-media-server-rce-chain-exploited Hacker Posts en 2026-10-21T00:00:00.000Z Plex Media Server RCE chain 'Plex2Shell' exploited in the wild https://www.hackerposts.org/en/blog/safepay-ransomware-cisa-fbi-advisory-aa26-293a Hacker Posts en 2026-10-21T00:00:00.000Z FBI, CISA detail SafePay ransomware: 600+ victims since 2024 https://www.hackerposts.org/en/blog/state-bank-india-siriusim-375k-breach-claim Hacker Posts en 2026-10-21T00:00:00.000Z State Bank of India probes claim of 375,000 leaked records https://www.hackerposts.org/en/blog/teamupdraft-breach-updraftcentral-connection-keys Hacker Posts en 2026-10-21T00:00:00.000Z TeamUpdraft breach exposes UpdraftCentral keys to takeover https://www.hackerposts.org/en/blog/tor-exit-relays-ssh-interception-ebury Hacker Posts en 2026-10-21T00:00:00.000Z Attackers hijack 300+ Tor exit relays to intercept SSH https://www.hackerposts.org/fr/blog/mattermost-server-certfr-2026-avi-1344 Hacker Posts fr 2026-10-21T00:00:00.000Z Mattermost Server : correctifs de sécurité relayés par le CERT-FR https://www.hackerposts.org/fr/blog/pannier-runacher-logiciel-espion-ingerence Hacker Posts fr 2026-10-21T00:00:00.000Z Pannier-Runacher visée par un logiciel espion, trois alertes Apple https://www.hackerposts.org/fr/blog/php2shell-cve-2026-109618-109619-certfr-ale-014 Hacker Posts fr 2026-10-21T00:00:00.000Z PHP2Shell : deux RCE critiques (CVSS 9.2), correctifs publiés https://www.hackerposts.org/fr/blog/stormshield-sns-smc-certfr-2026-avi-1345 Hacker Posts fr 2026-10-21T00:00:00.000Z Stormshield : 19 CVE corrigées sur SNS et SMC (CERTFR-2026-AVI-1345) https://www.hackerposts.org/en/blog/ahold-delhaize-cyberattack-us-europe-systems-offline Hacker Posts en 2026-10-20T00:00:00.000Z Ahold Delhaize takes systems offline after cyberattack https://www.hackerposts.org/en/blog/citizen-lab-pegasus-belgrade-rector-zero-click Hacker Posts en 2026-10-20T00:00:00.000Z Citizen Lab confirms Pegasus on Belgrade rector's iPhone https://www.hackerposts.org/en/blog/fortisiem-cve-2026-106173-grpc-path-traversal-rce Hacker Posts en 2026-10-20T00:00:00.000Z FortiSIEM CVE-2026-106173: unauth RCE, PoC public, patch now https://www.hackerposts.org/en/blog/go-1-27-3-1-26-10-blocks-eight-ca-keys Hacker Posts en 2026-10-20T00:00:00.000Z Go blocks eight CA keys in emergency 1.27.3/1.26.10 update https://www.hackerposts.org/en/blog/nikkei-breach-183m-cloud-dev-system Hacker Posts en 2026-10-20T00:00:00.000Z Nikkei breach exposes 1.83M records via a dev system https://www.hackerposts.org/en/blog/ovhcloud-cli-v0-11-v0-15-github-release-backdoor Hacker Posts en 2026-10-20T00:00:00.000Z OVHcloud CLI releases backdoored on GitHub to steal secrets https://www.hackerposts.org/en/blog/romulus-clickfix-legionloader-forescout Hacker Posts en 2026-10-20T00:00:00.000Z ROMULUS: a ClickFix delivery platform pushing LegionLoader https://www.hackerposts.org/en/blog/swallowtail-apt28-nato-shipbuilder-hookedge Hacker Posts en 2026-10-20T00:00:00.000Z Symantec: Swallowtail (APT28) hit NATO naval shipbuilder https://www.hackerposts.org/en/blog/zeabur-second-breach-shutdown-321810-accounts Hacker Posts en 2026-10-20T00:00:00.000Z Zeabur shuts down after second breach hits 321,810 accounts https://www.hackerposts.org/fr/blog/kaspersky-scanners-codes-barres-bluetooth-cve-2026-4272 Hacker Posts fr 2026-10-20T00:00:00.000Z Scanners de codes-barres : RCE Bluetooth, CVE-2026-4272 chez Honeywell https://www.hackerposts.org/fr/blog/laravel-12-68-13-29-certfr-avi-1343-auth-bypass Hacker Posts fr 2026-10-20T00:00:00.000Z Laravel : contournement d'authentification critique (CVSS 9.2) https://www.hackerposts.org/fr/blog/microsoft-agents-ia-inities-non-fiables-entra-agent-id Hacker Posts fr 2026-10-20T00:00:00.000Z Microsoft traite les agents IA comme des « initiés » à surveiller https://www.hackerposts.org/fr/blog/ovhcloud-cli-compromis-github-infostealer Hacker Posts fr 2026-10-20T00:00:00.000Z Le CLI officiel d'OVHcloud piégé sur GitHub par un voleur de secrets https://www.hackerposts.org/fr/blog/roundcube-1-6-20-1-7-5-certfr-avi-1340 Hacker Posts fr 2026-10-20T00:00:00.000Z Roundcube 1.6.20 et 1.7.5 corrigent plusieurs failles, dont une RCE https://www.hackerposts.org/fr/blog/stormshield-sns-certfr-avi-1339-signature-firmware Hacker Posts fr 2026-10-20T00:00:00.000Z Stormshield SNS : signature de firmware contournable (CVE-2026-111090)