Veille CyberInfra — Veille cybersecurite : OpenSSH flaw lets attackers log into password-disabled Linux accounts Veille CyberInfra — Veille cybersecurite : Chainalysis says breach exposed credentials for all customers Veille CyberInfra — Veille cybersecurite : Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login Veille CyberInfra — Veille cybersecurite : Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs Veille CyberInfra — Veille cybersecurite : Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts Veille CyberInfra — Veille cybersecurite : Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers Veille CyberInfra — Veille cybersecurite : OpenSSH flaw lets attackers log into password-disabled Linux accounts Veille CyberInfra — Veille cybersecurite : Chainalysis says breach exposed credentials for all customers Veille CyberInfra — Veille cybersecurite : Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login Veille CyberInfra — Veille cybersecurite : Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs Veille CyberInfra — Veille cybersecurite : Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts Veille CyberInfra — Veille cybersecurite : Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers

Veille cybersecurite : CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

04/11/2026

Source : The Hacker News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog