● On the wire
OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Debian Trixie AIDE Update Blocks Malicious File Detection Bypass//Debian WebKit2GTK Fix Restores Images in Evolution Emails//Debian Brotli Update Addresses DoS and Code Execution Risk//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Ubuntu libsoup3 Update Addresses Remote HTTP Threats and Risks//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability//Infostealer riding the AI Train//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Debian Roundcube Fixes IMAP Injection and Other Security Issues//(Reliable)? php2shell exploitability, (Fri, Oct 23rd)//Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Debian Trixie AIDE Update Blocks Malicious File Detection Bypass//Debian WebKit2GTK Fix Restores Images in Evolution Emails//Debian Brotli Update Addresses DoS and Code Execution Risk//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Ubuntu libsoup3 Update Addresses Remote HTTP Threats and Risks//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability//Infostealer riding the AI Train//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Debian Roundcube Fixes IMAP Injection and Other Security Issues//(Reliable)? php2shell exploitability, (Fri, Oct 23rd)//Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//
Microsoft stabilisce un nuovo record nel Patch Tuesday di settembre con 974 vulnerabilità risolte
Top story — News

Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed

Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues fixed include two zero-day vulnerabilities actively exploited in real-world attacks. One of these is CVE-2026-69414 (known as ShieldBreak), a privilege escalation vulnerability in Microsoft Defender. Just…

Read the article →
From the newsroom
Spotlight
F5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogZero-day critico in Cisco Catalyst SD-WAN Manager sfruttato attivamenteCritical Zero-Day in Cisco Catalyst SD-WAN Manager Actively ExploitedZero-day critica in FortiMail sfruttata attivamente e inserita nel catalogo KEVCritical FortiMail zero-day actively exploited and added to the KEV catalogVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogZero-day critico in Cisco Catalyst SD-WAN Manager sfruttato attivamenteCritical Zero-Day in Cisco Catalyst SD-WAN Manager Actively ExploitedZero-day critica in FortiMail sfruttata attivamente e inserita nel catalogo KEVCritical FortiMail zero-day actively exploited and added to the KEV catalogVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news