● On the wire
Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1//Ubuntu libgphoto2 Important Buffer Abuse Denial of Service Vuln 8586-1//Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1//Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1//Debian pdns-recursor Critical Cache Poisoning DNSSEC Bypass DSA-6397-1//Ubuntu Linux Kernel Critical Privilege Escalation Issues USN-8596-1//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//Debian webkit2gtk Critical JavaScript Exec Risk DSA-6398-1//Debian Firefox ESR Important Code Execution Risks DSA-6394-1//Rondo Meets Geoserver, (Wed, Jul 22nd)//Ubuntu 22.04 LTS Linux Kernel Critical Risk Multiple Issues USN-8595-1//Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897//Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1//Ubuntu libgphoto2 Important Buffer Abuse Denial of Service Vuln 8586-1//Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1//Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1//Debian pdns-recursor Critical Cache Poisoning DNSSEC Bypass DSA-6397-1//Ubuntu Linux Kernel Critical Privilege Escalation Issues USN-8596-1//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//Debian webkit2gtk Critical JavaScript Exec Risk DSA-6398-1//Debian Firefox ESR Important Code Execution Risks DSA-6394-1//Rondo Meets Geoserver, (Wed, Jul 22nd)//Ubuntu 22.04 LTS Linux Kernel Critical Risk Multiple Issues USN-8595-1//Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897//
WordPress wp2shell: la catena di exploit che sta alimentando la scansione di massa
Top story — News

WordPress wp2shell: the exploit chain fueling mass scanning

Two critical WordPress vulnerabilities, CVE-2026-63030 and CVE-2026-60137, have been combined into the chain known as wp2shell, capable of going from an unauthenticated request all the way to full site compromise. After the patch was published, attackers began mass scanning and exploiting the flaw within hours, turning the fix into a roadmap for exploitation. Researchers’ reports show that many groups initially…

Read the article →
From the newsroom
Ransomware sulla filiera del freddo in Giappone
News

Ransomware on Japan’s cold chain

A ransomware attack hit a Japanese food logistics company, causing delays and disruptions in the distribution chain for frozen products to thousands of customers. Among those affected are said to be major restaurant chains,…

Read the article →
Spotlight
OpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralism
More news