https://www.hackerposts.org/en/blog/blackx-uefi-bootkit-apt41-baton-drop Hacker Posts en 2026-10-24T00:00:00.000Z BlackX UEFI bootkit bypasses Secure Boot via Baton Drop https://www.hackerposts.org/en/blog/inc-gentlemen-phantom-ai-ransomware-framework Hacker Posts en 2026-10-24T00:00:00.000Z INC and Gentlemen affiliates ran AI intrusion framework Phantom https://www.hackerposts.org/en/blog/k0t-fortigate-globalprotect-70k-credentials Hacker Posts en 2026-10-24T00:00:00.000Z k0t campaign exposes 70,000+ FortiGate, GlobalProtect credentials https://www.hackerposts.org/en/blog/nodejs-cve-2026-111497-brotli-rce-node2shell Hacker Posts en 2026-10-24T00:00:00.000Z Node.js patches Brotli decoder RCE (CVE-2026-111497); PoC public https://www.hackerposts.org/en/blog/time4popcorn-cve-2026-30612-updater-rce Hacker Posts en 2026-10-24T00:00:00.000Z Time4Popcorn updater flaw exposed millions to RCE (CVE-2026-30612) https://www.hackerposts.org/fr/blog/signal-ringrtc-cve-2026-113380-raccrochage Hacker Posts fr 2026-10-24T00:00:00.000Z Signal corrige RingRTC : raccrocher ne coupait pas l'appel (CVE-2026-113380) https://www.hackerposts.org/fr/blog/zdi-six-failles-noyau-linux-listes-publiques Hacker Posts fr 2026-10-24T00:00:00.000Z Six failles du noyau Linux divulguées sur des listes publiques par la ZDI https://www.hackerposts.org/en/blog/capcom-id-breach-11-7m-accounts Hacker Posts en 2026-10-23T00:00:00.000Z Capcom confirms CAPCOM ID breach exposing 11.7M accounts https://www.hackerposts.org/en/blog/hpe-arubaos-cve-2026-79844-eight-max-severity Hacker Posts en 2026-10-23T00:00:00.000Z HPE patches eight max-severity ArubaOS RCE and auth-bypass flaws https://www.hackerposts.org/en/blog/php-cve-2026-115560-session-upload-progress Hacker Posts en 2026-10-23T00:00:00.000Z PHP flags a third session bug (CVE-2026-115560) — but calls RCE unlikely https://www.hackerposts.org/en/blog/pillow-cve-2026-112900-eps-ghostscript-rce Hacker Posts en 2026-10-23T00:00:00.000Z Pillow EPS flaw lets attacker-named files reach Ghostscript (CVE-2026-112900) https://www.hackerposts.org/en/blog/quest-diagnostics-quanum-lsm-breach Hacker Posts en 2026-10-23T00:00:00.000Z Quest Diagnostics pulls Quanum lab system after intrusion https://www.hackerposts.org/en/blog/ruby-onigmo-regex-engine-gitlab-rce-fixes Hacker Posts en 2026-10-23T00:00:00.000Z Ruby patches Onigmo regex engine behind four critical GitLab RCEs https://www.hackerposts.org/fr/blog/blackx-bootkit-uefi-baton-drop-kaspersky-asie-centrale Hacker Posts fr 2026-10-23T00:00:00.000Z BlackX : un bootkit UEFI exploite Baton Drop contre des cibles diplomatiques https://www.hackerposts.org/fr/blog/fftir-fuite-donnees-licencies-eden-chimeraz Hacker Posts fr 2026-10-23T00:00:00.000Z La Fédération française de tir confirme le vol de données de licenciés https://www.hackerposts.org/fr/blog/gitlab-19-5-1-certfr-2026-avi-1363 Hacker Posts fr 2026-10-23T00:00:00.000Z GitLab 19.5.1 / 19.4.3 / 19.3.6 : 12 CVE dont un risque RCE (CERTFR-2026-AVI-1363) https://www.hackerposts.org/fr/blog/hpe-aruba-aos-clearpass-certfr-2026-avi-1369 Hacker Posts fr 2026-10-23T00:00:00.000Z HPE Aruba : 74 failles sur AOS et ClearPass, 8 critiques (AVI-1369) https://www.hackerposts.org/fr/blog/solarwinds-certfr-avi-1364-observability-patch-manager Hacker Posts fr 2026-10-23T00:00:00.000Z SolarWinds corrige Observability Self-Hosted et Patch Manager (AVI-1364) https://www.hackerposts.org/fr/blog/splunk-oct-2026-certfr-avi-1366 Hacker Posts fr 2026-10-23T00:00:00.000Z Splunk : RCE et contournements critiques dans Enterprise et SOAR (AVI-1366)