● On the wire
Ubuntu OpenSSH Critical Remote Access Issues Fixed USN-8928-1//Ubuntu Linux Kernel Advisory 8922-1 Multiple Vulnerabilities Fixed//YuanKong RAT: the Android remote-control service that stamps its operators' names into every build//Debian curl Critical Use-After-Free RCE DSA-6558-1 CVE-2026-92392//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Debian Trixie SOGo Key Cross-Site Scripting SQL Injection CVE-2026-93453//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Ubuntu 16.04 Linux Kernel Vulnerability Update 2026-8922-2//Cisco Advance Notification for Publication of October 21, 2026, Security Advisories//Ubuntu 22.04 Go Important Network Access Escalation CVE-2026-39821//Cisco Secure Email Gateway Arbitrary File Write Vulnerability//Ubuntu 16.04 14.04 Linux Kernel Important Flaws USN-8923-1//Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)//Debian Stable firefox-esr Important Code Exec Escalation DSA-6560-1//MISP Modules v3.0.12 Released - richer threat intelligence enrichment, improved interoperability with MISP objects, new enrichment capabilities, and increased reliability across existing modules.//Ubuntu OpenSSH Critical Remote Access Issues Fixed USN-8928-1//Ubuntu Linux Kernel Advisory 8922-1 Multiple Vulnerabilities Fixed//YuanKong RAT: the Android remote-control service that stamps its operators' names into every build//Debian curl Critical Use-After-Free RCE DSA-6558-1 CVE-2026-92392//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Debian Trixie SOGo Key Cross-Site Scripting SQL Injection CVE-2026-93453//Debian Chromium Critical Security Issues Code Execution DSA-6562-1//Ubuntu 16.04 Linux Kernel Vulnerability Update 2026-8922-2//Cisco Advance Notification for Publication of October 21, 2026, Security Advisories//Ubuntu 22.04 Go Important Network Access Escalation CVE-2026-39821//Cisco Secure Email Gateway Arbitrary File Write Vulnerability//Ubuntu 16.04 14.04 Linux Kernel Important Flaws USN-8923-1//Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)//Debian Stable firefox-esr Important Code Exec Escalation DSA-6560-1//MISP Modules v3.0.12 Released - richer threat intelligence enrichment, improved interoperability with MISP objects, new enrichment capabilities, and increased reliability across existing modules.//
Microsoft stabilisce un nuovo record nel Patch Tuesday di settembre con 974 vulnerabilità risolte
Top story — News

Microsoft Sets a New Record in September Patch Tuesday With 974 Vulnerabilities Fixed

Microsoft's September 2026 Patch Tuesday update set an all-time record, fixing between 972 and 974 vulnerabilities across its software portfolio, including more than 110 flaws classified as critical and 20 "wormable" bugs. The issues fixed include two zero-day vulnerabilities actively exploited in real-world attacks. One of these is CVE-2026-69414 (known as ShieldBreak), a privilege escalation vulnerability in Microsoft Defender. Just…

Read the article →
From the newsroom
Spotlight
N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionN-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news