● On the wire
Ubuntu libxs-parse-keyword-perl Update Prevents Denial of Service//Ubuntu PyJWT Fixes DoS and Token Key Issues in USN-8934-1//Debian Firefox ESR Update Blocks Access to eMudhra Certificates//Cisco Expressway Series Remote Code Execution Vulnerability//Ubuntu ca-certificates Update Removes Compromised Root CAs//Cisco Unified Communications Manager Improper Access Control Vulnerability//Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability//Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Cisco Expressway Series Information Disclosure Vulnerability//Ubuntu PHP Updates Address Remote Code Execution Risks in Multiple Releases//Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//Multiple Cisco Products Snort 3 Denial of Service Vulnerability//Vulnerabilities in PHP Affecting Cisco Products: October 2026//Debian nginx Update Addresses Memory and Authentication Risks//OSCP+ Scoring Update: What You Need to Know//Ubuntu libxs-parse-keyword-perl Update Prevents Denial of Service//Ubuntu PyJWT Fixes DoS and Token Key Issues in USN-8934-1//Debian Firefox ESR Update Blocks Access to eMudhra Certificates//Cisco Expressway Series Remote Code Execution Vulnerability//Ubuntu ca-certificates Update Removes Compromised Root CAs//Cisco Unified Communications Manager Improper Access Control Vulnerability//Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability//Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Cisco Expressway Series Information Disclosure Vulnerability//Ubuntu PHP Updates Address Remote Code Execution Risks in Multiple Releases//Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//Multiple Cisco Products Snort 3 Denial of Service Vulnerability//Vulnerabilities in PHP Affecting Cisco Products: October 2026//Debian nginx Update Addresses Memory and Authentication Risks//OSCP+ Scoring Update: What You Need to Know//
Microsoft stabilisce un nuovo record nel Patch Tuesday di settembre con 974 vulnerabilità risolte
Top story — News

Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed

Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues fixed include two zero-day vulnerabilities actively exploited in real-world attacks. One of these is CVE-2026-69414 (known as ShieldBreak), a privilege escalation vulnerability in Microsoft Defender. Just…

Read the article →
From the newsroom
Spotlight
Zero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogZero-day critico in Cisco Catalyst SD-WAN Manager sfruttato attivamenteCritical Zero-Day in Cisco Catalyst SD-WAN Manager Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogZero-day critico in Cisco Catalyst SD-WAN Manager sfruttato attivamenteCritical Zero-Day in Cisco Catalyst SD-WAN Manager Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already Exploited
More news