● On the wire
Ubuntu Linux Kernel Azure Critical Flaws Fixed USN-8644-3//Ubuntu 20.04 Linux Kernel Azure CVM Security Update USN-8658-4//Breaking Claude Code Opus 5 Auto Mode//Ubuntu 24.04 LTS 8643-5 Important Security Update for Linux Kernel//MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear)//I pointed an agent at a bootloader. It found bugs but not useful ones//ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//YARA-X 1.20.0 Release, (Sun, Aug 30th)//Some Malicious PE Stats, (Thu, Aug 27th)//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//Ubuntu 22.04 LTS Kernel Critical Network Flaw Update USN-8661-3//Debian GIMP Important Denial of Service or Code Execution DSA-6470-1//Ubuntu 20.04 Bind9 Important DoS Resource Issues CVE-2026-3039 USN-8682-1//Meeting Notes from “CVE and AI Vulnerability Discovery” Virtual Conference Now Available//Ubuntu Linux Kernel Azure Critical Flaws Fixed USN-8644-3//Ubuntu 20.04 Linux Kernel Azure CVM Security Update USN-8658-4//Breaking Claude Code Opus 5 Auto Mode//Ubuntu 24.04 LTS 8643-5 Important Security Update for Linux Kernel//MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities (to appear)//I pointed an agent at a bootloader. It found bugs but not useful ones//ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//YARA-X 1.20.0 Release, (Sun, Aug 30th)//Some Malicious PE Stats, (Thu, Aug 27th)//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//Ubuntu 22.04 LTS Kernel Critical Network Flaw Update USN-8661-3//Debian GIMP Important Denial of Service or Code Execution DSA-6470-1//Ubuntu 20.04 Bind9 Important DoS Resource Issues CVE-2026-3039 USN-8682-1//Meeting Notes from “CVE and AI Vulnerability Discovery” Virtual Conference Now Available//
PaperCut: zero-day sotto attacco, patch d’emergenza rilasciata
Top story — News

PaperCut: zero-day under attack, emergency patch released

PaperCut Software has confirmed that a zero-day vulnerability in the NG and MF products has already been actively exploited in real-world attacks. The company has released an emergency patch and has asked customers to apply it immediately, even in the absence of obvious signs of compromise. Among the recommended measures are restricting access to application servers to trusted IPs only…

Read the article →
From the newsroom
Spotlight
Ubuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch TuesdayServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedWordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNsUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch TuesdayServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedWordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNs
More news