● On the wire
MISP Modules v3.1.1: 33 New Expansion Modules and More Ways to Turn Threat Intelligence into Action//Debian Brotli Update Addresses DoS and Code Execution Risk//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Debian Trixie Varnish Fixes Two Security Issues in Latest Update//Debian Unbound Update Addresses DNSSEC and Emerging DNS Threats//Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Debian Varnish Cache Fixes for Cache Poisoning and Service Disruption//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Debian varnish Fixes Cache Poisoning and Worker Crashes//Debian Roundcube Fixes IMAP Injection and Other Security Issues//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Vulnerabilities in PHP Affecting Cisco Products: October 2026//PHP2Shell – Critical Vulnerabilities in PHP Core (CVE-2026-109618/CVE-2026-109619)//MISP Modules v3.1.1: 33 New Expansion Modules and More Ways to Turn Threat Intelligence into Action//Debian Brotli Update Addresses DoS and Code Execution Risk//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Debian Trixie Varnish Fixes Two Security Issues in Latest Update//Debian Unbound Update Addresses DNSSEC and Emerging DNS Threats//Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Debian Varnish Cache Fixes for Cache Poisoning and Service Disruption//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Debian varnish Fixes Cache Poisoning and Worker Crashes//Debian Roundcube Fixes IMAP Injection and Other Security Issues//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Vulnerabilities in PHP Affecting Cisco Products: October 2026//PHP2Shell – Critical Vulnerabilities in PHP Core (CVE-2026-109618/CVE-2026-109619)//
Furto da oltre 351 milioni di dollari a Bitget attribuito ad attori nordcoreani
Top story — News

Theft of Over $351 Million from Bitget Attributed to North Korean Actors

Cryptocurrency exchange Bitget detected unauthorized transfers on September 24 from a limited number of hot and warm wallets, with a reported value of at least $351.6 million. Some sources initially estimated the losses at up to $387 million, but the figure disclosed directly by the company is lower. Bitget suspects the involvement of actors linked to North Korea and has…

Read the article →
From the newsroom
Spotlight
Vulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news