● On the wire
Debian Trixie php-mongodb Denial of Service Fixes and Updates//Vulnerabilities in Node.js Affecting Cisco Products: October 2026//Cohere’s Qwen Story: Looks More Like Model Jaggedness//Debian Firefox ESR Update Addresses Multiple Security Issues//Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability//Debian OpenJDK 21 Update Addresses Multiple Java Runtime Risks//Debian Chromium Fixes Code Execution and Disclosure Issues//Debian OpenJDK-25 Update Fixes Sandbox and Certificate Issues//Apple Patches for October 2026, (Mon, Oct 26th)//Kali Linux 2026.3 Release (Build-Scripts Refresh)//ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)//Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)//Scalable Vector Grief//Vulnerabilities in node.js Affecting Cisco Products: October 2026//Debian Valkey Update Blocks Denial of Service and Code Execution//Debian Trixie php-mongodb Denial of Service Fixes and Updates//Vulnerabilities in Node.js Affecting Cisco Products: October 2026//Cohere’s Qwen Story: Looks More Like Model Jaggedness//Debian Firefox ESR Update Addresses Multiple Security Issues//Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability//Debian OpenJDK 21 Update Addresses Multiple Java Runtime Risks//Debian Chromium Fixes Code Execution and Disclosure Issues//Debian OpenJDK-25 Update Fixes Sandbox and Certificate Issues//Apple Patches for October 2026, (Mon, Oct 26th)//Kali Linux 2026.3 Release (Build-Scripts Refresh)//ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)//Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)//Scalable Vector Grief//Vulnerabilities in node.js Affecting Cisco Products: October 2026//Debian Valkey Update Blocks Denial of Service and Code Execution//
Vulnerabilità critica di VM-Escape corretta in VMware Workstation e Fusion
Top story — News

Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion

Broadcom has released urgent security updates to fix a critical integer overflow vulnerability (CVE-2026-59346) in VMware Workstation and Fusion. This flaw, which has a CVSS score of 9.3, resides in the VMXNET3 virtual network adapter. An attacker with local administrative privileges on the virtual machine can exploit this flaw to execute arbitrary code on the underlying host system. No temporary…

Read the article →
From the newsroom
Spotlight
Zero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFurto da oltre 351 milioni di dollari a Bitget attribuito ad attori nordcoreaniTheft of Over $351 Million from Bitget Attributed to North Korean ActorsCISA segnala attacchi attivi contro Microsoft SharePoint e MikroTik RouterOSCISA Reports Active Attacks Against Microsoft SharePoint and MikroTik RouterOSDue zero-day critiche di Citrix NetScaler sfruttate prima della disponibilità delle patchTwo critical Citrix NetScaler zero-days exploited before patches became availableDue zero-day Citrix NetScaler sfruttati globalmenteTwo Citrix NetScaler Zero-Days Exploited GloballyLo sfruttamento dei nuovi zero-day Citrix NetScaler diventa massivoExploitation of New Citrix NetScaler Zero-Days Becomes WidespreadZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFurto da oltre 351 milioni di dollari a Bitget attribuito ad attori nordcoreaniTheft of Over $351 Million from Bitget Attributed to North Korean ActorsCISA segnala attacchi attivi contro Microsoft SharePoint e MikroTik RouterOSCISA Reports Active Attacks Against Microsoft SharePoint and MikroTik RouterOSDue zero-day critiche di Citrix NetScaler sfruttate prima della disponibilità delle patchTwo critical Citrix NetScaler zero-days exploited before patches became availableDue zero-day Citrix NetScaler sfruttati globalmenteTwo Citrix NetScaler Zero-Days Exploited GloballyLo sfruttamento dei nuovi zero-day Citrix NetScaler diventa massivoExploitation of New Citrix NetScaler Zero-Days Becomes Widespread
More news