● On the wire
Ubuntu Samba Critical Denial Of Service Vulnerabilities USN-8621-1//Debian Samba Important DoS and Privilege Escalation DSA-6401-1//Ubuntu Linux Kernel Critical Privilege Escalation Issues USN-8596-1//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//CVE Program Launches Frontier AI Researcher CNA Pilot//Ubuntu 26.04 LTS GNU C Library Critical Denial of Service USN-8611-1//Ubuntu 26.04 LTS libXpm Critical Crash Vulnerability CVE-2026-4367//Ubuntu FreeRDP RDP Client Significant Clipboard Regression Fix USN-8561-2//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//Ubuntu 26.04 Roc Toolkit Significant Denial of Service Flaw USN-8612-1//Debian hplip Important Escalation and Code Exec Risks DSA-6402-1//Ubuntu 24.04 AWS Kernel Important Security Issues Fix USN-8595-3//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//Ubuntu Linux Kernel Security Issues Severity Important USN-8570-2//Ubuntu Samba Critical Denial Of Service Vulnerabilities USN-8621-1//Debian Samba Important DoS and Privilege Escalation DSA-6401-1//Ubuntu Linux Kernel Critical Privilege Escalation Issues USN-8596-1//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//CVE Program Launches Frontier AI Researcher CNA Pilot//Ubuntu 26.04 LTS GNU C Library Critical Denial of Service USN-8611-1//Ubuntu 26.04 LTS libXpm Critical Crash Vulnerability CVE-2026-4367//Ubuntu FreeRDP RDP Client Significant Clipboard Regression Fix USN-8561-2//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//Ubuntu 26.04 Roc Toolkit Significant Denial of Service Flaw USN-8612-1//Debian hplip Important Escalation and Code Exec Risks DSA-6402-1//Ubuntu 24.04 AWS Kernel Important Security Issues Fix USN-8595-3//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//Ubuntu Linux Kernel Security Issues Severity Important USN-8570-2//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelLa campagna ClickFake nordcoreana punta i professionisti Web3North Korean ClickFake campaign targets Web3 professionalsAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelLa campagna ClickFake nordcoreana punta i professionisti Web3North Korean ClickFake campaign targets Web3 professionalsAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereignty
More news