● On the wire
Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Ubuntu PHP Updates Address Remote Code Execution Risks in Multiple Releases//Ubuntu ca-certificates Update Removes Compromised Root CAs//Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability//Cisco Expressway Series Information Disclosure Vulnerability//Ubuntu libxs-parse-keyword-perl Update Prevents Denial of Service//Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//Debian nginx Update Addresses Memory and Authentication Risks//Debian Trixie PHP 8.4 Fixes Memory Tracking Code Execution//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Cisco Unified Communications Products Security Hardening Release: October 2026//Multiple Cisco Products Snort 3 Security Hardening Release: October 2026//Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability//Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Ubuntu PHP Updates Address Remote Code Execution Risks in Multiple Releases//Ubuntu ca-certificates Update Removes Compromised Root CAs//Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability//Cisco Expressway Series Information Disclosure Vulnerability//Ubuntu libxs-parse-keyword-perl Update Prevents Denial of Service//Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities//Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs//Debian nginx Update Addresses Memory and Authentication Risks//Debian Trixie PHP 8.4 Fixes Memory Tracking Code Execution//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Cisco Unified Communications Products Security Hardening Release: October 2026//Multiple Cisco Products Snort 3 Security Hardening Release: October 2026//Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability//
Campagna FortiBleed compromette oltre 86.000 firewall Fortinet globalmente
Top story — News

FortiBleed Campaign Compromises Over 86,000 Fortinet Firewalls Globally

The FBI and the U.S. Secret Service have issued a joint alert regarding 'FortiBleed,' a massive credential-harvesting campaign that has already compromised 86,644 Fortinet FortiGate devices and SSL VPN gateways across 194 countries. The attackers exploit reused or leaked credentials and the legacy storage of passwords using SHA-256 to gain access and, in some cases, lock out legitimate administrators by…

Read the article →
From the newsroom
Spotlight
Sfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionSfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news