● On the wire
YARA-X 1.20.0 Release, (Sun, Aug 30th)//Meeting Notes from “CVE and AI Vulnerability Discovery” Virtual Conference Now Available//I pointed an agent at a bootloader. It found bugs but not useful ones//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair (to appear)//Ubuntu 20.04 Bind9 Important DoS Resource Issues CVE-2026-3039 USN-8682-1//MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear)//Breaking Claude Code Opus 5 Auto Mode//Debian Trixie Linux Kernel Security Fix DSA-6477-1 for Privilege Escalation//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//Debian GIMP Important Denial of Service or Code Execution DSA-6470-1//ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)//Debian suricata-update Important Path Traversal Attack CVE-2026-63347//Ubuntu 22.04 LTS Kernel Critical Network Flaw Update USN-8661-3//Ubuntu Linux Kernel Azure Critical Flaws Fixed USN-8644-3//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//YARA-X 1.20.0 Release, (Sun, Aug 30th)//Meeting Notes from “CVE and AI Vulnerability Discovery” Virtual Conference Now Available//I pointed an agent at a bootloader. It found bugs but not useful ones//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair (to appear)//Ubuntu 20.04 Bind9 Important DoS Resource Issues CVE-2026-3039 USN-8682-1//MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear)//Breaking Claude Code Opus 5 Auto Mode//Debian Trixie Linux Kernel Security Fix DSA-6477-1 for Privilege Escalation//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//Debian GIMP Important Denial of Service or Code Execution DSA-6470-1//ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)//Debian suricata-update Important Path Traversal Attack CVE-2026-63347//Ubuntu 22.04 LTS Kernel Critical Network Flaw Update USN-8661-3//Ubuntu Linux Kernel Azure Critical Flaws Fixed USN-8644-3//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//
PaperCut: zero-day sotto attacco, patch d’emergenza rilasciata
Top story — News

PaperCut: zero-day under attack, emergency patch released

PaperCut Software has confirmed that a zero-day vulnerability in the NG and MF products has already been actively exploited in real-world attacks. The company has released an emergency patch and has asked customers to apply it immediately, even in the absence of obvious signs of compromise. Among the recommended measures are restricting access to application servers to trusted IPs only…

Read the article →
From the newsroom
Spotlight
Ubuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch TuesdayServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedWordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNsUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch TuesdayServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedWordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNs
More news