● On the wire
Ubuntu libgphoto2 Important Buffer Abuse Denial of Service Vuln 8586-1//Ubuntu 26.04 Tar Important Directory Injection Fix USN-8477-3//Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Debian pdns-recursor Critical Cache Poisoning DNSSEC Bypass DSA-6397-1//Ubuntu Linux Kernel Critical Privilege Escalation Issues USN-8596-1//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2//Debian webkit2gtk Critical JavaScript Exec Risk DSA-6398-1//1/1/01, 12:00 AM//Ubuntu libgphoto2 Important Buffer Abuse Denial of Service Vuln 8586-1//Ubuntu 26.04 Tar Important Directory Injection Fix USN-8477-3//Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Debian pdns-recursor Critical Cache Poisoning DNSSEC Bypass DSA-6397-1//Ubuntu Linux Kernel Critical Privilege Escalation Issues USN-8596-1//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2//Debian webkit2gtk Critical JavaScript Exec Risk DSA-6398-1//1/1/01, 12:00 AM//
Campagna russa contro Zimbra con exploit zero-click e furto di email e codici 2FA
Top story — News

Russian campaign against Zimbra with zero-click exploit and theft of emails and 2FA codes

Several Russia-linked groups exploited an as-yet-unknown vulnerability in Zimbra for months to target government and strategic organizations in the West. The vector was particularly dangerous because simply opening or even just viewing the email message in the web client was enough to trigger the exploit, with no explicit click required from the user. Once inside, the attackers targeted email inboxes…

Read the article →
From the newsroom
Spotlight
Ubuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use them
More news