● On the wire
Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Ubuntu 20.04 LTS Linux Kernel Privilege Escalation Threat USN-8615-2//Critical Ubuntu 22.04 LTS Linux Kernel Issues With Patch USN-8620-2//CVE Program Launches Frontier AI Researcher CNA Pilot//Cisco Secure Firewall Management Center Software Static Credential Vulnerability//Debian hplip Important Escalation and Code Exec Risks DSA-6402-1//Ubuntu 16.04 Python Important Denial of Service Fix USN-8614-1//Debian PHP 8.4 Critical Denial of Service SQL Injection Issues DSA-6406-1//Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)//Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st)//Ubuntu Linux Kernel Important NTFS Out-of-Bounds Read CVE-2023-45896//Debian Trixie Linux Kernel Security Notice DSA-6405-1 Privilege Escalation//Happening Today: “CVE and AI Vulnerability Discovery” Virtual Conference//Exploiting Titan Quest//Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Ubuntu 20.04 LTS Linux Kernel Privilege Escalation Threat USN-8615-2//Critical Ubuntu 22.04 LTS Linux Kernel Issues With Patch USN-8620-2//CVE Program Launches Frontier AI Researcher CNA Pilot//Cisco Secure Firewall Management Center Software Static Credential Vulnerability//Debian hplip Important Escalation and Code Exec Risks DSA-6402-1//Ubuntu 16.04 Python Important Denial of Service Fix USN-8614-1//Debian PHP 8.4 Critical Denial of Service SQL Injection Issues DSA-6406-1//Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)//Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st)//Ubuntu Linux Kernel Important NTFS Out-of-Bounds Read CVE-2023-45896//Debian Trixie Linux Kernel Security Notice DSA-6405-1 Privilege Escalation//Happening Today: “CVE and AI Vulnerability Discovery” Virtual Conference//Exploiting Titan Quest//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereignty
More news