● On the wire
Ubuntu 20.04 18.04 Linux Kernel Critical Network Threats USN-8666-1//Debian faces immediate security challenge with Chromium and code exploit//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Debian libnet-dns-perl Noticeable RCE DoS Resolution DSA-6459-1//Ubuntu 20.04 Linux Kernel Security Update USN-8668-1 CVE-2023-45896//Ubuntu Linux Kernel NVIDIA Privilege Escalation Exploit USN-8663-1//Ubuntu 24.04 LTS Linux Kernel NVIDIA Important Update Advisory 8669-1//Debian SPIP Critical Remote Code Execution Vuln DSA-6456-1//Debian OpenJDK 21 DSA-6457-1 Denial of Service Issues Fixed//Debian SABnzbd+ Essential Web Interface Bypass Correction DSA-6454-1//AWS EKS forensics: data sources and investigation tooling//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Who Secures AI When It Touches Every Security Team?//Ubuntu 16.04 LTS linux-fips Important Kernel Issues USN-8662-2//Ubuntu 20.04 18.04 Linux Kernel Critical Network Threats USN-8666-1//Debian faces immediate security challenge with Chromium and code exploit//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Debian libnet-dns-perl Noticeable RCE DoS Resolution DSA-6459-1//Ubuntu 20.04 Linux Kernel Security Update USN-8668-1 CVE-2023-45896//Ubuntu Linux Kernel NVIDIA Privilege Escalation Exploit USN-8663-1//Ubuntu 24.04 LTS Linux Kernel NVIDIA Important Update Advisory 8669-1//Debian SPIP Critical Remote Code Execution Vuln DSA-6456-1//Debian OpenJDK 21 DSA-6457-1 Denial of Service Issues Fixed//Debian SABnzbd+ Essential Web Interface Bypass Correction DSA-6454-1//AWS EKS forensics: data sources and investigation tooling//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Who Secures AI When It Touches Every Security Team?//Ubuntu 16.04 LTS linux-fips Important Kernel Issues USN-8662-2//
La CISA aggiunge quattro vulnerabilità critiche al catalogo KEV per sfruttamento attivo
Top story — News

CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a…

Read the article →
From the newsroom
Spotlight
FakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offs
More news