● On the wire
Apple Patches for October 2026, (Mon, Oct 26th)//Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability//Debian Thunderbird Update Addresses Code Execution and Data Exposure//Scalable Vector Grief//Vulnerabilities in Node.js Affecting Cisco Products: October 2026//ElectroNG is now open source!//Debian Valkey Update Blocks Denial of Service and Code Execution//Ubuntu Authd Fixes Unauthorized Access to User Files With Security Updates//Ubuntu nginx Fixes Remote Code Execution and SSL Bypass//Debian Trixie PowerDNS Fixes DNS Packet Denial-of-Service Vulnerability//Kali Linux 2026.3 Release (Build-Scripts Refresh)//Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)//Tricks from the Past deployed via signed ChatGPT and Claude binaries//YARA-X 1.22.0 Release, (Sun, Oct 25th)//Cohere’s Qwen Story: Looks More Like Model Jaggedness//Apple Patches for October 2026, (Mon, Oct 26th)//Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability//Debian Thunderbird Update Addresses Code Execution and Data Exposure//Scalable Vector Grief//Vulnerabilities in Node.js Affecting Cisco Products: October 2026//ElectroNG is now open source!//Debian Valkey Update Blocks Denial of Service and Code Execution//Ubuntu Authd Fixes Unauthorized Access to User Files With Security Updates//Ubuntu nginx Fixes Remote Code Execution and SSL Bypass//Debian Trixie PowerDNS Fixes DNS Packet Denial-of-Service Vulnerability//Kali Linux 2026.3 Release (Build-Scripts Refresh)//Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)//Tricks from the Past deployed via signed ChatGPT and Claude binaries//YARA-X 1.22.0 Release, (Sun, Oct 25th)//Cohere’s Qwen Story: Looks More Like Model Jaggedness//
Attacco alla supply chain di Brevo espone oltre 100.000 siti web
Top story — News

Brevo supply chain attack exposes over 100,000 websites

Brevo, the French marketing and communications platform formerly known as Sendinblue, suffered a supply chain attack that may have affected more than 100,000 websites. On September 10, the attackers reportedly exploited a vulnerability in the SAML SSO system, gaining access to 138 accounts, exporting contacts from 43 of them, and using six for phishing campaigns. Four days later, they returned…

Read the article →
From the newsroom
Spotlight
N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksZero-day Citrix NetScaler sfruttata per mettere offline le implementazioni SAMLCitrix NetScaler zero-day exploited to take SAML deployments offlineN-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksZero-day Citrix NetScaler sfruttata per mettere offline le implementazioni SAMLCitrix NetScaler zero-day exploited to take SAML deployments offline
More news