● On the wire
Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities//Debian bind9 Update Addresses DNS Attacks and Service Outages//Debian varnish Fixes Cache Poisoning and Worker Crashes//Vulnerabilities in PHP Affecting Cisco Products: October 2026//Someone Will Click. Is Your Security Team Ready?//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Ubuntu OpenVPN Update Blocks Certificate-Based Impersonation//YARA-X 1.22.0 Release, (Sun, Oct 25th)//Debian Brotli Update Addresses DoS and Code Execution Risk//Debian Roundcube Fixes IMAP Injection and Other Security Issues//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//Infostealer riding the AI Train//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities//Debian bind9 Update Addresses DNS Attacks and Service Outages//Debian varnish Fixes Cache Poisoning and Worker Crashes//Vulnerabilities in PHP Affecting Cisco Products: October 2026//Someone Will Click. Is Your Security Team Ready?//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//Ubuntu OpenVPN Update Blocks Certificate-Based Impersonation//YARA-X 1.22.0 Release, (Sun, Oct 25th)//Debian Brotli Update Addresses DoS and Code Execution Risk//Debian Roundcube Fixes IMAP Injection and Other Security Issues//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//Infostealer riding the AI Train//
Furto da oltre 351 milioni di dollari a Bitget attribuito ad attori nordcoreani
Top story — News

Theft of Over $351 Million from Bitget Attributed to North Korean Actors

Cryptocurrency exchange Bitget detected unauthorized transfers on September 24 from a limited number of hot and warm wallets, with a reported value of at least $351.6 million. Some sources initially estimated the losses at up to $387 million, but the figure disclosed directly by the company is lower. Bitget suspects the involvement of actors linked to North Korea and has…

Read the article →
From the newsroom
Spotlight
Vulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news