● On the wire
Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Ubuntu libsoup3 Update Addresses Remote HTTP Threats and Risks//Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability//Cisco Unified Communications Products Security Hardening Release: October 2026//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//OSCP+ Scoring Update: What You Need to Know//Ubuntu OpenVPN Update Blocks Certificate-Based Impersonation//Debian Chromium Update Addresses Code Execution and Service Disruption//Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability//Cisco Expressway Series Remote Code Execution Vulnerability//Debian bind9 Update Addresses DNS Attacks and Service Outages//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//PHP2Shell – Critical Vulnerabilities in PHP Core (CVE-2026-109618/CVE-2026-109619)//Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Ubuntu libsoup3 Update Addresses Remote HTTP Threats and Risks//Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability//Cisco Unified Communications Products Security Hardening Release: October 2026//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//OSCP+ Scoring Update: What You Need to Know//Ubuntu OpenVPN Update Blocks Certificate-Based Impersonation//Debian Chromium Update Addresses Code Execution and Service Disruption//Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability//Cisco Expressway Series Remote Code Execution Vulnerability//Debian bind9 Update Addresses DNS Attacks and Service Outages//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//PHP2Shell – Critical Vulnerabilities in PHP Core (CVE-2026-109618/CVE-2026-109619)//
Microsoft stabilisce un nuovo record nel Patch Tuesday di settembre con 974 vulnerabilità risolte
Top story — News

Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed

Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues fixed include two zero-day vulnerabilities actively exploited in real-world attacks. One of these is CVE-2026-69414 (known as ShieldBreak), a privilege escalation vulnerability in Microsoft Defender. Just…

Read the article →
From the newsroom
Spotlight
Nuovo vettore di attacco contro Citrix NetScaler dopo le patch inizialiNew Attack Vector Against Citrix NetScaler After Initial PatchesVulnerabilità critica Atlassian sfruttata poche ore dopo la pubblicazione dei dettagliCritical Atlassian Vulnerability Exploited Hours After Details Were PublishedCISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionNuovo vettore di attacco contro Citrix NetScaler dopo le patch inizialiNew Attack Vector Against Citrix NetScaler After Initial PatchesVulnerabilità critica Atlassian sfruttata poche ore dopo la pubblicazione dei dettagliCritical Atlassian Vulnerability Exploited Hours After Details Were PublishedCISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news