● On the wire
Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities//Ubuntu 26.04 Libgcrypt Important Side-Channel Network Exposure USN-8711-1//Ubuntu 8710-1 Libevent Important Use-After-Free Denial of Service and More//Ubuntu 26.04 LTS BioSig Critical Denial of Service Vulnerabilities Found//Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon//Cisco IOS XR Software Security Hardening Release: September 2026//Ubuntu 20.04 18.04 Kernel Important Threat Correction USN-8714-1//Ubuntu 26.04 LTS GnuPG Important Message Integrity Bypass CVE-2026-57062//Ubuntu Openssh Security Advisory USN-8721-1 Critical Remote Access Threats//Ubuntu 26.04 OpenJDK 25 Critical Auth Issues USN-8695-1//Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability//Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability//Ubuntu 26.04 LTS pyasn1 Denial of Service Issues USN-8712-1//Ubuntu 18.04 LTS Linux Kernel Important WiFi Injection Threat USN-8715-1//What If Your Idea Became the Next OffSec Lab?//Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities//Ubuntu 26.04 Libgcrypt Important Side-Channel Network Exposure USN-8711-1//Ubuntu 8710-1 Libevent Important Use-After-Free Denial of Service and More//Ubuntu 26.04 LTS BioSig Critical Denial of Service Vulnerabilities Found//Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon//Cisco IOS XR Software Security Hardening Release: September 2026//Ubuntu 20.04 18.04 Kernel Important Threat Correction USN-8714-1//Ubuntu 26.04 LTS GnuPG Important Message Integrity Bypass CVE-2026-57062//Ubuntu Openssh Security Advisory USN-8721-1 Critical Remote Access Threats//Ubuntu 26.04 OpenJDK 25 Critical Auth Issues USN-8695-1//Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability//Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability//Ubuntu 26.04 LTS pyasn1 Denial of Service Issues USN-8712-1//Ubuntu 18.04 LTS Linux Kernel Important WiFi Injection Threat USN-8715-1//What If Your Idea Became the Next OffSec Lab?//
Zero-day SonicWall SMA 1000 sfruttati in rete
Top story — News

Zero-day SonicWall SMA 1000 exploited in the wild

SonicWall has patched two vulnerabilities in SMA 1000 gateways already exploited in real-world attacks: CVE-2026-83548, a pre-authentication SSRF, and CVE-2026-83549, a post-authentication command injection flaw. Researchers and various advisories cite the possibility that attackers could chain them to achieve code execution and, in some cases, root access to the devices. SMA 1000 versions are used for secure remote access in…

Read the article →
From the newsroom
Spotlight
La campagna ClickFake nordcoreana punta i professionisti Web3North Korean ClickFake campaign targets Web3 professionalsGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesFinta app di allerta in Bahrain distribuisce spyware AndroidFake alert app in Bahrain distributes Android spywareRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa campagna ClickFake nordcoreana punta i professionisti Web3North Korean ClickFake campaign targets Web3 professionalsGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesFinta app di allerta in Bahrain distribuisce spyware AndroidFake alert app in Bahrain distributes Android spywareRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging Face
More news