● On the wire
Ubuntu Bind9 Security Advisory USN-8648-1 CVE-2026-10723 CVE-2026-10822//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Ubuntu libpng Critical DoS Threats Addressed USN-8639-1//Ubuntu Nginx Important DoS Injection Flaws USN-8563-3 CVE-2026-42533//Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability//Ubuntu 24.04 LTS Linux Kernel Critical Issues Update USN-8636-2//Who Secures AI When It Touches Every Security Team?//Cisco Unified Intelligence Center SQL Injection Vulnerability//Ubuntu 26.04 libssh Important Denial of Service Vulnerability USN-8093-2//Cisco Crosswork Security Hardening Release: August 2026//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//Ubuntu 26.04 introduces vital fixes for LibTIFF denial of service flaw//Breaking secure boot without breaking the crypto//Debian DSA-6451-1 Firefox-esr Critical Code Execution Issues//Ubuntu Bind9 Security Advisory USN-8648-1 CVE-2026-10723 CVE-2026-10822//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Ubuntu libpng Critical DoS Threats Addressed USN-8639-1//Ubuntu Nginx Important DoS Injection Flaws USN-8563-3 CVE-2026-42533//Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability//Ubuntu 24.04 LTS Linux Kernel Critical Issues Update USN-8636-2//Who Secures AI When It Touches Every Security Team?//Cisco Unified Intelligence Center SQL Injection Vulnerability//Ubuntu 26.04 libssh Important Denial of Service Vulnerability USN-8093-2//Cisco Crosswork Security Hardening Release: August 2026//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//Ubuntu 26.04 introduces vital fixes for LibTIFF denial of service flaw//Breaking secure boot without breaking the crypto//Debian DSA-6451-1 Firefox-esr Critical Code Execution Issues//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereignty
More news