● On the wire
Ubuntu 24.04 LTS Linux Kernel Critical Issues Update USN-8636-2//Ubuntu 26.04 introduces vital fixes for LibTIFF denial of service flaw//Debian SRT Important DoS Encryption Bypass Vulnerabilities DSA-6450-1//Ubuntu 26.04 libssh Important Denial of Service Vulnerability USN-8093-2//Ubuntu 22.04 LTS Linux Kernel Security Update USN-8630-3//Cisco RoomOS Stack Overflow Vulnerability//Ubuntu 26.04 LTS c3p0 Important Remote Code Exec Vulnerability USN-8642-1//Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability//Breaking secure boot without breaking the crypto//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Ubuntu 24.04 LTS Linux Kernel Important Security Issues USN-8629-3//Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability//Ubuntu Nginx Important DoS Injection Flaws USN-8563-3 CVE-2026-42533//Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability//Ubuntu Linux Kernel Security Advisory USN-8643-1 Multiple Issues//Ubuntu 24.04 LTS Linux Kernel Critical Issues Update USN-8636-2//Ubuntu 26.04 introduces vital fixes for LibTIFF denial of service flaw//Debian SRT Important DoS Encryption Bypass Vulnerabilities DSA-6450-1//Ubuntu 26.04 libssh Important Denial of Service Vulnerability USN-8093-2//Ubuntu 22.04 LTS Linux Kernel Security Update USN-8630-3//Cisco RoomOS Stack Overflow Vulnerability//Ubuntu 26.04 LTS c3p0 Important Remote Code Exec Vulnerability USN-8642-1//Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability//Breaking secure boot without breaking the crypto//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Ubuntu 24.04 LTS Linux Kernel Important Security Issues USN-8629-3//Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability//Ubuntu Nginx Important DoS Injection Flaws USN-8563-3 CVE-2026-42533//Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability//Ubuntu Linux Kernel Security Advisory USN-8643-1 Multiple Issues//
Campagna russa contro Zimbra con exploit zero-click e furto di email e codici 2FA
Top story — News

Russian campaign against Zimbra with zero-click exploit and theft of emails and 2FA codes

Several Russia-linked groups exploited an as-yet-unknown vulnerability in Zimbra for months to target government and strategic organizations in the West. The vector was particularly dangerous because simply opening or even just viewing the email message in the web client was enough to trigger the exploit, with no explicit click required from the user. Once inside, the attackers targeted email inboxes…

Read the article →
From the newsroom
Spotlight
Trojan bancario brasiliano in espansione in PortogalloBrazilian banking trojan expanding into PortugalHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismTrojan bancario brasiliano in espansione in PortogalloBrazilian banking trojan expanding into PortugalHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralism
More news