NewsSANS ISC Diary
How has use of framing protection security headers changed in the past 3 years?, (Wed, Jun 10th)
More on protection
Other advisories
- Not ratedosv:CVE-2026-63433MyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Value
- MediumCVE-2026-119509Eranfl ClickCease Click Fraud Protection: fehlende Autorisierung
- MediumCVE-2026-119509Eranfl ClickCease Click Fraud Protection: fehlende Autorisierung
- CriticalCVE-2026-56862Red Hat Security Advisory: Red Hat OpenShift API for Data Protection - 1.4.12
- Not ratedosv:CLEANSTART-2024-DW19044Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privi...
- Not ratedosv:CLEANSTART-2024-ZI70174Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access
- Not ratedosv:CLEANSTART-2025-UN19632Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object
- MediumCVE-2026-96636Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)
Other news entries
- Vercel rolls out new protection against stolen session cookie attacksNewsBleepingComputer
- Google Calendar phishing campaign hijacks sessions, bypasses MFANewsBleepingComputer
- UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?NewsArs Technica — Security
- 9 Cyber Awareness Tips That Actually Match Today's Maze of ThreatsNewsDark Reading
- When confusion reigns, trusted vendors must guide their SMB customersNewsESET WeLiveSecurity
- Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them MovingNewsThe Hacker News
- Norway's aid agency Norad says attackers took names and emails of all 20,614 Grants Portal usersBreachpwn.watch
- Microsoft fixes Remote Desktop failures caused by recent Windows updatesNewsBleepingComputer
Source: https://isc.sans.edu/diary/rss/33068
ID