● On the wire
Cisco RoomOS Stack Overflow Vulnerability//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Cisco Secure Workload Software Security Hardening Release: August 2026//Cisco Unified Intelligence Center SQL Injection Vulnerability//Debian DSA-6451-1 Firefox-esr Critical Code Execution Issues//Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Ubuntu 20.04 LTS Linux Kernel KVM Important Network Attack Fix USN-8667-1//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//Ubuntu curl Important Sensitive Data Exposure USN-8651-1 CVE-2026-11856//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//Ubuntu Linux Kernel NVIDIA Privilege Escalation Exploit USN-8663-1//Debian SABnzbd+ Essential Web Interface Bypass Correction DSA-6454-1//Ubuntu 26.04 Cap'n Proto Important HTTP Request Smuggling Issues USN-8650-1//Cisco RoomOS Stack Overflow Vulnerability//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Cisco Secure Workload Software Security Hardening Release: August 2026//Cisco Unified Intelligence Center SQL Injection Vulnerability//Debian DSA-6451-1 Firefox-esr Critical Code Execution Issues//Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Ubuntu 20.04 LTS Linux Kernel KVM Important Network Attack Fix USN-8667-1//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//Ubuntu curl Important Sensitive Data Exposure USN-8651-1 CVE-2026-11856//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//Ubuntu Linux Kernel NVIDIA Privilege Escalation Exploit USN-8663-1//Debian SABnzbd+ Essential Web Interface Bypass Correction DSA-6454-1//Ubuntu 26.04 Cap'n Proto Important HTTP Request Smuggling Issues USN-8650-1//
La CISA aggiunge quattro vulnerabilità critiche al catalogo KEV per sfruttamento attivo
Top story — News

CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a…

Read the article →
From the newsroom
Spotlight
FakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offs
More news