ÉchelonÉCHELON
Archives

$ digest —date 2026-06-28

21 éléments sélectionnés

!Vulns(4)

[CRITICAL] CVE-2026-53519 — Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key
Vulns
GitHub Advisoryscore 100
CVE-2025-71348 — picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods. Attackers can craft pickle files embedding arbitrary
Vulns
NVDCVSS 8.1score 81
CVE-2025-71357 — picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that execute
Vulns
NVDCVSS 8.1score 81
[HIGH] GHSA-qrv3-253h-g69c — pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config
Vulns
GitHub Advisoryscore 80

>Tools(4)

Github got Hacked by CATS
Tools
John Hammondscore 90
Clean GitHub repo tricks AI coding agents into running malware
Tools
Bleeping Computerscore 75
Chinese Framework Powers 200,000 Scam Sites
Tools
SecurityWeekscore 75
YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th)
Tools
SANS ISCscore 75

#News(13)

Why AI is like a (Clever Hans) Horse - Computerphile
News
NetworkChuckscore 93
How Hackers Think
News
David Bombalscore 92
Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials
News
The Hacker Newsscore 75
OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
News
The Hacker Newsscore 75
Third-Party Breaches Teach Education Sector a Costly Lesson in Vendor Risk
News
Dark Readingscore 75
The Identity Problem Hiding in AI Agent Deployments
News
CrowdStrike Blogscore 75
94% of Organizations Report Cloud Breaches: CrowdStrike State of CDR Survey
News
CrowdStrike Blogscore 75
FBI: Russian hackers now target Signal backup recovery keys
News
Bleeping Computerscore 65
AI Decline? Confidence in Autonomous Penetration Testing Falls
News
Dark Readingscore 65
The Chinese Control the Majority of Argentina’s Squid Fleet
News
Schneier on Securityscore 65
Meta Is Testing Facial Recognition for Police and Military
News
Schneier on Securityscore 65
Risky Business #843 -- Fortibleed is kinda awesome, actually
News
Risky Businessscore 50
SN 1084: The Residential Proxy Threat - Malicious Proxies in Your Living Room
News
Security Nowscore 50