● On the wire
Ubuntu NVIDIA Low Latency Kernel Fixes for USN-9040-1 Explained//Ubuntu HPLIP Fixes Buffer Overflows and Command Execution//Ubuntu 24.04 LTS Linux Kernel Fixes Across Core Subsystems//Ubuntu 24.04 and 22.04 Kernel Fixes for Numerous System Flaws//Ubuntu 22.04 LTS Raspberry Pi Kernel Security Update for Your Device//Debian Trixie SPIP Update Blocks Unauthenticated Code Execution//CVE Data Registry Demo and User Guide Now Available for CNAs//Kubernetes Non-Core Security Audit//Ubuntu libgphoto2 Fixes USB-Triggered Crashes and Data Exposure//mackron dr_libs dr_wav drwav__read_cue_to_metadata_obj out-of-bounds write vulnerability//Ubuntu ca-certificates-java Fixes JKS Keystore Sync USN-9036-1//Ubuntu 26.04 rust-coreutils Security Fixes for File Operations//Ubuntu NVIDIA Kernel Update Addresses IPv4 Networking Flaw//Ubuntu 18.04 and 20.04 Kernel Issues Fixed in USN-9031-1//Ubuntu NVIDIA Kernel Update Addresses Many System Flaws//Ubuntu NVIDIA Low Latency Kernel Fixes for USN-9040-1 Explained//Ubuntu HPLIP Fixes Buffer Overflows and Command Execution//Ubuntu 24.04 LTS Linux Kernel Fixes Across Core Subsystems//Ubuntu 24.04 and 22.04 Kernel Fixes for Numerous System Flaws//Ubuntu 22.04 LTS Raspberry Pi Kernel Security Update for Your Device//Debian Trixie SPIP Update Blocks Unauthenticated Code Execution//CVE Data Registry Demo and User Guide Now Available for CNAs//Kubernetes Non-Core Security Audit//Ubuntu libgphoto2 Fixes USB-Triggered Crashes and Data Exposure//mackron dr_libs dr_wav drwav__read_cue_to_metadata_obj out-of-bounds write vulnerability//Ubuntu ca-certificates-java Fixes JKS Keystore Sync USN-9036-1//Ubuntu 26.04 rust-coreutils Security Fixes for File Operations//Ubuntu NVIDIA Kernel Update Addresses IPv4 Networking Flaw//Ubuntu 18.04 and 20.04 Kernel Issues Fixed in USN-9031-1//Ubuntu NVIDIA Kernel Update Addresses Many System Flaws//
Microsoft corregge oltre 1.200 falle, compresa una vulnerabilità Outlook già sfruttata
Top story — News

Microsoft fixes over 1,200 flaws, including an already exploited Outlook vulnerability

Microsoft's November Patch Tuesday fixed more than 1,200 vulnerabilities, although sources report slightly different totals depending on whether third-party CVEs are included. The most urgent flaw is CVE-2026-124194 in Outlook, which has already been exploited and can cause the client to connect to an attacker-controlled resource when the user opens a specially crafted message file. The connection may expose NTLMv2…

Read the article →
From the newsroom
Spotlight
Vulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogFurto da oltre 351 milioni di dollari a Bitget attribuito ad attori nordcoreaniTheft of Over $351 Million from Bitget Attributed to North Korean ActorsUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionPatch Tuesday di novembre: oltre 1.250 vulnerabilità e uno zero-day di Outlook sfruttatoNovember Patch Tuesday: Over 1,250 Vulnerabilities and an Exploited Outlook Zero-DayVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogFurto da oltre 351 milioni di dollari a Bitget attribuito ad attori nordcoreaniTheft of Over $351 Million from Bitget Attributed to North Korean ActorsUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionPatch Tuesday di novembre: oltre 1.250 vulnerabilità e uno zero-day di Outlook sfruttatoNovember Patch Tuesday: Over 1,250 Vulnerabilities and an Exploited Outlook Zero-Day
More news