https://www.hackerposts.org/en/blog/qnap-plex2shell-nas-compromise-advisory Hacker Posts en 2026-11-07T00:00:00.000Z QNAP warns NAS users to treat Plex2Shell boxes as compromised https://www.hackerposts.org/en/blog/sonicwall-sonicos-cve-2026-19868-ssl-vpn-saml-bypass Hacker Posts en 2026-11-07T00:00:00.000Z SonicWall patches exploited SSL-VPN SAML bypass CVE-2026-19868 https://www.hackerposts.org/en/blog/trail-of-bits-signing-systems-approval-binance Hacker Posts en 2026-11-07T00:00:00.000Z Trail of Bits: audit what your signing systems can approve https://www.hackerposts.org/fr/blog/brotli-cve-2026-111497-vmware-mitel Hacker Posts fr 2026-11-07T00:00:00.000Z Décodeur Brotli : la faille critique CVE-2026-111497 se propage chez les éditeurs https://www.hackerposts.org/en/blog/claude-dispatch-thisbash-extension-rce Hacker Posts en 2026-11-06T00:00:00.000Z Claude Dispatch flaw lets a browser extension run code on your PC https://www.hackerposts.org/en/blog/dlink-dgs-3130-ddp-firmware-zero-days Hacker Posts en 2026-11-06T00:00:00.000Z D-Link confirms multiple zero-days in DGS-3130 switches, no fix yet https://www.hackerposts.org/en/blog/fake-ai-event-phishing-device-code-aitm Hacker Posts en 2026-11-06T00:00:00.000Z Fake OpenAI and SpaceX event pages phish Microsoft, Google logins https://www.hackerposts.org/en/blog/fake-github-security-tools-asyncrat-stealer Hacker Posts en 2026-11-06T00:00:00.000Z Fake GitHub security tools drop AsyncRAT and a stealer at researchers https://www.hackerposts.org/en/blog/microsoft-paint-cve-2026-83844-store-only-rce Hacker Posts en 2026-11-06T00:00:00.000Z Microsoft Paint RCE fix (CVE-2026-83844) ships via Store, not Windows Update https://www.hackerposts.org/fr/blog/cisco-ucs-central-cve-2026-76506-rce-certfr-avi-1467 Hacker Posts fr 2026-11-06T00:00:00.000Z Cisco UCS Central : RCE authentifiée CVE-2026-76506 (CERTFR-2026-AVI-1467) https://www.hackerposts.org/fr/blog/cnil-recherches-internes-sante-obligations Hacker Posts fr 2026-11-06T00:00:00.000Z La CNIL cadre les recherches internes en santé : obligations RGPD https://www.hackerposts.org/fr/blog/spip-4-4-29-certfr-avi-1465-rce-sqli Hacker Posts fr 2026-11-06T00:00:00.000Z SPIP 4.4.29 : RCE post-auth, SQLi et privesc (CERTFR-2026-AVI-1465)