● On the wire
Debian WebKit2GTK Fix Restores Images in Evolution Emails//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Debian libheif Fixes Address Risks in Crafted Image Processing//Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Debian Trixie AIDE Update Blocks Malicious File Detection Bypass//Debian Erlang Fixes Authentication Bypass and TLS Impersonation//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//OSCP+ Scoring Update: What You Need to Know//Someone Will Click. Is Your Security Team Ready?//Ubuntu OpenVPN Update Blocks Certificate-Based Impersonation//Debian WebKit2GTK Fix Restores Images in Evolution Emails//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Debian libheif Fixes Address Risks in Crafted Image Processing//Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Debian Trixie AIDE Update Blocks Malicious File Detection Bypass//Debian Erlang Fixes Authentication Bypass and TLS Impersonation//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//OSCP+ Scoring Update: What You Need to Know//Someone Will Click. Is Your Security Team Ready?//Ubuntu OpenVPN Update Blocks Certificate-Based Impersonation//
Campagna FortiBleed compromette oltre 86.000 firewall Fortinet globalmente
Top story — News

FortiBleed Campaign Compromises Over 86,000 Fortinet Firewalls Globally

The FBI and the U.S. Secret Service have issued a joint alert regarding 'FortiBleed,' a massive credential-harvesting campaign that has already compromised 86,644 Fortinet FortiGate devices and SSL VPN gateways across 194 countries. The attackers exploit reused or leaked credentials and the legacy storage of passwords using SHA-256 to gain access and, in some cases, lock out legitimate administrators by…

Read the article →
From the newsroom
Spotlight
Zero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedSfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)F5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogCISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksZero-day Citrix NetScaler sfruttata per mettere offline le implementazioni SAMLCitrix NetScaler zero-day exploited to take SAML deployments offlineZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedSfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)F5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogCISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksZero-day Citrix NetScaler sfruttata per mettere offline le implementazioni SAMLCitrix NetScaler zero-day exploited to take SAML deployments offline
More news