● On the wire
Vulnerabilities in PHP Affecting Cisco Products: October 2026//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Debian bind9 Update Addresses DNS Attacks and Service Outages//Cisco Unified Communications Products Security Hardening Release: October 2026//Ubuntu ca-certificates Update Removes Compromised Root CAs//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Cisco Expressway Series Security Hardening Release: October 2026//Debian Trixie PHP 8.4 Fixes Memory Tracking Code Execution//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability//Multiple Cisco Products Snort 3 Security Hardening Release: October 2026//Cisco Expressway Series Remote Code Execution Vulnerability//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability//Debian Firefox ESR Update Blocks Access to eMudhra Certificates//Vulnerabilities in PHP Affecting Cisco Products: October 2026//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Debian bind9 Update Addresses DNS Attacks and Service Outages//Cisco Unified Communications Products Security Hardening Release: October 2026//Ubuntu ca-certificates Update Removes Compromised Root CAs//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Cisco Expressway Series Security Hardening Release: October 2026//Debian Trixie PHP 8.4 Fixes Memory Tracking Code Execution//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability//Multiple Cisco Products Snort 3 Security Hardening Release: October 2026//Cisco Expressway Series Remote Code Execution Vulnerability//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability//Debian Firefox ESR Update Blocks Access to eMudhra Certificates//
Campagna FortiBleed compromette oltre 86.000 firewall Fortinet globalmente
Top story — News

FortiBleed Campaign Compromises Over 86,000 Fortinet Firewalls Globally

The FBI and the U.S. Secret Service have issued a joint alert regarding 'FortiBleed,' a massive credential-harvesting campaign that has already compromised 86,644 Fortinet FortiGate devices and SSL VPN gateways across 194 countries. The attackers exploit reused or leaked credentials and the legacy storage of passwords using SHA-256 to gain access and, in some cases, lock out legitimate administrators by…

Read the article →
From the newsroom
Spotlight
Sfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionSfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news