https://www.hackerposts.org/en/blog/capcom-id-breach-11-7m-accounts Hacker Posts en 2026-10-23T00:00:00.000Z Capcom confirms CAPCOM ID breach exposing 11.7M accounts https://www.hackerposts.org/en/blog/hpe-arubaos-cve-2026-79844-eight-max-severity Hacker Posts en 2026-10-23T00:00:00.000Z HPE patches eight max-severity ArubaOS RCE and auth-bypass flaws https://www.hackerposts.org/en/blog/php-cve-2026-115560-session-upload-progress Hacker Posts en 2026-10-23T00:00:00.000Z PHP flags a third session bug (CVE-2026-115560) — but calls RCE unlikely https://www.hackerposts.org/en/blog/pillow-cve-2026-112900-eps-ghostscript-rce Hacker Posts en 2026-10-23T00:00:00.000Z Pillow EPS flaw lets attacker-named files reach Ghostscript (CVE-2026-112900) https://www.hackerposts.org/en/blog/quest-diagnostics-quanum-lsm-breach Hacker Posts en 2026-10-23T00:00:00.000Z Quest Diagnostics pulls Quanum lab system after intrusion https://www.hackerposts.org/en/blog/ruby-onigmo-regex-engine-gitlab-rce-fixes Hacker Posts en 2026-10-23T00:00:00.000Z Ruby patches Onigmo regex engine behind four critical GitLab RCEs https://www.hackerposts.org/fr/blog/blackx-bootkit-uefi-baton-drop-kaspersky-asie-centrale Hacker Posts fr 2026-10-23T00:00:00.000Z BlackX : un bootkit UEFI exploite Baton Drop contre des cibles diplomatiques https://www.hackerposts.org/fr/blog/fftir-fuite-donnees-licencies-eden-chimeraz Hacker Posts fr 2026-10-23T00:00:00.000Z La Fédération française de tir confirme le vol de données de licenciés https://www.hackerposts.org/fr/blog/gitlab-19-5-1-certfr-2026-avi-1363 Hacker Posts fr 2026-10-23T00:00:00.000Z GitLab 19.5.1 / 19.4.3 / 19.3.6 : 12 CVE dont un risque RCE (CERTFR-2026-AVI-1363) https://www.hackerposts.org/fr/blog/hpe-aruba-aos-clearpass-certfr-2026-avi-1369 Hacker Posts fr 2026-10-23T00:00:00.000Z HPE Aruba : 74 failles sur AOS et ClearPass, 8 critiques (AVI-1369) https://www.hackerposts.org/fr/blog/solarwinds-certfr-avi-1364-observability-patch-manager Hacker Posts fr 2026-10-23T00:00:00.000Z SolarWinds corrige Observability Self-Hosted et Patch Manager (AVI-1364) https://www.hackerposts.org/fr/blog/splunk-oct-2026-certfr-avi-1366 Hacker Posts fr 2026-10-23T00:00:00.000Z Splunk : RCE et contournements critiques dans Enterprise et SOAR (AVI-1366) https://www.hackerposts.org/en/blog/arista-velocloud-cve-2026-114625-sqli-zero-day Hacker Posts en 2026-10-22T00:00:00.000Z Arista patches exploited VeloCloud Orchestrator SQLi zero-day https://www.hackerposts.org/en/blog/connectwise-storm-0940-artex-supply-chain Hacker Posts en 2026-10-22T00:00:00.000Z ConnectWise supply-chain compromise pinned on China's Storm-0940 https://www.hackerposts.org/en/blog/lazarus-operation-flashhole-post-quantum Hacker Posts en 2026-10-22T00:00:00.000Z Lazarus wraps malware delivery in post-quantum crypto (FlashHole) https://www.hackerposts.org/en/blog/nodejs-cve-2026-111497-brotli-rce-oct-2026 Hacker Posts en 2026-10-22T00:00:00.000Z Node.js patches Brotli decoder RCE across all supported lines https://www.hackerposts.org/en/blog/onamae-desktop-cloud-gmo-breach Hacker Posts en 2026-10-22T00:00:00.000Z Onamae Desktop Cloud breach may hit 26,739 GMO servers https://www.hackerposts.org/en/blog/opencode-mcp-oauth-powershell-injection Hacker Posts en 2026-10-22T00:00:00.000Z OpenCode flaw let malicious MCP servers run code on Windows https://www.hackerposts.org/en/blog/php2shell-cve-2026-109618-exploited-in-wild Hacker Posts en 2026-10-22T00:00:00.000Z PHP2Shell flaws exploited days before the patch, Amazon says https://www.hackerposts.org/en/blog/qpack-http3-memory-amplification-dos Hacker Posts en 2026-10-22T00:00:00.000Z QPACK flaws crash HTTP/3 servers; Bun, h3, aioquic unpatched https://www.hackerposts.org/en/blog/railway-breach-decrypted-env-vars Hacker Posts en 2026-10-22T00:00:00.000Z Railway breach exposed decrypted secrets; rotate everything https://www.hackerposts.org/fr/blog/cisco-oct-2026-certfr-avi-1360 Hacker Posts fr 2026-10-22T00:00:00.000Z Cisco : 26 CVE corrigées, dont RCE et élévation de privilèges https://www.hackerposts.org/fr/blog/gitlab-cve-2026-110264-certfr-avi-1363-rce Hacker Posts fr 2026-10-22T00:00:00.000Z GitLab : seconde RCE non authentifiée CVSS 10.0 en un mois (AVI-1363) https://www.hackerposts.org/fr/blog/isc-bind-certfr-avi-1365-gss-tsig-rce Hacker Posts fr 2026-10-22T00:00:00.000Z BIND : trois failles corrigées, dont une corruption mémoire (AVI-1365) https://www.hackerposts.org/fr/blog/lazarus-operation-flashhole-post-quantum Hacker Posts fr 2026-10-22T00:00:00.000Z Lazarus masque ses charges avec du post-quantique (FlashHole) https://www.hackerposts.org/fr/blog/litellm-1-107-0-compromise-credential-stealer Hacker Posts fr 2026-10-22T00:00:00.000Z LiteLLM 1.107.0 : un package PyPI piégé vole les identifiants https://www.hackerposts.org/fr/blog/nodejs-cve-2026-111497-brotli-rce-oct-2026 Hacker Posts fr 2026-10-22T00:00:00.000Z Node.js corrige une RCE dans le décodeur Brotli (CVE-2026-111497) https://www.hackerposts.org/fr/blog/oracle-weblogic-cpu-oct-2026-certfr-avi-1355 Hacker Posts fr 2026-10-22T00:00:00.000Z Oracle WebLogic : 29 CVE corrigées au CPU d'octobre 2026 (AVI-1355) https://www.hackerposts.org/fr/blog/traefik-forwardauth-ghsa-certfr-avi-1356 Hacker Posts fr 2026-10-22T00:00:00.000Z Traefik : contournement d'authentification ForwardAuth (CVSS 7.0)