● On the wire
Rondo Meets Geoserver, (Wed, Jul 22nd)//Ubuntu 16.04 libapache-mod-jk Important Fix for DoS Issue USN-8369-2//The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?//Ubuntu 26.04 LTS 8599-1 libhttp-date-perl Critical Denial of Service//Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Ubuntu 26.04 Tar Important Directory Injection Fix USN-8477-3//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//Ubuntu 20.04 Kernel Critical Memory Exposure Flaws USN-8597-1//Debian webkit2gtk Critical JavaScript Exec Risk DSA-6398-1//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Debian Firefox ESR Important Code Execution Risks DSA-6394-1//Ubuntu 26.04 LTS GNU C Library Critical Denial of Service USN-8611-1//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//Ubuntu 26.04 LTS libXpm Critical Crash Vulnerability CVE-2026-4367//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//Rondo Meets Geoserver, (Wed, Jul 22nd)//Ubuntu 16.04 libapache-mod-jk Important Fix for DoS Issue USN-8369-2//The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?//Ubuntu 26.04 LTS 8599-1 libhttp-date-perl Critical Denial of Service//Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Ubuntu 26.04 Tar Important Directory Injection Fix USN-8477-3//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//Ubuntu 20.04 Kernel Critical Memory Exposure Flaws USN-8597-1//Debian webkit2gtk Critical JavaScript Exec Risk DSA-6398-1//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Debian Firefox ESR Important Code Execution Risks DSA-6394-1//Ubuntu 26.04 LTS GNU C Library Critical Denial of Service USN-8611-1//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//Ubuntu 26.04 LTS libXpm Critical Crash Vulnerability CVE-2026-4367//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Ransomware sulla filiera del freddo in Giappone
News

Ransomware on Japan’s cold chain

A ransomware attack hit a Japanese food logistics company, causing delays and disruptions in the distribution chain for frozen products to thousands of customers. Among those affected are said to be major restaurant chains,…

Read the article →
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesEuropean AI sovereignty is becoming a strategic issue in finance, defense and healthcareEuropean AI sovereignty is becoming a strategic issue in finance, defense and healthcareHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesEuropean AI sovereignty is becoming a strategic issue in finance, defense and healthcareEuropean AI sovereignty is becoming a strategic issue in finance, defense and healthcare
More news