● On the wire
Ubuntu 26.04 LTS GNU cpio Important Input Sanitization Flaws USN-8704-1//What If Your Idea Became the Next OffSec Lab?//Ubuntu 26.04 diffutils Denial of Service Flaw USN-8692-1//Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon//Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities//Ubuntu zlib Major Denial of Service Vulnerability USN-8706-1 CVE-2026-27171//Ubuntu 26.04 openCryptoki Important Heap Corruption DoS Advisory USN-8707-1//ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)//Ubuntu 26.04 OpenJDK 21 Multiple Access Issues Advisory USN-8694-1//Ubuntu 26.04 LTS SSSD Crash Due to Smartcard Interaction USN-8672-1//Debian Keystone Important Auth Bypass and Info Disclosure DSA-6480-1//Ubuntu ncurses Important Denial of Service Vuln USN-8709-1 CVE-2025-6141//Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability//Simulating legitimate Active Directory services on the network: the case of GPO exploitation//Ubuntu 26.04 bzip2 Denial of Service Memory Management Issue USN-8685-1//Ubuntu 26.04 LTS GNU cpio Important Input Sanitization Flaws USN-8704-1//What If Your Idea Became the Next OffSec Lab?//Ubuntu 26.04 diffutils Denial of Service Flaw USN-8692-1//Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon//Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities//Ubuntu zlib Major Denial of Service Vulnerability USN-8706-1 CVE-2026-27171//Ubuntu 26.04 openCryptoki Important Heap Corruption DoS Advisory USN-8707-1//ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)//Ubuntu 26.04 OpenJDK 21 Multiple Access Issues Advisory USN-8694-1//Ubuntu 26.04 LTS SSSD Crash Due to Smartcard Interaction USN-8672-1//Debian Keystone Important Auth Bypass and Info Disclosure DSA-6480-1//Ubuntu ncurses Important Denial of Service Vuln USN-8709-1 CVE-2025-6141//Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability//Simulating legitimate Active Directory services on the network: the case of GPO exploitation//Ubuntu 26.04 bzip2 Denial of Service Memory Management Issue USN-8685-1//
JFrog Artifactory colpito da un bypass di autenticazione sfruttato subito dopo la divulgazione
Top story — News

JFrog Artifactory hit by an authentication bypass exploited immediately after disclosure

JFrog Artifactory, one of the most widely used repository managers in DevOps pipelines and package distribution, has come under scrutiny after the disclosure of CVE-2026-82329. The flaw allows attackers to bypass authentication and, in some configurations, reach administrative privileges, with the risk of compromising artifacts, tokens, and the build chain. Researchers warned that attackers began exploiting it within just a…

Read the article →
From the newsroom
Spotlight
Google lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesFinta app di allerta in Bahrain distribuisce spyware AndroidFake alert app in Bahrain distributes Android spywareRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch TuesdayGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesFinta app di allerta in Bahrain distribuisce spyware AndroidFake alert app in Bahrain distributes Android spywareRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch Tuesday
More news