https://www.hackerposts.org/en/blog/ahold-delhaize-cyberattack-systems-offline Hacker Posts en 2026-10-13T00:00:00.000Z Ahold Delhaize takes systems offline after cyberattack https://www.hackerposts.org/en/blog/docker-hub-cve-2026-105445-pat-transfer Hacker Posts en 2026-10-13T00:00:00.000Z Docker Hub CVE-2026-105445 let tokens impersonate repo owners https://www.hackerposts.org/en/blog/github-npm-trusted-publishing-slugfest Hacker Posts en 2026-10-13T00:00:00.000Z GitHub hardens npm trusted publishing after SlugFest flaw https://www.hackerposts.org/en/blog/ivanti-connect-secure-cve-2026-104935-zero-day-chain Hacker Posts en 2026-10-13T00:00:00.000Z Ivanti Connect Secure zero-days chained for root on patched VPN https://www.hackerposts.org/en/blog/lg-webos-smart-tv-preauth-root-typhoonpwn Hacker Posts en 2026-10-13T00:00:00.000Z LG webOS TVs: pre-auth root chain from the local network, no CVE yet https://www.hackerposts.org/en/blog/marklogic-cve-2026-85947-privilege-escalation Hacker Posts en 2026-10-13T00:00:00.000Z MarkLogic patches 31 flaws, 5 critical: privileged users can seize admin https://www.hackerposts.org/en/blog/microsoft-october-2026-patch-tuesday-1411-flaws Hacker Posts en 2026-10-13T00:00:00.000Z Microsoft's October Patch Tuesday fixes 1,411 flaws, one exploited https://www.hackerposts.org/en/blog/midnight-mimosa-android-preinstalled-malware Hacker Posts en 2026-10-13T00:00:00.000Z Midnight Mimosa: preinstalled malware on cheap Android phones, 150+ countries https://www.hackerposts.org/en/blog/sap-cloud-sdk-python-cve-2026-89111-oauth2-ssrf Hacker Posts en 2026-10-13T00:00:00.000Z SAP Cloud SDK for Python OAuth2 SSRF (CVE-2026-89111, CVSS 10.0) https://www.hackerposts.org/en/blog/xandr-microsoft-norway-grindr-92m-nok-fine Hacker Posts en 2026-10-13T00:00:00.000Z Norway fines Microsoft's Xandr 92M NOK over Grindr RTB data https://www.hackerposts.org/fr/blog/anthropic-ia-auto-replication-botnets-iot Hacker Posts fr 2026-10-13T00:00:00.000Z Anthropic teste l'auto-réplication de modèles d'IA sur l'IoT https://www.hackerposts.org/fr/blog/mongodb-certfr-2026-avi-1293-pilotes Hacker Posts fr 2026-10-13T00:00:00.000Z MongoDB : 35 CVE dans les pilotes, le CERT-FR publie l'AVI-1293 https://www.hackerposts.org/fr/blog/netapp-storagegrid-cve-2026-22056-certfr-avi-1295 Hacker Posts fr 2026-10-13T00:00:00.000Z NetApp StorageGRID : déni de service (CVE-2026-22056), CERT-FR AVI-1295 https://www.hackerposts.org/fr/blog/vacaf-revendication-fuite-aides-vacances-mineurs Hacker Posts fr 2026-10-13T00:00:00.000Z VACAF : un vendeur revendique 1,2 million de dossiers d'aides https://www.hackerposts.org/en/blog/bricksforge-cve-2026-85097-wordpress-rce-exploited Hacker Posts en 2026-10-12T00:00:00.000Z Bricksforge WordPress plugin RCE exploited within days (CVE-2026-85097) https://www.hackerposts.org/en/blog/cyberxero-claude-code-pentagi-ukraine-iab Hacker Posts en 2026-10-12T00:00:00.000Z SOCRadar: 'CyberXero' wired AI agents into a Ukraine access-broker campaign https://www.hackerposts.org/en/blog/danfoss-french-supermarkets-refrigeration-cyberattack Hacker Posts en 2026-10-12T00:00:00.000Z Danfoss controllers hijacked in French supermarket fridge attack https://www.hackerposts.org/en/blog/gitlab-cve-2026-97229-cicd-regex-unauth-rce Hacker Posts en 2026-10-12T00:00:00.000Z GitLab patches CVSS 10.0 unauthenticated RCE in CI/CD regex compiler (CVE-2026-97229) https://www.hackerposts.org/en/blog/ledger-cryptobilis-hardware-implant-wallet-theft Hacker Posts en 2026-10-12T00:00:00.000Z Ledger confirms hardware implant in reseller-sold wallet amid theft reports https://www.hackerposts.org/en/blog/lets-encrypt-64-day-certificates-default-2027 Hacker Posts en 2026-10-12T00:00:00.000Z Let's Encrypt moves to 64-day certificates by default in 2027 https://www.hackerposts.org/fr/blog/cyberattaque-froid-supermarches-danfoss-regulateurs Hacker Posts fr 2026-10-12T00:00:00.000Z Cyberattaque sur le froid des supermarchés : régulateurs Danfoss détournés https://www.hackerposts.org/fr/blog/gitlab-cve-2026-97229-certfr-avi-1294-rce Hacker Posts fr 2026-10-12T00:00:00.000Z GitLab : RCE non authentifiée en CVSS 10 (CVE-2026-97229) https://www.hackerposts.org/fr/blog/ledger-cryptobilis-implant-materiel-vol-crypto Hacker Posts fr 2026-10-12T00:00:00.000Z Ledger : un implant matériel dans des portefeuilles d'un revendeur https://www.hackerposts.org/fr/blog/nudeleaksteens-uncyber-doj-17000-victimes Hacker Posts fr 2026-10-12T00:00:00.000Z NudeLeaksTeens fermé : opération franco-américaine, plus de 17 000 victimes https://www.hackerposts.org/fr/blog/postgresql-jdbc-certfr-avi-1292-cve-2026-107314 Hacker Posts fr 2026-10-12T00:00:00.000Z PostgreSQL JDBC : deux failles corrigées en 42.7.14 (AVI-1292) https://www.hackerposts.org/fr/blog/reacher-stryx-ofac-lookup-donnees-volees Hacker Posts fr 2026-10-12T00:00:00.000Z L'OFAC démantèle le « lookup » Reacher/Stryx : trois mineurs de 17 ans interpellés https://www.hackerposts.org/fr/blog/xandr-microsoft-datatilsynet-amende-rgpd-grindr Hacker Posts fr 2026-10-12T00:00:00.000Z Xandr (Microsoft) : 92 M NOK d'amende en Norvège sur Grindr