● On the wire
Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Ubuntu 22.04 LTS Kernel Significant NTFS Exploit Privilege Escalation Alert//Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?//Ubuntu 20.04 Kernel Critical Memory Exposure Flaws USN-8597-1//Ubuntu 26.04 LTS Kerberos Important DoS Issues USN-8585-1 CVE-2026-11850//Ubuntu 16.04 libapache-mod-jk Important Fix for DoS Issue USN-8369-2//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Ubuntu 26.04 Tar Important Directory Injection Fix USN-8477-3//Ubuntu libgphoto2 Important Buffer Abuse Denial of Service Vuln 8586-1//QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation//Ubuntu 26.04 Rsyslog Critical Denial of Service Vuln USN-8598-1//Ubuntu 26.04 LTS 8599-1 libhttp-date-perl Critical Denial of Service//Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Ubuntu 22.04 LTS Kernel Significant NTFS Exploit Privilege Escalation Alert//Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1//Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?//Ubuntu 20.04 Kernel Critical Memory Exposure Flaws USN-8597-1//Ubuntu 26.04 LTS Kerberos Important DoS Issues USN-8585-1 CVE-2026-11850//Ubuntu 16.04 libapache-mod-jk Important Fix for DoS Issue USN-8369-2//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Ubuntu 26.04 Tar Important Directory Injection Fix USN-8477-3//Ubuntu libgphoto2 Important Buffer Abuse Denial of Service Vuln 8586-1//QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation//Ubuntu 26.04 Rsyslog Critical Denial of Service Vuln USN-8598-1//Ubuntu 26.04 LTS 8599-1 libhttp-date-perl Critical Denial of Service//
Campagna russa contro Zimbra con exploit zero-click e furto di email e codici 2FA
Top story — News

Russian campaign against Zimbra with zero-click exploit and theft of emails and 2FA codes

Several Russia-linked groups exploited an as-yet-unknown vulnerability in Zimbra for months to target government and strategic organizations in the West. The vector was particularly dangerous because simply opening or even just viewing the email message in the web client was enough to trigger the exploit, with no explicit click required from the user. Once inside, the attackers targeted email inboxes…

Read the article →
From the newsroom
Spotlight
La falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereignty
More news