● On the wire
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability//CRLF-Powered Desync Attacks: Beheading HTTP Streams//Debian openjdk-21 Important Cert Issues DoS Risk DSA-6425-1//Debian dnsdist High Severity DoS CVE-2026-52682 DSA-6419-1//Debian libde265 Major Exec Threat Memory Exhaustion DoS Notice DSA-6413-1//Debian DSA-6421-1 pdns-recursor Denial of Service CVE-2026-52682//Cisco IOS XE Software Security Hardening Release: August 2026//When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers//Debian Caddy Important Access Control Breaches DSA-6429-1 CVE-2026-27585//What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security//Why “AI Pentesting” is the Wrong Term (And Why We Need AI Red Teaming)//Debian Thunderbird Significant Code Execution Vulnerabilities DSA-6418-1//Debian pdns Critical DoS Issue CVE-2026-52682 Fixed in DSA-6420-1//ClamAV Vulnerabilities Affecting Cisco Products: August 2026//Ubuntu ImageMagick Heap Overflow and Code Execution Security Flaws//Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability//CRLF-Powered Desync Attacks: Beheading HTTP Streams//Debian openjdk-21 Important Cert Issues DoS Risk DSA-6425-1//Debian dnsdist High Severity DoS CVE-2026-52682 DSA-6419-1//Debian libde265 Major Exec Threat Memory Exhaustion DoS Notice DSA-6413-1//Debian DSA-6421-1 pdns-recursor Denial of Service CVE-2026-52682//Cisco IOS XE Software Security Hardening Release: August 2026//When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers//Debian Caddy Important Access Control Breaches DSA-6429-1 CVE-2026-27585//What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security//Why “AI Pentesting” is the Wrong Term (And Why We Need AI Red Teaming)//Debian Thunderbird Significant Code Execution Vulnerabilities DSA-6418-1//Debian pdns Critical DoS Issue CVE-2026-52682 Fixed in DSA-6420-1//ClamAV Vulnerabilities Affecting Cisco Products: August 2026//Ubuntu ImageMagick Heap Overflow and Code Execution Security Flaws//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilities
More news