● On the wire
Ubuntu 24.04 openCryptoki Important Access Issues USN-8686-1//Ubuntu 20.04 Linux Kernel Azure CVM Security Update USN-8658-4//Debian Emacs Critical Code Exec DoS Issue DSA-6468-1 CVE-2026-6861//Some Malicious PE Stats, (Thu, Aug 27th)//Breaking Claude Code Opus 5 Auto Mode//Ubuntu 20.04 Bind9 Important DoS Resource Issues CVE-2026-3039 USN-8682-1//MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear)//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//Ubuntu OpenSSL Important Denial of Service Vulnern USN-8678-2//Debian Cockpit Significant Code Execution Service Denial DSA-6474-1//ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)//Ubuntu 22.04 LTS Kernel Critical Network Flaw Update USN-8661-3//When it Snows it Pours – Anatomy of a ServiceNow Red Team//QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation (to appear)//Ubuntu 24.04 openCryptoki Important Access Issues USN-8686-1//Ubuntu 20.04 Linux Kernel Azure CVM Security Update USN-8658-4//Debian Emacs Critical Code Exec DoS Issue DSA-6468-1 CVE-2026-6861//Some Malicious PE Stats, (Thu, Aug 27th)//Breaking Claude Code Opus 5 Auto Mode//Ubuntu 20.04 Bind9 Important DoS Resource Issues CVE-2026-3039 USN-8682-1//MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear)//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//Ubuntu OpenSSL Important Denial of Service Vulnern USN-8678-2//Debian Cockpit Significant Code Execution Service Denial DSA-6474-1//ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)//Ubuntu 22.04 LTS Kernel Critical Network Flaw Update USN-8661-3//When it Snows it Pours – Anatomy of a ServiceNow Red Team//QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation (to appear)//
Arresti in Australia per TeamPCP e maxi campagna di supply-chain compromise
Top story — News

Arrests in Australia for TeamPCP and a massive supply-chain compromise campaign

Australian police have charged two men from Western Australia, accused of being part of the TeamPCP group, at the center of a long-running campaign of software supply chain attacks. According to authorities, the group hid malicious code in open source projects and then used it to steal credentials and data from thousands of organizations worldwide. Investigations, carried out together with…

Read the article →
From the newsroom
Spotlight
Smantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesCISA dimostra il divario difensivo in due infrastrutture criticheCISA Demonstrates the Defensive Gap in Two Critical InfrastructuresTrojan bancario brasiliano in espansione in PortogalloBrazilian banking trojan expanding into PortugalLa campagna ClickFake nordcoreana punta i professionisti Web3North Korean ClickFake campaign targets Web3 professionalsHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesCISA dimostra il divario difensivo in due infrastrutture criticheCISA Demonstrates the Defensive Gap in Two Critical InfrastructuresTrojan bancario brasiliano in espansione in PortogalloBrazilian banking trojan expanding into PortugalLa campagna ClickFake nordcoreana punta i professionisti Web3North Korean ClickFake campaign targets Web3 professionalsHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilities
More news