● On the wire
ISC Stormcast For Thursday, August 13th, 2026 https://isc.sans.edu/podcastdetail/10050, (Thu, Aug 13th)//Debian apr-util Important DoS and Code Execution Vuln DSA-6437-1//Ubuntu 16.04 Kernel Important Flaw Escalates Privileges USN-8548-2//Ubuntu 16.04 Linux Kernel Important Privilege Escalation Issues USN-8530-2//Debian Python-httplib2 Important Denial of Service Vuln DSA-6441-1//Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th)//Debian Lemonldap-ng DSA-6434-1 CVE-2026-12804 CVE-2026-19349//Ubuntu 14.04 LTS Important Network Privilege Escalation - USN-8635-1//Ubuntu Linux Kernel Advisory USN-8633-2 - Important Security Fixes//Debian Trixie Unzip Important Code Execution Issue DSA-6440-1//Debian DSA-6433-1 xdg-dbus-proxy Important Policy Bypass//Microsoft Windows TCPIP.SYS IppQualifyAddresses Out-of-Bounds Read Vulnerability//ARM64 stack internals and obfuscation on Apple Silicon//Ubuntu Libgit2 Security Advisory USN-8628-1 Multiple Issues Fixed//Debian Trixie Zip Command Injection Vulnerability DSA-6439-1//ISC Stormcast For Thursday, August 13th, 2026 https://isc.sans.edu/podcastdetail/10050, (Thu, Aug 13th)//Debian apr-util Important DoS and Code Execution Vuln DSA-6437-1//Ubuntu 16.04 Kernel Important Flaw Escalates Privileges USN-8548-2//Ubuntu 16.04 Linux Kernel Important Privilege Escalation Issues USN-8530-2//Debian Python-httplib2 Important Denial of Service Vuln DSA-6441-1//Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th)//Debian Lemonldap-ng DSA-6434-1 CVE-2026-12804 CVE-2026-19349//Ubuntu 14.04 LTS Important Network Privilege Escalation - USN-8635-1//Ubuntu Linux Kernel Advisory USN-8633-2 - Important Security Fixes//Debian Trixie Unzip Important Code Execution Issue DSA-6440-1//Debian DSA-6433-1 xdg-dbus-proxy Important Policy Bypass//Microsoft Windows TCPIP.SYS IppQualifyAddresses Out-of-Bounds Read Vulnerability//ARM64 stack internals and obfuscation on Apple Silicon//Ubuntu Libgit2 Security Advisory USN-8628-1 Multiple Issues Fixed//Debian Trixie Zip Command Injection Vulnerability DSA-6439-1//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector works
More news