ÉchelonÉCHELON
Archives

$ digest —date 2026-08-30

21 éléments sélectionnés

!Vulns(6)

[CRITICAL] CVE-2026-55634 — Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name
Vulns
GitHub Advisoryscore 100
[CRITICAL] CVE-2026-55220 — Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)
Vulns
GitHub Advisoryscore 100
CVE-2026-5388 — justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and sev
Vulns
NVDCVSS 9.8score 98
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Vulns
The Hacker Newsscore 75
Anthropic is cutting Claude Code's current weekly limits by 17%
Vulns
Bleeping Computerscore 75
CVE-2026-4671 — justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evaluate attacker-controlled selector strings (via query(),
Vulns
NVDCVSS 7.5score 75

>Tools(2)

GitHub Hacker EXPOSED BY HIS CAT
Tools
John Hammondscore 95
YARA-X 1.20.0 Release, (Sun, Aug 30th)
Tools
SANS ISCscore 75

#News(13)

Why CPU Time ≠ Wall Clock Time! - Computerphile
News
NetworkChuckscore 95
Meta Muse Code & Muse Spark Course – Build AI Agents, APIs, and Full-Stack Apps
News
David Bombalscore 91
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
News
The Hacker Newsscore 75
Brave browser adds email aliases to help users evade tracking
News
Bleeping Computerscore 75
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
News
Dark Readingscore 75
[Virtual Event] Building a Secure AI Strategy for the Enterprise
News
Dark Readingscore 75
CrowdStrike Named Strongest Overall Leader in 2026 Frost Radar™: Cloud Workload Protection Platforms
News
CrowdStrike Blogscore 75
Benchmaxxing: When the Benchmark Becomes the Target
News
CrowdStrike Blogscore 75
Friday Squid Blogging: Truckload of Squid Spills in Rhode Island
News
Schneier on Securityscore 65
AI Doesn’t Mean the End of Mathematics—at Least Not Yet
News
Schneier on Securityscore 65
Hasbro Data Breach Exposed Employee Personal Information
News
SecurityWeekscore 65
Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs
News
Risky Businessscore 50
SN 1093: Tokens in the Stream - Why LLMs are inherently insecure and prompt injection will persist
News
Security Nowscore 50