https://www.hackerposts.org/en/blog/adobe-campaign-classic-apsb26-162-rce Hacker Posts en 2026-10-28T00:00:00.000Z Adobe patches eight critical Campaign Classic flaws, four at 9.9 https://www.hackerposts.org/en/blog/anthropic-claude-model-exploit-chaining-browsers-os Hacker Posts en 2026-10-28T00:00:00.000Z Anthropic says an internal model chained exploits across Chrome and kernels https://www.hackerposts.org/en/blog/brotli-cve-2026-111497-cisa-kev-exploited Hacker Posts en 2026-10-28T00:00:00.000Z CISA adds Brotli CVE-2026-111497 (Node2Shell) to KEV as exploited https://www.hackerposts.org/en/blog/convertr-plausible-magecart-skimmer-brazil Hacker Posts en 2026-10-28T00:00:00.000Z Brazilian Magecart crew skims Convertr checkouts via Plausible https://www.hackerposts.org/en/blog/denver-health-squareml-key-leak-238000 Hacker Posts en 2026-10-28T00:00:00.000Z Leaked SquareML key exposed 238,083 Denver Health Plan members https://www.hackerposts.org/en/blog/edk2-uefi-cve-2026-97631-pxe-preboot-rce Hacker Posts en 2026-10-28T00:00:00.000Z EDK II CVE-2026-97631: pre-boot overflow in the UEFI PXE driver https://www.hackerposts.org/en/blog/gmo-onamae-data-leak-50m-ransom-refused Hacker Posts en 2026-10-28T00:00:00.000Z GMO refuses $50M ransom as Onamae attacker leaks data https://www.hackerposts.org/en/blog/microsoft-authenticator-cve-2026-80097-android-tokens Hacker Posts en 2026-10-28T00:00:00.000Z Microsoft Authenticator flaw let any Android app grab work tokens https://www.hackerposts.org/en/blog/nefilim-hive-affiliate-stryzhak-70-months Hacker Posts en 2026-10-28T00:00:00.000Z Nefilim and Hive affiliate Stryzhak gets 70 months https://www.hackerposts.org/en/blog/oracle-ebs-cve-2026-101767-sqli-rce Hacker Posts en 2026-10-28T00:00:00.000Z Oracle EBS CVE-2026-101767: unauth SQLi to RCE, decoys already hit https://www.hackerposts.org/en/blog/project-zero-fuzzilli-vs-bigsleep-v8 Hacker Posts en 2026-10-28T00:00:00.000Z Project Zero pits Fuzzilli against BigSleep on V8 bugs https://www.hackerposts.org/fr/blog/apple-certfr-2026-avi-1387-cve-2026-86950 Hacker Posts fr 2026-10-28T00:00:00.000Z Apple : le CERT-FR relaie une faille déjà exploitée (CVE-2026-86950) https://www.hackerposts.org/fr/blog/edk2-uefi-cve-2026-97631-pxe-preboot-rce Hacker Posts fr 2026-10-28T00:00:00.000Z EDK II CVE-2026-97631 : débordement pré-boot dans le pilote PXE UEFI https://www.hackerposts.org/fr/blog/glpi-11-0-9-10-0-27-certfr-avi-1389 Hacker Posts fr 2026-10-28T00:00:00.000Z GLPI : sept avis corrigés en 11.0.9 et 10.0.27 https://www.hackerposts.org/fr/blog/netscaler-php2shell-certfr-avi-1394 Hacker Posts fr 2026-10-28T00:00:00.000Z NetScaler ADC et Gateway touchés par les failles PHP2Shell https://www.hackerposts.org/fr/blog/palo-alto-pan-os-brotli-cve-2026-111497 Hacker Posts fr 2026-10-28T00:00:00.000Z La faille Brotli CVE-2026-111497 atteint PAN-OS https://www.hackerposts.org/en/blog/apple-cve-2026-86950-coregraphics-ios-18-backport Hacker Posts en 2026-10-27T00:00:00.000Z Apple backports CoreGraphics zero-day fix (CVE-2026-86950) to iOS 18 https://www.hackerposts.org/en/blog/goahead-cve-2026-115881-tls-crl-bypass Hacker Posts en 2026-10-27T00:00:00.000Z GoAhead 6.1.1 fixes TLS flaws: revoked certs accepted, DH downgrade https://www.hackerposts.org/en/blog/hpe-aruba-aos-cve-2026-79844-max-severity Hacker Posts en 2026-10-27T00:00:00.000Z HPE patches 8 max-severity RCE and auth-bypass flaws in Aruba AOS https://www.hackerposts.org/en/blog/lazarus-operation-flashhole-inisafe-postquantum Hacker Posts en 2026-10-27T00:00:00.000Z Lazarus abuses South Korean security software, adds post-quantum crypto https://www.hackerposts.org/en/blog/microsoft-emudhra-oob-distrust-certificates Hacker Posts en 2026-10-27T00:00:00.000Z Microsoft ships OOB updates to distrust eMudhra CA certificates https://www.hackerposts.org/en/blog/php2shell-cve-2026-109618-109619-cisa-kev Hacker Posts en 2026-10-27T00:00:00.000Z CISA adds both PHP2Shell RCE flaws to KEV, 72-hour deadline https://www.hackerposts.org/en/blog/tailscale-tailworm-ssh-root-privesc Hacker Posts en 2026-10-27T00:00:00.000Z Tailscale warns of SSH flaws allowing root privilege escalation https://www.hackerposts.org/en/blog/university-of-copenhagen-breach-525000-cpr Hacker Posts en 2026-10-27T00:00:00.000Z University of Copenhagen breach exposes data on 525,000 people https://www.hackerposts.org/en/blog/unm-health-cybersecurity-incident-trauma-center Hacker Posts en 2026-10-27T00:00:00.000Z Cyber incident pulls New Mexico's only Level 1 trauma center offline https://www.hackerposts.org/en/blog/warp-breach-vendor-agent-logs-telemetry Hacker Posts en 2026-10-27T00:00:00.000Z Warp discloses vendor breach exposing agent logs and telemetry https://www.hackerposts.org/fr/blog/brotli2shell-cve-2026-111497-node-decodeur Hacker Posts fr 2026-10-27T00:00:00.000Z Brotli2Shell : CVE-2026-111497, débordement dans le décodeur Brotli https://www.hackerposts.org/fr/blog/cert-fr-retex-violations-donnees-applicatives Hacker Posts fr 2026-10-27T00:00:00.000Z Le CERT-FR publie un RETEX sur les violations de données applicatives https://www.hackerposts.org/fr/blog/cpython-certfr-2026-avi-1379 Hacker Posts fr 2026-10-27T00:00:00.000Z CPython : l'ANSSI relaie deux correctifs (CERTFR-2026-AVI-1379) https://www.hackerposts.org/fr/blog/engie-fuite-donnees-outil-partenaires Hacker Posts fr 2026-10-27T00:00:00.000Z ENGIE : fuite de données clients via un outil de ses partenaires commerciaux https://www.hackerposts.org/fr/blog/quad9-cloudflare-dns-france-blocage-judiciaire Hacker Posts fr 2026-10-27T00:00:00.000Z Quad9 quitte la France le 24 novembre sous astreinte judiciaire