ÉchelonÉCHELON
Archives

$ digest —date 2026-04-05

22 éléments sélectionnés

!Vulns(7)

[CRITICAL] CVE-2026-35459 — pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)
Vulns
GitHub Advisoryscore 100
[CRITICAL] CVE-2026-35216 — Budibase: Unauthenticated Remote Code Execution via Webhook Trigger and Bash Automation Step
Vulns
GitHub Advisoryscore 100
CVE-2026-32922 — OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broader scopes by failing to constrai
Vulns
NVDCVSS 9.9score 99
CVE-2026-32924 — OpenClaw before 2026.3.12 contains an authorization bypass vulnerability where Feishu reaction events with omitted chat_type are misclassified as p2p conversations instead of group chats. Attackers ca
Vulns
NVDCVSS 9.8score 98
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
Vulns
The Hacker Newsscore 75
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
Vulns
The Hacker Newsscore 75
Risky Business #831 -- The AI bugpocalypse begins
Vulns
Risky Businessscore 50

>Tools(1)

AI-Assisted Coding Tutorial – OpenClaw, GitHub Copilot, Claude Code, CodeRabbit, Gemini CLI
Tools
David Bombalscore 89

#News(14)

Post Quantum Cryptography - Computerphile
News
NetworkChuckscore 95
Lessons from 15,031 hours of coding live on Twitch with Chris Griffing [Podcast #214]
News
David Bombalscore 90
Axios npm hack used fake Teams error fix to hijack maintainer account
News
Bleeping Computerscore 75
Device code phishing attacks surge 37x as new kits spread online
News
Bleeping Computerscore 75
Black Hat USA
News
Dark Readingscore 75
European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack
News
SecurityWeekscore 75
STARDUST CHOLLIMA Likely Compromises Axios npm Package
News
CrowdStrike Blogscore 75
Falcon for IT Supports Windows Secure Boot Certificate Lifecycle Management
News
CrowdStrike Blogscore 75
Inconsistent Privacy Labels Don't Tell Users What They Are Getting
News
Dark Readingscore 65
Friday Squid Blogging: Jurassic Fish Chokes on Squid
News
Schneier on Securityscore 65
Company that Secretly Records and Publishes Zoom Meetings
News
Schneier on Securityscore 65
Siemens SICAM 8 Products
News
CISA Alertsscore 65
How the World Got Owned Episode 2: The 1990s, Part One
News
Risky Businessscore 50
SN 1072: LiteLLM - Click Fix Attacks Surge
News
Security Nowscore 50