● On the wire
When it Snows it Pours – Anatomy of a ServiceNow Red Team//Ubuntu 26.04 Libgcrypt Important Side-Channel Network Exposure USN-8711-1//Ubuntu zlib Major Denial of Service Vulnerability USN-8706-1 CVE-2026-27171//QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation (to appear)//MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear)//Ubuntu 26.04 Pillow Important Image Processing Crash CVE-2026-59198//ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)//Ubuntu 26.04 LTS pyasn1 Denial of Service Issues USN-8712-1//Ubuntu 26.04 OpenJDK 25 Critical Auth Issues USN-8695-1//Ubuntu 8687-1 p11-kit Local Attack Denial of Service CVE-2026-13757//Ubuntu 26.04 LTS GNU cpio Important Input Sanitization Flaws USN-8704-1//Ubuntu 26.04 OpenJDK 21 Multiple Access Issues Advisory USN-8694-1//Simulating legitimate Active Directory services on the network: the case of GPO exploitation//Ubuntu 26.04 openCryptoki Important Heap Corruption DoS Advisory USN-8707-1//Debian Trixie Linux Kernel Security Fix DSA-6477-1 for Privilege Escalation//When it Snows it Pours – Anatomy of a ServiceNow Red Team//Ubuntu 26.04 Libgcrypt Important Side-Channel Network Exposure USN-8711-1//Ubuntu zlib Major Denial of Service Vulnerability USN-8706-1 CVE-2026-27171//QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation (to appear)//MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear)//Ubuntu 26.04 Pillow Important Image Processing Crash CVE-2026-59198//ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)//Ubuntu 26.04 LTS pyasn1 Denial of Service Issues USN-8712-1//Ubuntu 26.04 OpenJDK 25 Critical Auth Issues USN-8695-1//Ubuntu 8687-1 p11-kit Local Attack Denial of Service CVE-2026-13757//Ubuntu 26.04 LTS GNU cpio Important Input Sanitization Flaws USN-8704-1//Ubuntu 26.04 OpenJDK 21 Multiple Access Issues Advisory USN-8694-1//Simulating legitimate Active Directory services on the network: the case of GPO exploitation//Ubuntu 26.04 openCryptoki Important Heap Corruption DoS Advisory USN-8707-1//Debian Trixie Linux Kernel Security Fix DSA-6477-1 for Privilege Escalation//
McKesson sotto pressione dopo un incidente cyber e la rivendicazione di ShinyHunters
Top story — News

McKesson under pressure after a cyber incident and ShinyHunters’ claim

McKesson, the large Texas-based pharmaceutical distributor, has confirmed a security incident that is causing disruptions to its systems. The company said the intrusion involves a third-party application and that the investigation is still in its early stages. Help Net Security reports that ShinyHunters claims to have stolen 284 million patient records, although the figure has not yet been independently verified.…

Read the article →
From the newsroom
Spotlight
Finta app di allerta in Bahrain distribuisce spyware AndroidFake alert app in Bahrain distributes Android spywareRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch TuesdayServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedFinta app di allerta in Bahrain distribuisce spyware AndroidFake alert app in Bahrain distributes Android spywareRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch TuesdayServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already Exploited
More news