● On the wire
Ubuntu 26.04 systemd Important Local Privilege Escalation Vuln 8626-1//ClamAV Vulnerabilities Affecting Cisco Products: August 2026//Debian DSA-6421-1 pdns-recursor Denial of Service CVE-2026-52682//What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security//Debian Wordpress Critical Remote Code Execution Vulnerabilities DSA-6427-1//Introducing the AI Red Teaming Upskill Program//Debian pdns Critical DoS Issue CVE-2026-52682 Fixed in DSA-6420-1//Debian Linux 6.12.101-1 Advisory DSA-6415-1 CVEs 2025-40098 to 2026-64584//Debian Icinga2 Important Denial of Service Privilege Escalation DSA-6426-1//Debian OpenJDK Information Disclosure Denial of Service Vuln DSA-6431-1//Debian openjdk-21 Important Cert Issues DoS Risk DSA-6425-1//CSS:the bomb inside your inbox//Video from “CVE and AI Vulnerability Discovery” Virtual Conference Now Available//Debian libyaml-syck-perl Important DoS and Code Exec Issues DSA-6428-1//CTI-Transmute 1.5 released with 16 security fixes and a first-class public API//Ubuntu 26.04 systemd Important Local Privilege Escalation Vuln 8626-1//ClamAV Vulnerabilities Affecting Cisco Products: August 2026//Debian DSA-6421-1 pdns-recursor Denial of Service CVE-2026-52682//What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security//Debian Wordpress Critical Remote Code Execution Vulnerabilities DSA-6427-1//Introducing the AI Red Teaming Upskill Program//Debian pdns Critical DoS Issue CVE-2026-52682 Fixed in DSA-6420-1//Debian Linux 6.12.101-1 Advisory DSA-6415-1 CVEs 2025-40098 to 2026-64584//Debian Icinga2 Important Denial of Service Privilege Escalation DSA-6426-1//Debian OpenJDK Information Disclosure Denial of Service Vuln DSA-6431-1//Debian openjdk-21 Important Cert Issues DoS Risk DSA-6425-1//CSS:the bomb inside your inbox//Video from “CVE and AI Vulnerability Discovery” Virtual Conference Now Available//Debian libyaml-syck-perl Important DoS and Code Exec Issues DSA-6428-1//CTI-Transmute 1.5 released with 16 security fixes and a first-class public API//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Ransomware sulla filiera del freddo in Giappone
News

Ransomware on Japan’s cold chain

A ransomware attack hit a Japanese food logistics company, causing delays and disruptions in the distribution chain for frozen products to thousands of customers. Among those affected are said to be major restaurant chains,…

Read the article →
Spotlight
Smantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralism
More news