https://www.hackerposts.org/en/blog/apple-cve-2026-86950-coregraphics-ios-18-backport Hacker Posts en 2026-10-27T00:00:00.000Z Apple backports CoreGraphics zero-day fix (CVE-2026-86950) to iOS 18 https://www.hackerposts.org/en/blog/hpe-aruba-aos-cve-2026-79844-max-severity Hacker Posts en 2026-10-27T00:00:00.000Z HPE patches 8 max-severity RCE and auth-bypass flaws in Aruba AOS https://www.hackerposts.org/en/blog/lazarus-operation-flashhole-inisafe-postquantum Hacker Posts en 2026-10-27T00:00:00.000Z Lazarus abuses South Korean security software, adds post-quantum crypto https://www.hackerposts.org/en/blog/php2shell-cve-2026-109618-109619-cisa-kev Hacker Posts en 2026-10-27T00:00:00.000Z CISA adds both PHP2Shell RCE flaws to KEV, 72-hour deadline https://www.hackerposts.org/en/blog/tailscale-tailworm-ssh-root-privesc Hacker Posts en 2026-10-27T00:00:00.000Z Tailscale warns of SSH flaws allowing root privilege escalation https://www.hackerposts.org/en/blog/university-of-copenhagen-breach-525000-cpr Hacker Posts en 2026-10-27T00:00:00.000Z University of Copenhagen breach exposes data on 525,000 people https://www.hackerposts.org/en/blog/unm-health-cybersecurity-incident-trauma-center Hacker Posts en 2026-10-27T00:00:00.000Z Cyber incident pulls New Mexico's only Level 1 trauma center offline https://www.hackerposts.org/fr/blog/cert-fr-retex-violations-donnees-applicatives Hacker Posts fr 2026-10-27T00:00:00.000Z Le CERT-FR publie un RETEX sur les violations de données applicatives https://www.hackerposts.org/fr/blog/cpython-certfr-2026-avi-1379 Hacker Posts fr 2026-10-27T00:00:00.000Z CPython : l'ANSSI relaie deux correctifs (CERTFR-2026-AVI-1379) https://www.hackerposts.org/fr/blog/engie-fuite-donnees-outil-partenaires Hacker Posts fr 2026-10-27T00:00:00.000Z ENGIE : fuite de données clients via un outil de ses partenaires commerciaux https://www.hackerposts.org/fr/blog/quad9-cloudflare-dns-france-blocage-judiciaire Hacker Posts fr 2026-10-27T00:00:00.000Z Quad9 quitte la France le 24 novembre sous astreinte judiciaire https://www.hackerposts.org/en/blog/dahua-cameras-cert-ua-easy4ip-cameraswarm Hacker Posts en 2026-10-26T00:00:00.000Z CERT-UA warns of Dahua camera takeovers via cloud access https://www.hackerposts.org/en/blog/genesys-scarlettgroup-crm-lms-breach Hacker Posts en 2026-10-26T00:00:00.000Z Genesys says attackers hit internal CRM and training systems https://www.hackerposts.org/en/blog/gheist-github-tokens-actions-log-secrets Hacker Posts en 2026-10-26T00:00:00.000Z Gheist abuses stolen GitHub tokens to leak CI secrets https://www.hackerposts.org/en/blog/m365-token-spray-replay-huntress-79-orgs Hacker Posts en 2026-10-26T00:00:00.000Z Microsoft 365 token spray-and-replay bypasses MFA at 79 orgs https://www.hackerposts.org/en/blog/netherlands-nfc-relay-bank-fraud-arrests Hacker Posts en 2026-10-26T00:00:00.000Z Dutch police arrest two in €380k NFC relay bank fraud https://www.hackerposts.org/en/blog/php2shell-cve-2026-109618-unit42-lazarus Hacker Posts en 2026-10-26T00:00:00.000Z PHP2Shell: Unit 42 pulls European-agency claim as scanning spreads https://www.hackerposts.org/en/blog/sansec-deepveindrilling-953-magento-stores Hacker Posts en 2026-10-26T00:00:00.000Z JavaScript loader infects 953 Magento stores, Sansec says https://www.hackerposts.org/en/blog/tailscale-tailworm-ssh-forwarding-root Hacker Posts en 2026-10-26T00:00:00.000Z "Tailworm" report alleges root escalation via Tailscale SSH forwarding https://www.hackerposts.org/en/blog/wasmtime-cve-2026-115889-115893-sandbox-escape Hacker Posts en 2026-10-26T00:00:00.000Z Wasmtime patches two critical Cranelift sandbox escapes https://www.hackerposts.org/fr/blog/google-pubs-ciblees-gmail-photos-regles-confidentialite Hacker Posts fr 2026-10-26T00:00:00.000Z Google ouvre Gmail, Drive et Photos à la pub ciblée via l'IA