Page traduite et vérifiée automatiquement. La version anglaise fait foi. Certaines parties restent en anglais le temps que leur traduction soit vérifiée. Voir en anglais · Signaler une erreur de traduction
Breach Watch
Rédigé pour les décisions en matière de risque, pas pour les gros titres.
Violations, rançongiciels, vulnérabilités, avis et renseignement sur les menaces, classés par le service de renseignement sur les menaces d’un sponsor fondateur et analysés dans une note ADTP pour chaque élément.
Showing 20 of 4,550
BREACH WATCH BRIEF
Claude Dispatch Flaw Enables Browser Extension RCE on Host OS
A newly disclosed flaw in Anthropic’s Claude Dispatch component allows malicious VS Code extensions to achieve remote code execution on the user’s operating system. The issue highlights the need for rigorous extension vetting and continuous control mapping to demonstrate compliance readiness.
BREACH WATCH BRIEF
CISA Adds SonicWall SonicOS SSLVPN Flaw to Known Exploited Vulnerabilities Catalog, Flagging Active Threat
CISA has listed a critical remote‑code‑execution bug in SonicWall’s SonicOS SSLVPN in its KEV catalog, indicating active exploitation. Organizations using SonicWall appliances must patch immediately and prove remediation to meet audit expectations.
BREACH WATCH BRIEF
Authentication Bypass in SonicWall SonicOS SSLVPN (CVE‑2026‑19868) Undermines SAML‑Enforced MFA
CISA added CVE‑2026‑19868, an authentication‑bypass flaw in SonicWall’s SSLVPN, to its KEV catalog. The vulnerability lets attackers with alternate valid credentials sidestep SAML‑based MFA, exposing remote‑access controls. Organizations must patch and verify MFA enforcement to maintain audit‑ready access controls.
BREACH WATCH BRIEF
SonicWall SSL‑VPN MFA Bypass (CVE‑2026‑19868) Confirmed Exploited – Urgent Patch Required
SonicWall disclosed CVE‑2026‑19868, a MFA‑bypass flaw in its SSL‑VPN that is being actively exploited. Organizations must patch and verify MFA controls to maintain audit‑ready authentication posture.
BREACH WATCH BRIEF
Alpine Linux OpenSSH Authentication Bypass (CVE‑2026‑123158) Allows Immediate Server Takeover
A newly disclosed OpenSSH flaw in Alpine Linux and other musl‑based distros lets an attacker log in with a crafted password payload, bypassing authentication entirely. The issue underscores the importance of hardened access‑control processes for audit readiness.
BREACH WATCH BRIEF
Multiple Critical Chrome Vulnerabilities (CVE‑2026‑121xxx) Could Enable Arbitrary Code Execution
CIS advisory 2026‑125 details 27 flaws in Chrome < 157.0.8103.38 that allow arbitrary code execution, potentially letting attackers install software or create privileged accounts. This highlights the importance of continuous patch‑management evidence for audit and control assurance.
BREACH WATCH BRIEF
QNAP NAS Devices Targeted via Exploited Plex2Shell Vulnerabilities (CVE‑2026‑96652‑96656)
Attackers are exploiting a chain of four Plex Media Server vulnerabilities (CVE‑2026‑96652‑96656) on QNAP NAS appliances. The flaws enable remote code execution when Plex is exposed to the internet, prompting urgent patching. This highlights the importance of continuous vulnerability management and auditable patch evidence for control‑assurance programs.
BREACH WATCH BRIEF
WordPress Update Process Vulnerability Allows Code Execution During Patch Installation
A logic flaw in WordPress's auto‑update routine lets attackers execute code while the fix is being installed, exposing any site that applies the patch without extra safeguards. This highlights the need for robust patch‑management controls and audit‑ready evidence.
BREACH WATCH BRIEF
OpenSSH “SSHole” (CVE‑2026‑123158) Enables Password‑less Root Access on Linux Systems
A newly disclosed OpenSSH vulnerability (CVE‑2026‑123158) lets threat actors log in to accounts without passwords on musl‑based Linux hosts with PAM disabled, leading to root compromise. The rapid exploitation underscores the need for robust authentication controls and timely patching for audit readiness.
BREACH WATCH BRIEF
OpenSSH Remote Authentication Bypass (CVE‑2026‑123158) Exploited Within Hours
A newly disclosed OpenSSH flaw (CVE‑2026‑123158) lets attackers log into password‑less accounts on Alpine Linux without a password, and it was seen in the wild less than nine hours after disclosure. The issue underscores the importance of hardened authentication controls for audit readiness.
BREACH WATCH BRIEF
Multiple Zero‑Day Flaws Discovered in D‑Link DGS‑3130 Managed Switches
D‑Link reports several unpatched zero‑day vulnerabilities in its DGS‑3130 series switches that could allow credential theft, unauthorized configuration changes, and service disruption. The issue highlights the importance of hardened access‑control and configuration‑management controls for audit readiness.
