● On the wire
Critical Ubuntu 22.04 LTS Linux Kernel Issues With Patch USN-8620-2//Ubuntu 22.04 20.04 libinput Important Code Execution Issue USN-8602-1//Ubuntu OpenSSL Critical Denial of Service Issue USN-8625-1//Happening Today: “CVE and AI Vulnerability Discovery” Virtual Conference//Debian Incus Significant Privilege Escalation Vulnerabilities DSA-6407-1//Patch In, Exploit Out: How deepsec Reconstructed the Pwn2Own Microsoft Edge Sandbox Escape//Exploiting Titan Quest//Ubuntu 20.04 LTS Linux Kernel Privilege Escalation Threat USN-8615-2//Debian Trixie Linux Kernel Security Notice DSA-6405-1 Privilege Escalation//Debian libgd2 Important Denial of Service CVE-2026-9672//Debian expat Critical Memory Corruption Denial of Service Vuln DSA-6404-1//Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Debian DSA-6403-1 nss Important Arbitrary Code Execution Fix//ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th)//Ubuntu 22.04 LTS Linux Kernel Critical Security Update 2026-8620-3//Critical Ubuntu 22.04 LTS Linux Kernel Issues With Patch USN-8620-2//Ubuntu 22.04 20.04 libinput Important Code Execution Issue USN-8602-1//Ubuntu OpenSSL Critical Denial of Service Issue USN-8625-1//Happening Today: “CVE and AI Vulnerability Discovery” Virtual Conference//Debian Incus Significant Privilege Escalation Vulnerabilities DSA-6407-1//Patch In, Exploit Out: How deepsec Reconstructed the Pwn2Own Microsoft Edge Sandbox Escape//Exploiting Titan Quest//Ubuntu 20.04 LTS Linux Kernel Privilege Escalation Threat USN-8615-2//Debian Trixie Linux Kernel Security Notice DSA-6405-1 Privilege Escalation//Debian libgd2 Important Denial of Service CVE-2026-9672//Debian expat Critical Memory Corruption Denial of Service Vuln DSA-6404-1//Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Debian DSA-6403-1 nss Important Arbitrary Code Execution Fix//ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th)//Ubuntu 22.04 LTS Linux Kernel Critical Security Update 2026-8620-3//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
Italy fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use them
More news