● On the wire
Tricks from the Past deployed via signed ChatGPT and Claude binaries//Debian ImageMagick Update Fixes Image Processing Threats//Debian WordPress Update Fixes Multiple Attack Paths and Security Risks//Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability//Debian DSA-6585-2 Fixes Thunderbird PGP Email Regression//Cisco Advance Notification for Publication of November 4, 2026, Security Advisories//ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)//Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)//Vulnerabilities in Node.js Affecting Cisco Products: October 2026//php2shell: anatomy of two PHP lifecycle bugs//Debian Trixie php-mongodb Denial of Service Fixes and Updates//Cohere’s Qwen Story: Looks More Like Model Jaggedness//Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability//Scalable Vector Grief//Debian OpenJDK-25 Update Fixes Sandbox and Certificate Issues//Tricks from the Past deployed via signed ChatGPT and Claude binaries//Debian ImageMagick Update Fixes Image Processing Threats//Debian WordPress Update Fixes Multiple Attack Paths and Security Risks//Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability//Debian DSA-6585-2 Fixes Thunderbird PGP Email Regression//Cisco Advance Notification for Publication of November 4, 2026, Security Advisories//ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th)//Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)//Vulnerabilities in Node.js Affecting Cisco Products: October 2026//php2shell: anatomy of two PHP lifecycle bugs//Debian Trixie php-mongodb Denial of Service Fixes and Updates//Cohere’s Qwen Story: Looks More Like Model Jaggedness//Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability//Scalable Vector Grief//Debian OpenJDK-25 Update Fixes Sandbox and Certificate Issues//
Attacco alla supply chain di Brevo espone oltre 100.000 siti web
Top story — News

Brevo supply chain attack exposes over 100,000 websites

Brevo, the French marketing and communications platform formerly known as Sendinblue, suffered a supply chain attack that may have affected more than 100,000 websites. On September 10, the attackers reportedly exploited a vulnerability in the SAML SSO system, gaining access to 138 accounts, exporting contacts from 43 of them, and using six for phishing campaigns. Four days later, they returned…

Read the article →
From the newsroom
Spotlight
N-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionN-able rilascia un quarto hotfix d'emergenza per la falla RCE critica in N-central (CVE-2026-86218)N-able Releases Fourth Emergency Hotfix for Critical RCE Flaw in N-central (CVE-2026-86218)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news