https://www.hackerposts.org/en/blog/connectwise-storm-0940-artex-supply-chain Hacker Posts en 2026-10-22T00:00:00.000Z ConnectWise supply-chain compromise pinned on China's Storm-0940 https://www.hackerposts.org/en/blog/lazarus-operation-flashhole-post-quantum Hacker Posts en 2026-10-22T00:00:00.000Z Lazarus wraps malware delivery in post-quantum crypto (FlashHole) https://www.hackerposts.org/en/blog/onamae-desktop-cloud-gmo-breach Hacker Posts en 2026-10-22T00:00:00.000Z Onamae Desktop Cloud breach may hit 26,739 GMO servers https://www.hackerposts.org/fr/blog/lazarus-operation-flashhole-post-quantum Hacker Posts fr 2026-10-22T00:00:00.000Z Lazarus masque ses charges avec du post-quantique (FlashHole) https://www.hackerposts.org/fr/blog/oracle-weblogic-cpu-oct-2026-certfr-avi-1355 Hacker Posts fr 2026-10-22T00:00:00.000Z Oracle WebLogic : 29 CVE corrigées au CPU d'octobre 2026 (AVI-1355) https://www.hackerposts.org/fr/blog/traefik-forwardauth-ghsa-certfr-avi-1356 Hacker Posts fr 2026-10-22T00:00:00.000Z Traefik : contournement d'authentification ForwardAuth (CVSS 7.0) https://www.hackerposts.org/en/blog/bronze-sandcastle-sandboxie-dll-sideloading Hacker Posts en 2026-10-21T00:00:00.000Z Bronze Sandcastle abuses Sandboxie sideloading for backdoors https://www.hackerposts.org/en/blog/dhs-fascsa-order-deepseek-federal-civilian-ban Hacker Posts en 2026-10-21T00:00:00.000Z DHS orders DeepSeek stripped from federal civilian systems https://www.hackerposts.org/en/blog/emudhra-ca-key-compromise-browsers-block Hacker Posts en 2026-10-21T00:00:00.000Z Browsers block 8 compromised eMudhra intermediate CA keys https://www.hackerposts.org/en/blog/gitlab-cve-2026-110264-regex-overflow-unauth-rce Hacker Posts en 2026-10-21T00:00:00.000Z GitLab patches a second CVSS 10.0 regex RCE (CVE-2026-110264) https://www.hackerposts.org/en/blog/litellm-1-107-0-compromise-credential-stealer Hacker Posts en 2026-10-21T00:00:00.000Z LiteLLM 1.107.0 pushed to PyPI and Docker with a credential stealer https://www.hackerposts.org/en/blog/partisan-zmiy-vasilek-vmware-tools-backdoor Hacker Posts en 2026-10-21T00:00:00.000Z Vasilek backdoor hid in fake VMware Tools for two years https://www.hackerposts.org/en/blog/php-emergency-release-two-critical-rce-cvss-92 Hacker Posts en 2026-10-21T00:00:00.000Z PHP ships emergency release for two critical flaws (CVSS 9.2) https://www.hackerposts.org/en/blog/plex2shell-plex-media-server-rce-chain-exploited Hacker Posts en 2026-10-21T00:00:00.000Z Plex Media Server RCE chain 'Plex2Shell' exploited in the wild https://www.hackerposts.org/en/blog/safepay-ransomware-cisa-fbi-advisory-aa26-293a Hacker Posts en 2026-10-21T00:00:00.000Z FBI, CISA detail SafePay ransomware: 600+ victims since 2024 https://www.hackerposts.org/en/blog/state-bank-india-siriusim-375k-breach-claim Hacker Posts en 2026-10-21T00:00:00.000Z State Bank of India probes claim of 375,000 leaked records https://www.hackerposts.org/en/blog/teamupdraft-breach-updraftcentral-connection-keys Hacker Posts en 2026-10-21T00:00:00.000Z TeamUpdraft breach exposes UpdraftCentral keys to takeover https://www.hackerposts.org/en/blog/tor-exit-relays-ssh-interception-ebury Hacker Posts en 2026-10-21T00:00:00.000Z Attackers hijack 300+ Tor exit relays to intercept SSH https://www.hackerposts.org/fr/blog/mattermost-server-certfr-2026-avi-1344 Hacker Posts fr 2026-10-21T00:00:00.000Z Mattermost Server : correctifs de sécurité relayés par le CERT-FR https://www.hackerposts.org/fr/blog/pannier-runacher-logiciel-espion-ingerence Hacker Posts fr 2026-10-21T00:00:00.000Z Pannier-Runacher visée par un logiciel espion, trois alertes Apple https://www.hackerposts.org/fr/blog/php2shell-cve-2026-109618-109619-certfr-ale-014 Hacker Posts fr 2026-10-21T00:00:00.000Z PHP2Shell : deux RCE critiques (CVSS 9.2), correctifs publiés https://www.hackerposts.org/fr/blog/stormshield-sns-smc-certfr-2026-avi-1345 Hacker Posts fr 2026-10-21T00:00:00.000Z Stormshield : 19 CVE corrigées sur SNS et SMC (CERTFR-2026-AVI-1345)