27 casos · pág. 1/2
The FBI and the U.S. Postal Inspection Service (USPIS) are investigating multiple letters containing suspicious white powder mailed to locations across the US. Recipients include elected officials, Secretaries of State and their election offices, media organizations, and public and private polling companies. Law enforcement is working to …
CERT-FR published advisory CERTFR-2026-AVI-1356 on 21 October 2026 about a vulnerability in the Traefik reverse proxy. It lets an attacker compromise data confidentiality and bypass the security policy. Affected versions are Traefik 3.x before 3.7.16 and Traefik versions before 2.11.60. The advisory does not report exploitation in the wil…
CERT-FR has published advisory CERTFR-2026-AVI-1355 on multiple vulnerabilities in Oracle WebLogic Server and the WebLogic Server Proxy Plug-in. The flaws allow a remote attacker to cause a denial of service and to breach the confidentiality and integrity of data. The advisory relies on the Oracle Critical Patch Update bulletin cpuoct2026…
The CERT-FR advisory CERTFR-2026-AVI-1358 reports multiple vulnerabilities in Apache Tomcat. According to the advisory, an attacker could exploit them to breach data confidentiality, bypass the security policy, or trigger an unspecified security issue. The advisory lists nine CVEs and does not report active exploitation. Apache published …
CERT-FR published advisory CERTFR-2026-AVI-1348 on 21 October 2026 about multiple vulnerabilities in Mattermost Server. The vendor has not specified the nature or impact of the flaws, and the advisory says only that an attacker could cause an unspecified security problem. The advisory cites Mattermost security bulletins MMSA-2026-00772 an…
CERT-FR advisory CERTFR-2026-AVI-1347 reports a vulnerability in the MongoDB PHP Driver that lets an attacker cause a remote denial of service. The flaw is tracked in the MongoDB security bulletin PHPC-276, dated 19 October 2026. The advisory does not mention active exploitation, CVE identifiers, IOCs or attribution. Technical Details - A…
CERT-FR advisory CERTFR-2026-AVI-1343 reports multiple vulnerabilities in the Laravel PHP framework. According to the advisory, a remote attacker could exploit them to cause a denial of service, compromise data integrity or bypass the security policy. The fixes are described in two Laravel GitHub security advisories published on 19 Octobe…
CERT-FR advisory CERTFR-2026-AVI-1344 reports multiple vulnerabilities in Mattermost Server. The vendor did not specify the security impact. The advisory covers fixes announced in Mattermost security bulletins dated 19 October 2026. It does not mention active exploitation, CVE identifiers, IOCs or attribution. Technical Details - Affected…
The French national CERT (CERT-FR, part of ANSSI) published a lessons-learned report on application data breaches. It states that in 2025 it tracked nearly 200 data breaches originating from web applications. In many cases the exfiltration relied on low-complexity attacker actions and did not exploit any technical vulnerability. The repor…
CERT-FR advisory CERTFR-2026-AVI-1339 reports multiple vulnerabilities in Stormshield Network Security (SNS). Depending on the flaw, an attacker could compromise data integrity, bypass the security policy or inject indirect remote code through cross-site scripting (XSS). The advisory refers to four Stormshield security bulletins dated 16 …
CERT-FR advisory CERTFR-2026-AVI-1337 reports multiple vulnerabilities in Juniper Networks Session Smart Router (SSR) that let an attacker cause a security issue the vendor has not specified. The advisory is based on Juniper security bulletin JSA112528 of 16 October 2026. It gives no CVE identifiers, exploitation status, technical root ca…
CERT-FR advisory CERTFR-2026-AVI-1338 reports a vulnerability in Mattermost Server that lets an attacker cause a security issue the vendor has not specified. It affects Mattermost Server 11.7.x versions earlier than 11.7.12. The advisory is based on Mattermost security bulletin MMSA-2026-00709 of 16 October 2026. It gives no CVE identifie…
CERT-FR advisory CERTFR-2026-AVI-1327, published 16 October 2026, reports multiple vulnerabilities in the Moxa AIG-302 Series industrial computing products. Per the advisory, some of them allow an attacker to compromise data confidentiality, compromise data integrity and bypass the security policy. The affected versions are all AIG-302 Se…
CERT-FR advisory CERTFR-2026-AVI-1329, published 16 October 2026, reports multiple vulnerabilities in Google Chrome. The advisory says they allow an attacker to cause a security problem that the vendor has not specified. It covers 15 CVEs and refers to the Google security bulletins of 15 October 2026 for the fixes. It gives no exploitatio…
The FBI issued a Public Service Announcement through IC3 cautioning that threats against election workers endanger individuals and jeopardize the stability of the US electoral process ahead of the November 2026 midterm election. The FBI defines election workers broadly: elected and appointed officials, staff, volunteers, contractors, vend…
The FBI warns that scammers are likely to exploit the 2026 US Midterm Election to run financial fraud schemes against victims across the United States. The PSA updates alert I-102924-PSA from 29 October 2024. Scammers use candidates' names, images, logos and slogans to solicit fake campaign contributions, sell merchandise that is never de…
The FBI and CISA issued a joint Public Service Announcement warning that malicious cyber actors may use phishing and smishing against election officials, candidates and political organizations ahead of the 2026 U.S. midterm elections. These targets are attractive because of their access to voter registration data, current government offic…
CERT-FR advisory CERTFR-2026-AVI-1328, published 16 October 2026, reports multiple vulnerabilities in the Mattermost Desktop App. The vendor did not specify the security impact, and the advisory only states that an attacker could cause an unspecified security problem. It is based on Mattermost security bulletins MMSA-2026-00778 and MMSA-2…
CERT-FR advisory CERTFR-2026-AVI-1319, published 15 October 2026, reports a vulnerability in PostgreSQL psqlODBC that lets a remote attacker cause a denial of service. The flaw is tracked as CVE-2026-109448 and affects psqlODBC versions prior to 18.00.0005. The advisory is based on the PostgreSQL project's security release of 14 October 2…
CERT-FR advisory CERTFR-2026-AVI-1318, published 15 October 2026, reports multiple vulnerabilities in Moodle that allow a remote attacker to perform cross-site scripting (XSS) and bypass the security policy. The advisory references CVE-2026-47759, CVE-2026-47761 and CVE-2026-47762, based on two Moodle security bulletins dated 15 October 2…
