● On the wire
Debian Emacs Critical Code Exec DoS Issue DSA-6468-1 CVE-2026-6861//Ubuntu 20.04 LTS Kernel Update Moderate WiFi Issue 2026-8666-3//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//Debian Trixie libdbi-perl Important Code Execution and DoS DSA-6473-1//Ubuntu OpenSSL Important Denial of Service Vulnern USN-8678-2//I pointed an agent at a bootloader. It found bugs but not useful ones//Meeting Notes from “CVE and AI Vulnerability Discovery” Virtual Conference Now Available//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair (to appear)//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//Some Malicious PE Stats, (Thu, Aug 27th)//QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation (to appear)//Ubuntu 24.04 openCryptoki Important Access Issues USN-8686-1//Ubuntu Linux Kernel Azure Critical Flaws Fixed USN-8644-3//Debian Chromium Important Code Exec Denial of Service Vuln DSA-6476-1//Debian GIMP Important Denial of Service or Code Execution DSA-6470-1//Debian Emacs Critical Code Exec DoS Issue DSA-6468-1 CVE-2026-6861//Ubuntu 20.04 LTS Kernel Update Moderate WiFi Issue 2026-8666-3//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//Debian Trixie libdbi-perl Important Code Execution and DoS DSA-6473-1//Ubuntu OpenSSL Important Denial of Service Vulnern USN-8678-2//I pointed an agent at a bootloader. It found bugs but not useful ones//Meeting Notes from “CVE and AI Vulnerability Discovery” Virtual Conference Now Available//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair (to appear)//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//Some Malicious PE Stats, (Thu, Aug 27th)//QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation (to appear)//Ubuntu 24.04 openCryptoki Important Access Issues USN-8686-1//Ubuntu Linux Kernel Azure Critical Flaws Fixed USN-8644-3//Debian Chromium Important Code Exec Denial of Service Vuln DSA-6476-1//Debian GIMP Important Denial of Service or Code Execution DSA-6470-1//
Arresti in Australia per TeamPCP e maxi campagna di supply-chain compromise
Top story — News

Arrests in Australia for TeamPCP and a massive supply-chain compromise campaign

Australian police have charged two men from Western Australia, accused of being part of the TeamPCP group, at the center of a long-running campaign of software supply chain attacks. According to authorities, the group hid malicious code in open source projects and then used it to steal credentials and data from thousands of organizations worldwide. Investigations, carried out together with…

Read the article →
From the newsroom
Ransomware sulla filiera del freddo in Giappone
News

Ransomware on Japan’s cold chain

A ransomware attack hit a Japanese food logistics company, causing delays and disruptions in the distribution chain for frozen products to thousands of customers. Among those affected are said to be major restaurant chains,…

Read the article →
Spotlight
La falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataFinta app di allerta in Bahrain distribuisce spyware AndroidFake alert app in Bahrain distributes Android spywareUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataFinta app di allerta in Bahrain distribuisce spyware AndroidFake alert app in Bahrain distributes Android spywareUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilities
More news