ÉchelonÉCHELON
Archives

$ digest —date 2026-05-31

21 éléments sélectionnés

!Vulns(8)

[CRITICAL] CVE-2026-47416 — praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}
Vulns
GitHub Advisoryscore 100
[CRITICAL] CVE-2026-47410 — praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset
Vulns
GitHub Advisoryscore 100
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
Vulns
Bleeping Computerscore 75
Exploit Code Published for Critical Flowise RCE Vulnerability
Vulns
SecurityWeekscore 75
CVE-2026-9364 — A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument social_linked can lead to
Vulns
NVDCVSS 7.3score 73
CVE-2026-9366 — A vulnerability was found in NousResearch hermes-agent 2026.4.23. The impacted element is the function _scan_context_content of the file agent/prompt_builder.py. The manipulation results in injection.
Vulns
NVDCVSS 7.3score 73
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
Vulns
The Hacker Newsscore 65
SN 1080: Vulnerability Debt Repayment - Will Mythos Change Cybersecurity Forever?
Vulns
Security Nowscore 50

>Tools(1)

Risky Business #839 -- TeamPCP stole GitHub's internal repos
Tools
Risky Businessscore 50

#News(12)

Google served me Malware
News
John Hammondscore 95
Human Readable Code - Computerphile
News
NetworkChuckscore 94
Web Scraping with Python & JavaScript – MERN Stack Full Course
News
David Bombalscore 93
New CIFSwitch Linux flaw gives root on multiple distributions
News
Bleeping Computerscore 75
Name That Toon Contest
News
Dark Readingscore 75
[An RX Global Event] Infosecurity Europe
News
Dark Readingscore 75
Russian Spies Are Aggressively Seeking Western Technology as Sanctions Bite, Officials Say
News
SecurityWeekscore 75
CrowdStrike Named a Leader in 2026 Gartner® Magic Quadrant™ for Endpoint Protection for Seventh Consecutive Time
News
CrowdStrike Blogscore 75
Shadow AI: The Hidden Risk Expanding Across the Enterprise
News
CrowdStrike Blogscore 75
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
News
The Hacker Newsscore 65
Friday Squid Blogging: Another Squid
News
Schneier on Securityscore 65
Chilling Effects
News
Schneier on Securityscore 65