● On the wire
Ubuntu curl Important Sensitive Info Denial of Service Vuln USN-8932-1//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Ubuntu 18.04 LTS Kernel Important Fix Multiple Issues USN-8921-1//Ubuntu 26.04-20.04 BlueZ Critical Regression Denial of Service USN-8908-2//Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026//Debian Stable firefox-esr Important Code Exec Escalation DSA-6560-1//Ubuntu Linux Kernel Advisory 8922-1 Multiple Vulnerabilities Fixed//MISP Modules v3.0.12 Released - richer threat intelligence enrichment, improved interoperability with MISP objects, new enrichment capabilities, and increased reliability across existing modules.//Ubuntu 16.04 14.04 Linux Kernel Important Flaws USN-8923-1//Ubuntu 26.04 LTS YAML-LibYAML Denial of Service and Code Exec USN-8925-1//Ubuntu 26.04 LTS PyJWT Important Token Forging Issues USN-8916-1//Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)//Ubuntu U-Boot Key Denial of Service Buffer Overflow Risks USN-8930-1//Ubuntu 26.04 urllib3 Important Denial of Service CVE-2026-97687//Debian Trixie SOGo Key Cross-Site Scripting SQL Injection CVE-2026-93453//Ubuntu curl Important Sensitive Info Denial of Service Vuln USN-8932-1//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Ubuntu 18.04 LTS Kernel Important Fix Multiple Issues USN-8921-1//Ubuntu 26.04-20.04 BlueZ Critical Regression Denial of Service USN-8908-2//Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026//Debian Stable firefox-esr Important Code Exec Escalation DSA-6560-1//Ubuntu Linux Kernel Advisory 8922-1 Multiple Vulnerabilities Fixed//MISP Modules v3.0.12 Released - richer threat intelligence enrichment, improved interoperability with MISP objects, new enrichment capabilities, and increased reliability across existing modules.//Ubuntu 16.04 14.04 Linux Kernel Important Flaws USN-8923-1//Ubuntu 26.04 LTS YAML-LibYAML Denial of Service and Code Exec USN-8925-1//Ubuntu 26.04 LTS PyJWT Important Token Forging Issues USN-8916-1//Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)//Ubuntu U-Boot Key Denial of Service Buffer Overflow Risks USN-8930-1//Ubuntu 26.04 urllib3 Important Denial of Service CVE-2026-97687//Debian Trixie SOGo Key Cross-Site Scripting SQL Injection CVE-2026-93453//
Microsoft stabilisce un nuovo record nel Patch Tuesday di settembre con 974 vulnerabilità risolte
Top story — News

Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed

Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues fixed include two zero-day vulnerabilities actively exploited in real-world attacks. One of these is CVE-2026-69414 (known as ShieldBreak), a privilege escalation vulnerability in Microsoft Defender. Just…

Read the article →
From the newsroom
Spotlight
N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionN-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news