● On the wire
Vulnerability Data Enrichment for CVE Records: 266 CNAs on the Enrichment Recognition List for…//Debian PHP 8.4 Critical Denial of Service SQL Injection Issues DSA-6406-1//Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability//Debian Incus Significant Privilege Escalation Vulnerabilities DSA-6407-1//Debian libgd2 Important Denial of Service CVE-2026-9672//Debian Chromium Important Code Execution Denial of Service DSA-6408-1//Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability//Debian Trixie Linux Kernel Security Notice DSA-6405-1 Privilege Escalation//Ubuntu 22.04 LTS Linux Kernel Critical Security Update 2026-8620-3//Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Patch In, Exploit Out: How deepsec Reconstructed the Pwn2Own Microsoft Edge Sandbox Escape//Cisco Integrated Management Controller Cross-Site Scripting Vulnerability//Debian aom Critical Denial of Service CVE-2026-56208 DSA-6411-1//LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection//Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability//Vulnerability Data Enrichment for CVE Records: 266 CNAs on the Enrichment Recognition List for…//Debian PHP 8.4 Critical Denial of Service SQL Injection Issues DSA-6406-1//Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability//Debian Incus Significant Privilege Escalation Vulnerabilities DSA-6407-1//Debian libgd2 Important Denial of Service CVE-2026-9672//Debian Chromium Important Code Execution Denial of Service DSA-6408-1//Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability//Debian Trixie Linux Kernel Security Notice DSA-6405-1 Privilege Escalation//Ubuntu 22.04 LTS Linux Kernel Critical Security Update 2026-8620-3//Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Patch In, Exploit Out: How deepsec Reconstructed the Pwn2Own Microsoft Edge Sandbox Escape//Cisco Integrated Management Controller Cross-Site Scripting Vulnerability//Debian aom Critical Denial of Service CVE-2026-56208 DSA-6411-1//LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection//Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designed
More news