ÉchelonÉCHELON
Archives

$ digest —date 2026-09-06

22 éléments sélectionnés

!Vulns(7)

[CRITICAL] CVE-2026-73842 — OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation
Vulns
GitHub Advisoryscore 100
[CRITICAL] CVE-2026-75856 — CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning
Vulns
GitHub Advisoryscore 100
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
Vulns
SecurityWeekscore 75
In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation
Vulns
SecurityWeekscore 65
SN 1094: AI Patching Shortcomings - Should You Trust AI-Generated Code?
Vulns
Security Nowscore 50
CVE-2026-77454 — Incorrect Authorization vulnerability in ash-project ash_sql allows a caller to bypass a scoping or authorization filter expressed as exists/2 over a relationship that declares both a limit (or from_m
Vulns
NVD0score 0
CVE-2026-78038 — Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project ash_oban allows a user whose input reaches the :args option of AshOban.build_trigger/3 to re
Vulns
NVD0score 0

#News(15)

How Watermarks Track AI Generated Content - Computerphile
News
NetworkChuckscore 95
Inside the AI Hardware Engine – Full Semiconductor Supply Chain Course
News
David Bombalscore 95
Two Weeks of Black Hat & DEF CON (Vlog)
News
LiveOverflowscore 92
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
News
The Hacker Newsscore 75
Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
News
The Hacker Newsscore 75
Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain
News
Bleeping Computerscore 75
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
News
Dark Readingscore 75
[Virtual Event] Building a Secure AI Strategy for the Enterprise
News
Dark Readingscore 75
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
News
CrowdStrike Blogscore 75
CrowdStrike Delivers the Next Evolution of the Agentic SOC
News
CrowdStrike Blogscore 75
OpenAI admits it didn't disclose rogue AI wiki hijacking incident
News
Bleeping Computerscore 65
Friday Squid Blogging: Squid on a Stick at the New York State Fair
News
Schneier on Securityscore 65
Using a VM to Contain an AI Agent
News
Schneier on Securityscore 65
179: The Courthouse - Revisited
News
Darknet Diariesscore 50
Risky Business #851 -- Agents are just ones and zeros, and tigers are just atoms
News
Risky Businessscore 50