● On the wire
Ubuntu 20.04 LTS Linux Kernel KVM Important Network Attack Fix USN-8667-1//Ubuntu 24.04 LTS Linux Kernel NVIDIA Important Update Advisory 8669-1//Debian OpenJDK Exposure of Information Denial of Service DSA-6460-1//DOUBLECUP's PNG Payload, (Mon, Aug 24th)//Ubuntu 22.04 LTS Low Latency Kernel Key for Packet Injection 2026-8661-2//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Debian Thunderbird Important Code Execution Info Disclosure DSA-6461-1//AWS EKS forensics: data sources and investigation tooling//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Debian libnet-dns-perl Noticeable RCE DoS Resolution DSA-6459-1//Ubuntu 22.04 LTS Linux Kernel Security Issues USN-8658-2//Ubuntu 24.04 LTS Linux Kernel Security Issues Local Exploit USN-8665-1//Ubuntu 24.04 LTS Linux Kernel HWE Critical Security Flaw CVE-2026-64531//Ubuntu 16.04 LTS linux-fips Important Kernel Issues USN-8662-2//Debian libgit2 Vulnerability DSA-6453-1 for Command Execution Risks//Ubuntu 20.04 LTS Linux Kernel KVM Important Network Attack Fix USN-8667-1//Ubuntu 24.04 LTS Linux Kernel NVIDIA Important Update Advisory 8669-1//Debian OpenJDK Exposure of Information Denial of Service DSA-6460-1//DOUBLECUP's PNG Payload, (Mon, Aug 24th)//Ubuntu 22.04 LTS Low Latency Kernel Key for Packet Injection 2026-8661-2//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Debian Thunderbird Important Code Execution Info Disclosure DSA-6461-1//AWS EKS forensics: data sources and investigation tooling//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Debian libnet-dns-perl Noticeable RCE DoS Resolution DSA-6459-1//Ubuntu 22.04 LTS Linux Kernel Security Issues USN-8658-2//Ubuntu 24.04 LTS Linux Kernel Security Issues Local Exploit USN-8665-1//Ubuntu 24.04 LTS Linux Kernel HWE Critical Security Flaw CVE-2026-64531//Ubuntu 16.04 LTS linux-fips Important Kernel Issues USN-8662-2//Debian libgit2 Vulnerability DSA-6453-1 for Command Execution Risks//
La CISA aggiunge quattro vulnerabilità critiche al catalogo KEV per sfruttamento attivo
Top story — News

CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a…

Read the article →
From the newsroom
Ransomware sulla filiera del freddo in Giappone
News

Ransomware on Japan’s cold chain

A ransomware attack hit a Japanese food logistics company, causing delays and disruptions in the distribution chain for frozen products to thousands of customers. Among those affected are said to be major restaurant chains,…

Read the article →
Spotlight
WordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderDue milioni di auto con antifurto installato dal concessionario sono esposte via BluetoothTwo million cars with dealer-installed anti-theft systems are exposed via BluetoothLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismWordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderDue milioni di auto con antifurto installato dal concessionario sono esposte via BluetoothTwo million cars with dealer-installed anti-theft systems are exposed via BluetoothLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralism
More news