● On the wire
Debian Thunderbird Significant Code Execution Vulnerabilities DSA-6418-1//CTI-Transmute 1.5 released with 16 security fixes and a first-class public API//Debian libde265 Major Exec Threat Memory Exhaustion DoS Notice DSA-6413-1//Debian dnsdist High Severity DoS CVE-2026-52682 DSA-6419-1//Debian openjdk-21 Important Cert Issues DoS Risk DSA-6425-1//Debian Caddy Important Access Control Breaches DSA-6429-1 CVE-2026-27585//Debian libheif Critical Denial of Service and Code Execution DSA-6417-1//Debian OpenJDK Information Disclosure Denial of Service Vuln DSA-6431-1//Debian jq Security Advisory DoS and Arbitrary Code Execution DSA-6416-1//When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers//Ubuntu 26.04 systemd Important Local Privilege Escalation Vuln 8626-1//Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability//Debian libyaml-syck-perl Important DoS and Code Exec Issues DSA-6428-1//Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack//Debian pdns Critical DoS Issue CVE-2026-52682 Fixed in DSA-6420-1//Debian Thunderbird Significant Code Execution Vulnerabilities DSA-6418-1//CTI-Transmute 1.5 released with 16 security fixes and a first-class public API//Debian libde265 Major Exec Threat Memory Exhaustion DoS Notice DSA-6413-1//Debian dnsdist High Severity DoS CVE-2026-52682 DSA-6419-1//Debian openjdk-21 Important Cert Issues DoS Risk DSA-6425-1//Debian Caddy Important Access Control Breaches DSA-6429-1 CVE-2026-27585//Debian libheif Critical Denial of Service and Code Execution DSA-6417-1//Debian OpenJDK Information Disclosure Denial of Service Vuln DSA-6431-1//Debian jq Security Advisory DoS and Arbitrary Code Execution DSA-6416-1//When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers//Ubuntu 26.04 systemd Important Local Privilege Escalation Vuln 8626-1//Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability//Debian libyaml-syck-perl Important DoS and Code Exec Issues DSA-6428-1//Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack//Debian pdns Critical DoS Issue CVE-2026-52682 Fixed in DSA-6420-1//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector works
More news