Auteur/autrice : Cyber Redaction
[Cybersécurité] Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access
Ivanti is warning that a new security flaw impacting Endpoint Manager Mobile (EPMM) has been explored in limited attacks in the wild.
The high-severity vulnerability, CVE-2026-6973 (CVSS score: 7.2),
[Cybersécurité] PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage
Palo Alto Networks has disclosed that threat actors may have attempted to unsuccessfully exploit a recently disclosed critical security flaw as early as April 9, 2026.
The vulnerability in question is
[Cybersécurité] Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Wind
[Cybersécurité] Canvas Breach Disrupts Schools & Colleges Nationwide
An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, af
[Cybersécurité] Funnel Builder WordPress plugin bug exploited to steal credit cards
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript snippets into WooCommerce checkout pages. […]
[Cybersécurité] OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation
OpenAI has launched Daybreak, a new cybersecurity initiative that brings together frontier artificial intelligence (AI) model capabilities and Codex Security to help organizations identify and patch v
[Cybersécurité] Feds Disrupt IoT Botnets Behind Huge DDoS Attacks
The U.S. Justice Department joined authorities in Canada and Germany in dismantling the online infrastructure behind four highly disruptive botnets that compromised more than three million hacked Inte
[Cybersécurité] One Click, Total Shutdown: The « Patient Zero » Webinar on Killing Stealth Breaches
The hardest part of cybersecurity isn’t the technology, it’s the people.
Every major breach you’ve read about lately usually starts the same way: one employee, one clever email, and one « Patient Zero »
[Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
Threat actors have been observed attempting to exploit a recently disclosed security vulnerability in PraisonAI, an open-source multi-agent orchestration framework, within four hours of its public dis
[Cybersécurité] Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions
Details have emerged about a new, unpatched local privilege escalation (LPE) vulnerability impacting the Linux kernel.
Dubbed Dirty Frag, it has been described as a successor to Copy Fail (CVE-2026-31
![[Cybersécurité] Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access](https://cyber.kiminox.net/wp-content/uploads/2024/10/cybersecurity_img2-100x100.png)
![[Cybersécurité] Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4201-1780643553-100x100.png)
![[Cybersécurité] Canvas Breach Disrupts Schools & Colleges Nationwide](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4198-1781519183-100x100.png)
![[Cybersécurité] Funnel Builder WordPress plugin bug exploited to steal credit cards](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4202-1780738583-100x100.png)
![[Cybersécurité] OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4199-1781537944-100x100.png)
![[Cybersécurité] Feds Disrupt IoT Botnets Behind Huge DDoS Attacks](https://cyber.kiminox.net/wp-content/uploads/2026/05/cyber-4218-1793598342-100x100.png)
![[Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure [Cybersécurité] PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure](https://cyber.kiminox.net/wp-content/uploads/2026/05/cybersecurite-praisonai-cve-2026-44338-auth-bypass-targeted-within-hours-of-disclosure-4200-1793875470-100x100.png)