BREACH WATCH BRIEF
Remote Code Execution in Microsoft Paint (CVE‑2026‑83844) Fixed via Store Update Only
A remote code execution vulnerability in Windows Paint (CVE‑2026‑83844) has been patched, but the fix is delivered solely through the Microsoft Store. Organizations must verify that their patch‑management processes cover this non‑traditional update path to stay audit‑ready.
BREACH WATCH BRIEF
Malicious Browser Extensions Can Exploit Claude Dispatch to Run Code on Users’ Computers
Forever Security showed that a flaw in Anthropic’s Claude Dispatch feature allows malicious browser extensions to trigger code execution on Claude Desktop, potentially compromising any user who installs such extensions. The finding underscores the need for strict extension vetting and AI‑desktop integration controls for audit readiness.
BREACH WATCH BRIEF
CVE‑2026‑19868 SonicWall SonicOS SSLVPN Single‑Factor Auth Flaw Added to CISA KEV Catalog
CISA placed CVE‑2026‑19868, a SonicWall SSLVPN authentication bypass, into its Known Exploited Vulnerabilities catalog, signaling active exploitation and a federal mandate for rapid remediation. Organizations must enforce MFA and patch promptly to meet risk‑based vulnerability‑management expectations.
BREACH WATCH BRIEF
CISA Alerts Exploitation of WordPress Core Vulnerability (CVE‑2026‑119977) Enables Site Hijacking
CISA warns that CVE‑2026‑119977, a critical WordPress core update flaw, is being exploited to hijack sites. Organizations must patch immediately and capture evidence of remediation to satisfy control‑assurance requirements.
BREACH WATCH BRIEF
Remote Code Execution in OriginLab Origin Viewer (CVE‑2026‑114560) Enables Arbitrary Code Execution via Malicious OPJ Files
OriginLab’s Origin Viewer contains an out‑of‑bounds write in its OPJ file parser (CVE‑2026‑114560) that allows remote code execution when a user opens a crafted file. The vulnerability scores 7.8 (High) and is patched by the vendor. Organizations must patch promptly to satisfy control objectives for vulnerability management and maintain audit‑ready evidence.
BREACH WATCH BRIEF
Remote Code Execution in OriginLab Origin Viewer (CVE‑2026‑114561) Enables Arbitrary Code Execution
OriginLab’s Origin Viewer contains an out‑of‑bounds write bug in its OPJU file parser (CVE‑2026‑114561) that allows remote attackers to execute arbitrary code after a victim opens a malicious file. The issue is rated CVSS 7.8 and has been patched. Organizations must address it to maintain evidence of timely vulnerability remediation for audit readiness.
BREACH WATCH BRIEF
Remote Code Execution in OriginLab Origin Viewer (CVE‑2026‑114559) Enables Arbitrary Code via Malicious OGG Files
OriginLab’s Origin Viewer contains an out‑of‑bounds write flaw in its OGG parser (CVE‑2026‑114559) that lets remote attackers execute arbitrary code when a victim opens a crafted file. The vulnerability scores 7.8 CVSS and has been patched. For compliance teams, it highlights the importance of a disciplined vulnerability‑management control and timely evidence of remediation.
BREACH WATCH BRIEF
Use‑After‑Free RCE in Trimble SketchUp (CVE‑2026‑121741) Allows Remote Code Execution via Malicious SKP Files
Trimble SketchUp versions prior to 2027.0 contain a use‑after‑free vulnerability (CVE‑2026‑121741) that lets an attacker execute arbitrary code when a crafted SKP file is opened. The CVSS score is 7.8, indicating high severity. For compliance teams the issue underscores the importance of secure development controls and timely patch evidence.
BREACH WATCH BRIEF
Heap Buffer Overflow in OriginLab Origin Viewer (CVE‑2026‑114568) Enables Remote Code Execution
OriginLab Origin Viewer contains a heap‑based buffer overflow in its OPJ file parser (CVE‑2026‑114568) that lets an attacker execute arbitrary code after a user opens a malicious file. The vulnerability scores 7.8 CVSS and has been patched. For compliance teams, it highlights the need for robust secure‑coding controls and timely patch evidence.
Breach Watch intelligence is provided by a founding sponsor of the Association. Every ADTP brief carries the sponsor's analysis and links the original source.
Notes d’information pour les praticiens
Rédigé par l’association : ce que la veille de la semaine signifie pour les contrôles que vous appliquez.
Lire l’avis de violation d’un fournisseur pour ce qu’il ne dit pas
Une liste de contrôle pour transformer une notification de fournisseur en demande de preuves et en ajustement de la surveillance.
Là où les démarches d’inventaire de l’IA s’enlisent, et le contrôle qui les débloque
Enseignements de tables rondes de praticiens sur les programmes de gouvernance de l’IA au cours de leur première année.
Réutiliser les preuves pour la diligence client et l’audit
Comment les praticiens organisent une base de preuves unique pour répondre à la fois aux acheteurs et aux auditeurs.
Les signaux Global Privacy Control et les obligations de refus des États
Ce qu’un site doit faire lorsqu’il reçoit un signal GPC, et comment en apporter la preuve.
Recevoir la synthèse
Aucune adhésion requise. Confirmation par e-mail ; désabonnement en un clic.