● On the wire
Debian BIND9 Important Cache Poisoning Denial of Service DSA-6395-1//Ubuntu 20.04 Kernel Critical Memory Exposure Flaws USN-8597-1//The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?//Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1//Ubuntu 26.04 LTS Kerberos Important DoS Issues USN-8585-1 CVE-2026-11850//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//Ubuntu 26.04 Rsyslog Critical Denial of Service Vuln USN-8598-1//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Debian pdns-recursor Critical Cache Poisoning DNSSEC Bypass DSA-6397-1//Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//Debian BIND9 Important Cache Poisoning Denial of Service DSA-6395-1//Ubuntu 20.04 Kernel Critical Memory Exposure Flaws USN-8597-1//The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?//Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1//Ubuntu 26.04 LTS Kerberos Important DoS Issues USN-8585-1 CVE-2026-11850//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Ubuntu 22.04 LTS Linux Kernel Important Security Flaws USN-8575-2//Ubuntu 26.04 Rsyslog Critical Denial of Service Vuln USN-8598-1//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Debian pdns-recursor Critical Cache Poisoning DNSSEC Bypass DSA-6397-1//Ubuntu 26.04 GIFLIB Critical Denial of Service 2026-23868//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//
Campagna russa contro Zimbra con exploit zero-click e furto di email e codici 2FA
Top story — News

Russian campaign against Zimbra with zero-click exploit and theft of emails and 2FA codes

Several Russia-linked groups exploited an as-yet-unknown vulnerability in Zimbra for months to target government and strategic organizations in the West. The vector was particularly dangerous because simply opening or even just viewing the email message in the web client was enough to trigger the exploit, with no explicit click required from the user. Once inside, the attackers targeted email inboxes…

Read the article →
From the newsroom
Ransomware sulla filiera del freddo in Giappone
News

Ransomware on Japan’s cold chain

A ransomware attack hit a Japanese food logistics company, causing delays and disruptions in the distribution chain for frozen products to thousands of customers. Among those affected are said to be major restaurant chains,…

Read the article →
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsEuropean AI sovereignty is becoming a strategic issue in finance, defense and healthcareEuropean AI sovereignty is becoming a strategic issue in finance, defense and healthcareHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsEuropean AI sovereignty is becoming a strategic issue in finance, defense and healthcareEuropean AI sovereignty is becoming a strategic issue in finance, defense and healthcare
More news