● On the wire
Vulnerabilities in PHP Affecting Cisco Products: October 2026//Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Debian Trixie PHP 8.4 Fixes Memory Tracking Code Execution//Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability//Debian Firefox ESR Update Blocks Access to eMudhra Certificates//Ubuntu PHP Updates Address Remote Code Execution Risks in Multiple Releases//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Ubuntu PyJWT Fixes DoS and Token Key Issues in USN-8934-1//Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//Cisco Expressway Series Security Hardening Release: October 2026//OSCP+ Scoring Update: What You Need to Know//Ubuntu libxs-parse-keyword-perl Update Prevents Denial of Service//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Vulnerabilities in PHP Affecting Cisco Products: October 2026//Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Debian Trixie PHP 8.4 Fixes Memory Tracking Code Execution//Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability//Debian Firefox ESR Update Blocks Access to eMudhra Certificates//Ubuntu PHP Updates Address Remote Code Execution Risks in Multiple Releases//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Ubuntu PyJWT Fixes DoS and Token Key Issues in USN-8934-1//Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//Cisco Expressway Series Security Hardening Release: October 2026//OSCP+ Scoring Update: What You Need to Know//Ubuntu libxs-parse-keyword-perl Update Prevents Denial of Service//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//
Campagna FortiBleed compromette oltre 86.000 firewall Fortinet globalmente
Top story — News

FortiBleed Campaign Compromises Over 86,000 Fortinet Firewalls Globally

The FBI and the U.S. Secret Service have issued a joint alert regarding 'FortiBleed,' a massive credential-harvesting campaign that has already compromised 86,644 Fortinet FortiGate devices and SSL VPN gateways across 194 countries. The attackers exploit reused or leaked credentials and the legacy storage of passwords using SHA-256 to gain access and, in some cases, lock out legitimate administrators by…

Read the article →
From the newsroom
Spotlight
Sfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionSfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news