● On the wire
Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges//FortiBleed Campaign Compromises Over 86,000 Fortinet Firewalls Globally//Zero-day in Check Point management servers exploited in targeted attacks//Two Citrix NetScaler Zero-Days Exploited Globally//Critical FortiMail zero-day actively exploited and added to the KEV catalog//New Attack Vector Against Citrix NetScaler After Initial Patches//F5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV Catalog//Two critical Citrix NetScaler zero-days exploited before patches became available//CISA Flags Three Linux Kernel Vulnerabilities Already Exploited//Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)//Cisco Secure Email Gateway zero-day actively exploited with root privileges//Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion//Cisco Secure Email Gateway: critical vulnerability actively exploited to gain root privileges//FortiBleed Campaign Compromises Over 86,000 Fortinet Firewalls Globally//Zero-day in Check Point management servers exploited in targeted attacks//Two Citrix NetScaler Zero-Days Exploited Globally//Critical FortiMail zero-day actively exploited and added to the KEV catalog//New Attack Vector Against Citrix NetScaler After Initial Patches//F5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV Catalog//Two critical Citrix NetScaler zero-days exploited before patches became available//CISA Flags Three Linux Kernel Vulnerabilities Already Exploited//Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)//Cisco Secure Email Gateway zero-day actively exploited with root privileges//Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion//
Microsoft stabilisce un nuovo record nel Patch Tuesday di settembre con 974 vulnerabilità risolte
Top story — News

Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed

Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues fixed include two zero-day vulnerabilities actively exploited in real-world attacks. One of these is CVE-2026-69414 (known as ShieldBreak), a privilege escalation vulnerability in Microsoft Defender. Just…

Read the article →
From the newsroom
Spotlight
N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksN-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical Networks
More news