● On the wire
Infostealer riding the AI Train//PHP2Shell – Critical Vulnerabilities in PHP Core (CVE-2026-109618/CVE-2026-109619)//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Debian Varnish Cache Fixes for Cache Poisoning and Service Disruption//Someone Will Click. Is Your Security Team Ready?//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//Apple Patches for October 2026, (Mon, Oct 26th)//Ubuntu OpenVPN Update Blocks Certificate-Based Impersonation//(Reliable)? php2shell exploitability, (Fri, Oct 23rd)//Debian Erlang Fixes Authentication Bypass and TLS Impersonation//Debian Unbound Update Addresses DNSSEC and Emerging DNS Threats//Ubuntu libsoup3 Update Addresses Remote HTTP Threats and Risks//Debian Trixie AIDE Update Blocks Malicious File Detection Bypass//Debian varnish Fixes Cache Poisoning and Worker Crashes//Ubuntu Brotli Update Addresses Code Execution and DoS Vulnerabilities//Infostealer riding the AI Train//PHP2Shell – Critical Vulnerabilities in PHP Core (CVE-2026-109618/CVE-2026-109619)//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Debian Varnish Cache Fixes for Cache Poisoning and Service Disruption//Someone Will Click. Is Your Security Team Ready?//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//Apple Patches for October 2026, (Mon, Oct 26th)//Ubuntu OpenVPN Update Blocks Certificate-Based Impersonation//(Reliable)? php2shell exploitability, (Fri, Oct 23rd)//Debian Erlang Fixes Authentication Bypass and TLS Impersonation//Debian Unbound Update Addresses DNSSEC and Emerging DNS Threats//Ubuntu libsoup3 Update Addresses Remote HTTP Threats and Risks//Debian Trixie AIDE Update Blocks Malicious File Detection Bypass//Debian varnish Fixes Cache Poisoning and Worker Crashes//Ubuntu Brotli Update Addresses Code Execution and DoS Vulnerabilities//
Furto da oltre 351 milioni di dollari a Bitget attribuito ad attori nordcoreani
Top story — News

Theft of Over $351 Million from Bitget Attributed to North Korean Actors

Cryptocurrency exchange Bitget detected unauthorized transfers on September 24 from a limited number of hot and warm wallets, with a reported value of at least $351.6 million. Some sources initially estimated the losses at up to $387 million, but the figure disclosed directly by the company is lower. Bitget suspects the involvement of actors linked to North Korea and has…

Read the article →
From the newsroom
Spotlight
Zero-day critica in FortiMail sfruttata attivamente e inserita nel catalogo KEVCritical FortiMail zero-day actively exploited and added to the KEV catalogNuovo vettore di attacco contro Citrix NetScaler dopo le patch inizialiNew Attack Vector Against Citrix NetScaler After Initial PatchesVulnerabilità critica Atlassian sfruttata poche ore dopo la pubblicazione dei dettagliCritical Atlassian Vulnerability Exploited Hours After Details Were PublishedVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionZero-day critica in FortiMail sfruttata attivamente e inserita nel catalogo KEVCritical FortiMail zero-day actively exploited and added to the KEV catalogNuovo vettore di attacco contro Citrix NetScaler dopo le patch inizialiNew Attack Vector Against Citrix NetScaler After Initial PatchesVulnerabilità critica Atlassian sfruttata poche ore dopo la pubblicazione dei dettagliCritical Atlassian Vulnerability Exploited Hours After Details Were PublishedVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news