● On the wire
Ubuntu FFmpeg Major Vulnerabilities in Code Execution and DoS USN-8716-1//Ubuntu 26.04 LTS SSSD Crash Due to Smartcard Interaction USN-8672-1//Ubuntu 26.04 LTS BioSig Critical Denial of Service Vulnerabilities Found//Ubuntu 20.04 18.04 Kernel Important Threat Correction USN-8714-1//Ubuntu 26.04 libssh2 Important Remote Exec DoS Issues USN-8722-1//Ubuntu 26.04 Libgcrypt Important Side-Channel Network Exposure USN-8711-1//Ubuntu 8710-1 Libevent Important Use-After-Free Denial of Service and More//Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities//Ubuntu Openssh Security Advisory USN-8721-1 Critical Remote Access Threats//Ubuntu Kernel Update USN-8725-1 Multiple Security Issues//Ubuntu 26.04 openCryptoki Important Heap Corruption DoS Advisory USN-8707-1//Debian Firefox-ESR Critical Issues Execution CVE-2026-16365 DSA-6481-1//Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability//Debian Thunderbird Important Arbitrary Code Exec Info Disclosure DSA-6483-1//Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability//Ubuntu FFmpeg Major Vulnerabilities in Code Execution and DoS USN-8716-1//Ubuntu 26.04 LTS SSSD Crash Due to Smartcard Interaction USN-8672-1//Ubuntu 26.04 LTS BioSig Critical Denial of Service Vulnerabilities Found//Ubuntu 20.04 18.04 Kernel Important Threat Correction USN-8714-1//Ubuntu 26.04 libssh2 Important Remote Exec DoS Issues USN-8722-1//Ubuntu 26.04 Libgcrypt Important Side-Channel Network Exposure USN-8711-1//Ubuntu 8710-1 Libevent Important Use-After-Free Denial of Service and More//Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities//Ubuntu Openssh Security Advisory USN-8721-1 Critical Remote Access Threats//Ubuntu Kernel Update USN-8725-1 Multiple Security Issues//Ubuntu 26.04 openCryptoki Important Heap Corruption DoS Advisory USN-8707-1//Debian Firefox-ESR Critical Issues Execution CVE-2026-16365 DSA-6481-1//Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability//Debian Thunderbird Important Arbitrary Code Exec Info Disclosure DSA-6483-1//Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability//
Chrome/V8 zero-day attivamente sfruttato e inserito nel catalogo CISA KEV
Top story — News

Chrome/V8 zero-day actively exploited and added to the CISA KEV catalog

Google has released an urgent update for Chrome that fixes 12 vulnerabilities, including CVE-2026-85046, a type confusion flaw in the V8 engine already exploited in the wild. The flaw can allow a remote attacker to execute arbitrary code in the browser sandbox through a specially crafted HTML page. CISA has added the bug to the Known Exploited Vulnerabilities catalog, confirming…

Read the article →
From the newsroom
Zero-day SonicWall SMA 1000 sfruttati in rete
News

Zero-day SonicWall SMA 1000 exploited in the wild

SonicWall has patched two vulnerabilities in SMA 1000 gateways already exploited in real-world attacks: CVE-2026-83548, a pre-authentication SSRF, and CVE-2026-83549, a post-authentication command injection flaw. Researchers and various advisories cite the possibility that attackers…

Read the article →
Spotlight
Check Point SmartConsole: bypass di autenticazione attivamente sfruttatoCheck Point SmartConsole: authentication bypass actively exploitedAttacchi iraniani contro sistemi industriali Siemens e SchneiderIranian attacks against Siemens and Schneider industrial systemsLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderCISA dimostra il divario difensivo in due infrastrutture criticheCISA Demonstrates the Defensive Gap in Two Critical InfrastructuresCheck Point SmartConsole: bypass di autenticazione attivamente sfruttatoCheck Point SmartConsole: authentication bypass actively exploitedAttacchi iraniani contro sistemi industriali Siemens e SchneiderIranian attacks against Siemens and Schneider industrial systemsLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderCISA dimostra il divario difensivo in due infrastrutture criticheCISA Demonstrates the Defensive Gap in Two Critical Infrastructures
More news