● On the wire
Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Debian Firefox ESR Important Code Execution Risks DSA-6394-1//Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//Rondo Meets Geoserver, (Wed, Jul 22nd)//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//Ubuntu 22.04 LTS Linux Kernel Critical Risk Multiple Issues USN-8595-1//Ubuntu 16.04 libapache-mod-jk Important Fix for DoS Issue USN-8369-2//Debian Chromium Critical Denial of Service Arbitrary Code DSA-6396-1//Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Ubuntu 26.04 LTS libXpm Critical Crash Vulnerability CVE-2026-4367//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Ubuntu 22.04 LTS Kernel Significant NTFS Exploit Privilege Escalation Alert//Debian BIND9 Important Cache Poisoning Denial of Service DSA-6395-1//Ubuntu 26.04 Rsyslog Critical Denial of Service Vuln USN-8598-1//Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Debian Firefox ESR Important Code Execution Risks DSA-6394-1//Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//Rondo Meets Geoserver, (Wed, Jul 22nd)//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//Ubuntu 22.04 LTS Linux Kernel Critical Risk Multiple Issues USN-8595-1//Ubuntu 16.04 libapache-mod-jk Important Fix for DoS Issue USN-8369-2//Debian Chromium Critical Denial of Service Arbitrary Code DSA-6396-1//Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Ubuntu 26.04 LTS libXpm Critical Crash Vulnerability CVE-2026-4367//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Ubuntu 22.04 LTS Kernel Significant NTFS Exploit Privilege Escalation Alert//Debian BIND9 Important Cache Poisoning Denial of Service DSA-6395-1//Ubuntu 26.04 Rsyslog Critical Denial of Service Vuln USN-8598-1//
Campagna russa contro Zimbra con exploit zero-click e furto di email e codici 2FA
Top story — News

Russian campaign against Zimbra with zero-click exploit and theft of emails and 2FA codes

Several Russia-linked groups exploited an as-yet-unknown vulnerability in Zimbra for months to target government and strategic organizations in the West. The vector was particularly dangerous because simply opening or even just viewing the email message in the web client was enough to trigger the exploit, with no explicit click required from the user. Once inside, the attackers targeted email inboxes…

Read the article →
From the newsroom
Spotlight
Ubuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use them
More news