● On the wire
Debian Chromium Update Addresses Code Execution and Service Disruption//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Vulnerabilities in PHP Affecting Cisco Products: October 2026//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Ubuntu libsoup3 Update Addresses Remote HTTP Threats and Risks//Infostealer riding the AI Train//Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Debian Trixie AIDE Update Blocks Malicious File Detection Bypass//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//OSCP+ Scoring Update: What You Need to Know//Debian bind9 Update Addresses DNS Attacks and Service Outages//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//Debian Chromium Update Addresses Code Execution and Service Disruption//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Vulnerabilities in PHP Affecting Cisco Products: October 2026//Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Ubuntu libsoup3 Update Addresses Remote HTTP Threats and Risks//Infostealer riding the AI Train//Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Debian Trixie AIDE Update Blocks Malicious File Detection Bypass//Ubuntu Tornado Updates Address Network Request Attacks and Vulnerabilities//OSCP+ Scoring Update: What You Need to Know//Debian bind9 Update Addresses DNS Attacks and Service Outages//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//
Microsoft stabilisce un nuovo record nel Patch Tuesday di settembre con 974 vulnerabilità risolte
Top story — News

Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed

Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues fixed include two zero-day vulnerabilities actively exploited in real-world attacks. One of these is CVE-2026-69414 (known as ShieldBreak), a privilege escalation vulnerability in Microsoft Defender. Just…

Read the article →
From the newsroom
Spotlight
Zero-day critica in FortiMail sfruttata attivamente e inserita nel catalogo KEVCritical FortiMail zero-day actively exploited and added to the KEV catalogNuovo vettore di attacco contro Citrix NetScaler dopo le patch inizialiNew Attack Vector Against Citrix NetScaler After Initial PatchesVulnerabilità critica Atlassian sfruttata poche ore dopo la pubblicazione dei dettagliCritical Atlassian Vulnerability Exploited Hours After Details Were PublishedVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionZero-day critica in FortiMail sfruttata attivamente e inserita nel catalogo KEVCritical FortiMail zero-day actively exploited and added to the KEV catalogNuovo vettore di attacco contro Citrix NetScaler dopo le patch inizialiNew Attack Vector Against Citrix NetScaler After Initial PatchesVulnerabilità critica Atlassian sfruttata poche ore dopo la pubblicazione dei dettagliCritical Atlassian Vulnerability Exploited Hours After Details Were PublishedVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news