● On the wire
Can AI do novel security research? Meet the HTTP Terminator//Day 2 at Black Hat: Check Point Research Takes the Stage//Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability//Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026//Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability//Debian jq Security Advisory DoS and Arbitrary Code Execution DSA-6416-1//What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security//Debian libde265 Major Exec Threat Memory Exhaustion DoS Notice DSA-6413-1//Can AI do novel security research? Meet the HTTP Terminator//Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability//Why “AI Pentesting” is the Wrong Term (And Why We Need AI Red Teaming)//DoGNAVY CyberGym Technical Report//Debian libheif Critical Denial of Service and Code Execution DSA-6417-1//ClamAV Vulnerabilities Affecting Cisco Products: August 2026//Debian Thunderbird Significant Code Execution Vulnerabilities DSA-6418-1//Can AI do novel security research? Meet the HTTP Terminator//Day 2 at Black Hat: Check Point Research Takes the Stage//Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability//Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026//Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability//Debian jq Security Advisory DoS and Arbitrary Code Execution DSA-6416-1//What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security//Debian libde265 Major Exec Threat Memory Exhaustion DoS Notice DSA-6413-1//Can AI do novel security research? Meet the HTTP Terminator//Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability//Why “AI Pentesting” is the Wrong Term (And Why We Need AI Red Teaming)//DoGNAVY CyberGym Technical Report//Debian libheif Critical Denial of Service and Code Execution DSA-6417-1//ClamAV Vulnerabilities Affecting Cisco Products: August 2026//Debian Thunderbird Significant Code Execution Vulnerabilities DSA-6418-1//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
Ubuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereignty
More news