● On the wire
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Debian faces immediate security challenge with Chromium and code exploit//Ubuntu PostgreSQL Critical Buffer Overflow SQL Injection Vuln 8653-1//Cisco Secure Workload Software Security Hardening Release: August 2026//Ubuntu 26.04 Cap'n Proto Important HTTP Request Smuggling Issues USN-8650-1//Ubuntu Nginx Important DoS Injection Flaws USN-8563-3 CVE-2026-42533//Debian libgit2 Vulnerability DSA-6453-1 for Command Execution Risks//Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability//Ubuntu 24.04 LTS Linux Kernel Security Issues Local Exploit USN-8665-1//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Debian DSA-6451-1 Firefox-esr Critical Code Execution Issues//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//[Initial Disclosure] AMD | ZEN 1//Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Debian faces immediate security challenge with Chromium and code exploit//Ubuntu PostgreSQL Critical Buffer Overflow SQL Injection Vuln 8653-1//Cisco Secure Workload Software Security Hardening Release: August 2026//Ubuntu 26.04 Cap'n Proto Important HTTP Request Smuggling Issues USN-8650-1//Ubuntu Nginx Important DoS Injection Flaws USN-8563-3 CVE-2026-42533//Debian libgit2 Vulnerability DSA-6453-1 for Command Execution Risks//Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability//Ubuntu 24.04 LTS Linux Kernel Security Issues Local Exploit USN-8665-1//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Debian DSA-6451-1 Firefox-esr Critical Code Execution Issues//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//[Initial Disclosure] AMD | ZEN 1//
La CISA aggiunge quattro vulnerabilità critiche al catalogo KEV per sfruttamento attivo
Top story — News

CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a…

Read the article →
From the newsroom
Spotlight
FakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilities
More news