● On the wire
Debian Cockpit Significant Code Execution Service Denial DSA-6474-1//Debian Trixie libdbi-perl Important Code Execution and DoS DSA-6473-1//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//Cisco Advance Notification for Publication of September 2, 2026, Security Advisories//Debian xrdp Advisory DSA-6469-1 Multiple Threats CVE-2026-32105//ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//Ubuntu 20.04 Linux Kernel Azure CVM Security Update USN-8658-4//Ubuntu Linux Kernel Azure Critical Flaws Fixed USN-8644-3//Ubuntu 22.04 LTS Kernel Critical Network Flaw Update USN-8661-3//Ubuntu OpenJDK 25 Important User Authorization Issues USN-8681-1//Ubuntu OpenJDK 11 Important Denial of Service Vulnerabilities USN-8674-1//Ubuntu 26.04 OpenJDK 17 Security Issues - USN-8676-1 - Multiple Threats//Ubuntu OpenJDK 21 Important Service Disruption Issues USN-8677-1//I pointed an agent at a bootloader. It found bugs but not useful ones//Debian Cockpit Significant Code Execution Service Denial DSA-6474-1//Debian Trixie libdbi-perl Important Code Execution and DoS DSA-6473-1//Debian trixie bubblewrap Critical Symlink Traverse Issue DSA-6472-1//Cisco Advance Notification for Publication of September 2, 2026, Security Advisories//Debian xrdp Advisory DSA-6469-1 Multiple Threats CVE-2026-32105//ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)//Ubuntu 24.04 libheif Critical Buffer Overflow Security Updates USN-8683-1//Ubuntu 20.04 Linux Kernel Azure CVM Security Update USN-8658-4//Ubuntu Linux Kernel Azure Critical Flaws Fixed USN-8644-3//Ubuntu 22.04 LTS Kernel Critical Network Flaw Update USN-8661-3//Ubuntu OpenJDK 25 Important User Authorization Issues USN-8681-1//Ubuntu OpenJDK 11 Important Denial of Service Vulnerabilities USN-8674-1//Ubuntu 26.04 OpenJDK 17 Security Issues - USN-8676-1 - Multiple Threats//Ubuntu OpenJDK 21 Important Service Disruption Issues USN-8677-1//I pointed an agent at a bootloader. It found bugs but not useful ones//
CISA dimostra il divario difensivo in due infrastrutture critiche
Top story — News

CISA Demonstrates the Defensive Gap in Two Critical Infrastructures

CISA has published the results of two red team assessments conducted in parallel against two critical infrastructure organizations. In both environments, the testers were able to achieve full domain compromise and access sensitive business systems and cloud assets. The key difference was the response capability: one organization did not detect or contain the activity, while the other quickly identified the…

Read the article →
From the newsroom
Spotlight
OpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch TuesdayServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedWordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderDue milioni di auto con antifurto installato dal concessionario sono esposte via BluetoothTwo million cars with dealer-installed anti-theft systems are exposed via BluetoothLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceExploit attivo su SharePoint CVE-2026-50522 dopo il Patch TuesdayActive exploit on SharePoint CVE-2026-50522 after Patch TuesdayServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedServiceNow AI Platform CVE-2026-6875: Unauthenticated RCE Already ExploitedWordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderDue milioni di auto con antifurto installato dal concessionario sono esposte via BluetoothTwo million cars with dealer-installed anti-theft systems are exposed via BluetoothLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designed
More news