● On the wire
Who Secures AI When It Touches Every Security Team?//Ubuntu 24.04 LTS Linux Kernel HWE Critical Security Flaw CVE-2026-64531//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//Ubuntu PostgreSQL Critical Buffer Overflow SQL Injection Vuln 8653-1//Debian OpenJDK Exposure of Information Denial of Service DSA-6460-1//Debian Thunderbird Important Code Execution Info Disclosure DSA-6461-1//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Ubuntu 22.04 LTS Linux Kernel Security Issues USN-8658-2//Ubuntu 20.04 18.04 Linux Kernel Critical Network Threats USN-8666-1//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//Debian DSA-6458-1 Gst-Plugins-Bad1.0 Critical DoS Code Exec//Ubuntu 24.04 LTS Linux Kernel Security Issues Local Exploit USN-8665-1//Ubuntu 16.04 LTS linux-fips Important Kernel Issues USN-8662-2//Debian libnet-dns-perl Noticeable RCE DoS Resolution DSA-6459-1//Who Secures AI When It Touches Every Security Team?//Ubuntu 24.04 LTS Linux Kernel HWE Critical Security Flaw CVE-2026-64531//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//Ubuntu PostgreSQL Critical Buffer Overflow SQL Injection Vuln 8653-1//Debian OpenJDK Exposure of Information Denial of Service DSA-6460-1//Debian Thunderbird Important Code Execution Info Disclosure DSA-6461-1//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Ubuntu 22.04 LTS Linux Kernel Security Issues USN-8658-2//Ubuntu 20.04 18.04 Linux Kernel Critical Network Threats USN-8666-1//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//Debian DSA-6458-1 Gst-Plugins-Bad1.0 Critical DoS Code Exec//Ubuntu 24.04 LTS Linux Kernel Security Issues Local Exploit USN-8665-1//Ubuntu 16.04 LTS linux-fips Important Kernel Issues USN-8662-2//Debian libnet-dns-perl Noticeable RCE DoS Resolution DSA-6459-1//
La CISA aggiunge quattro vulnerabilità critiche al catalogo KEV per sfruttamento attivo
Top story — News

CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a…

Read the article →
From the newsroom
Spotlight
Italy fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offs
More news