Chrome: establish the remediation scope
Chrome: impact requiring vendor clarification. This 2026-06-05 case examines 3 version entries and 429 CVEs, documented releases and checks suited to browsers, using CERTFR-2026-AVI-0692.
Digital strategy
Connect technology choices, organisation, risk and business goals to build a realistic and durable digital strategy.
204 articles · Latest article updated
Active IQ Config Advisor: restore access controls
Active IQ Config Advisor: security control bypass. This 2026-06-04 case examines 2 version entries and 2 CVEs, documented releases and checks suited to backup systems, using CERTFR-2026-AVI-0686.
ArubaOS-CX: restore access controls
ArubaOS-CX: security control bypass. This 2026-06-03 case examines 4 version entries and 1 CVE, documented releases and checks suited to network access, using CERTFR-2026-AVI-0683.
Firefox pour iOS: contain code execution
Firefox pour iOS: remote code execution. This 2026-06-02 case examines 1 version entry and 2 CVEs, documented releases and checks suited to browsers, using CERTFR-2026-AVI-0676.
Anti Targeted Attack Server: prepare service continuity
Anti Targeted Attack Server: denial of service. This 2026-06-01 case examines 1 version entry and 1 CVE, documented releases and checks suited to detection tools, using CERTFR-2026-AVI-0668.
Oracle Database Server (Net Service): contain code execution
Oracle Database Server (Net Service): remote code execution. This 2026-05-30 case examines 1 version entry and 3 CVEs, documented releases and checks suited to databases, using CERTFR-2026-AVI-0662.
SUSE: control privileged access
SUSE: privilege escalation. This 2026-05-29 case examines 11 version entries and 75 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0664.
NetApp: contain code execution
NetApp: remote code execution. This 2026-05-28 case examines 5 version entries and 1 CVE, documented releases and checks suited to backup systems, using CERTFR-2026-AVI-0656.
NGINX Plus, NGINX Open Source: contain code execution
NGINX Plus, NGINX Open Source: remote code execution. This 2026-05-26 case examines 4 version entries and 1 CVE, documented releases and checks suited to network access, using CERTFR-2026-AVI-0643.
Debian 11 bullseye: control privileged access · 2026-05-25
Debian 11 bullseye: privilege escalation. This 2026-05-25 case examines 2 version entries and 1 CVE, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0636.
Vision One, Apex One: control privileged access
Vision One, Apex One: privilege escalation. This 2026-05-24 case examines 3 version entries and 8 CVEs, documented releases and checks suited to detection tools, using CERTFR-2026-AVI-0642.
Debian trixie, Debian bookworm: control privileged access
Debian trixie, Debian bookworm: privilege escalation. This 2026-05-23 case examines 2 version entries and 6 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0637.
SPIP: restore access controls
SPIP: security control bypass. This 2026-05-22 case examines 1 version entry and 0 CVEs, documented releases and checks suited to web applications, using CERTFR-2026-AVI-0635.
Java CAS client: protect accessible data
Java CAS client: loss of confidentiality. This 2026-05-21 case examines 1 version entry and 0 CVEs, documented releases and checks suited to identity systems, using CERTFR-2026-AVI-0625.
Suricata: contain code execution
Suricata: remote code execution. This 2026-05-20 case examines 2 version entries and 16 CVEs, documented releases and checks suited to detection tools, using CERTFR-2026-AVI-0614.
Turning threat intelligence into board-level action
Threat intelligence already provides many companies with reliable insights into attackers, campaigns, vulnerabilities, and industry-specific threats. However, its value contribution often fails due to a key obstacle: the information gained…
Azure Local: control privileged access
Azure Local: privilege escalation. This 2026-05-19 case examines 2 version entries and 1 CVE, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0611.
Microsoft Edge: contain code execution
Microsoft Edge: remote code execution. This 2026-05-18 case examines 1 version entry and 76 CVEs, documented releases and checks suited to browsers, using CERTFR-2026-AVI-0607.
Safari: restore access controls
Safari: security control bypass. This 2026-05-15 case examines 1 version entry and 21 CVEs, documented releases and checks suited to browsers, using CERTFR-2026-AVI-0590.
Azure SDK pour Java: contain code execution
Azure SDK pour Java: remote code execution. This 2026-05-14 case examines 11 version entries and 7 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0587.
.NET 9.0 sur Mac OS: control privileged access
.NET 9.0 sur Mac OS: privilege escalation. This 2026-05-13 case examines 15 version entries and 2 CVEs, documented releases and checks suited to runtime platforms, using CERTFR-2026-AVI-0586.
Nextcloud Enterprise Server: restore access controls
Nextcloud Enterprise Server: security control bypass. This 2026-05-12 case examines 19 version entries and 10 CVEs, documented releases and checks suited to web applications, using CERTFR-2026-AVI-0569.
Why UX/UI Design is the Backbone of Successful Digital Agencies
In today's hyper-competitive digital landscape, the ability to attract, engage, and retain users is the defining factor for any organization's online presence. At the heart of this process lies UX/UI design - disciplines essential not just for…
The Power of Copywriting in Digital Storytelling for Modern Businesses
In today's digital-first landscape, brands are constantly seeking ways to stand out and connect with increasingly discerning audiences. Central to this mission is the art of digital storytelling, a discipline that goes far beyond simply sharing…