● On the wire
Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Ubuntu libpng Critical DoS Threats Addressed USN-8639-1//Who Secures AI When It Touches Every Security Team?//Ubuntu 16.04 LTS linux-fips Important Kernel Issues USN-8662-2//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Debian faces immediate security challenge with Chromium and code exploit//Debian DSA-6451-1 Firefox-esr Critical Code Execution Issues//Cisco RoomOS Stack Overflow Vulnerability//Ubuntu curl Important Sensitive Data Exposure USN-8651-1 CVE-2026-11856//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//Ubuntu 20.04 LTS Linux Kernel KVM Important Network Attack Fix USN-8667-1//Ubuntu 20.04 18.04 Linux Kernel Critical Network Threats USN-8666-1//Debian SABnzbd+ Essential Web Interface Bypass Correction DSA-6454-1//Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Ubuntu libpng Critical DoS Threats Addressed USN-8639-1//Who Secures AI When It Touches Every Security Team?//Ubuntu 16.04 LTS linux-fips Important Kernel Issues USN-8662-2//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Debian faces immediate security challenge with Chromium and code exploit//Debian DSA-6451-1 Firefox-esr Critical Code Execution Issues//Cisco RoomOS Stack Overflow Vulnerability//Ubuntu curl Important Sensitive Data Exposure USN-8651-1 CVE-2026-11856//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//Ubuntu 20.04 LTS Linux Kernel KVM Important Network Attack Fix USN-8667-1//Ubuntu 20.04 18.04 Linux Kernel Critical Network Threats USN-8666-1//Debian SABnzbd+ Essential Web Interface Bypass Correction DSA-6454-1//
La CISA aggiunge quattro vulnerabilità critiche al catalogo KEV per sfruttamento attivo
Top story — News

CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a…

Read the article →
From the newsroom
Spotlight
FakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offs
More news