● On the wire
Ubuntu Samba Critical Denial Of Service Vulnerabilities USN-8621-1//Ubuntu 26.04 Roc Toolkit Significant Denial of Service Flaw USN-8612-1//Ubuntu 26.04 Rsyslog Critical Denial of Service Vuln USN-8598-1//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//Ubuntu FreeIPMI Critical Buffer Overflow Denial of Service Advisory 8613-1//Random Windows Things Part 2: Unexpected Clipboard Data Behavior//Ubuntu 26.04 LTS 8599-1 libhttp-date-perl Critical Denial of Service//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Ubuntu 20.04 Linux Kernel Alert USN-8620-1 CVE-2023-45896 High Risk//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//Debian exim4 Important Privilege Escalation Vuln DSA-6400-1//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Ubuntu 20.04 Kernel Critical Memory Exposure Flaws USN-8597-1//The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//Ubuntu Samba Critical Denial Of Service Vulnerabilities USN-8621-1//Ubuntu 26.04 Roc Toolkit Significant Denial of Service Flaw USN-8612-1//Ubuntu 26.04 Rsyslog Critical Denial of Service Vuln USN-8598-1//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1//Ubuntu FreeIPMI Critical Buffer Overflow Denial of Service Advisory 8613-1//Random Windows Things Part 2: Unexpected Clipboard Data Behavior//Ubuntu 26.04 LTS 8599-1 libhttp-date-perl Critical Denial of Service//Ubuntu 26.04 LTS Advisory 8601-1 PAM High Timing Attack//Ubuntu 20.04 Linux Kernel Alert USN-8620-1 CVE-2023-45896 High Risk//Prism: A Multi-Team Orchestration of LLM Agents for Automatic Program Repair//Debian exim4 Important Privilege Escalation Vuln DSA-6400-1//Ubuntu 16.04 Apache Commons BeanUtils Critical Regression Fix USN-8322-2//Ubuntu 20.04 Kernel Critical Memory Exposure Flaws USN-8597-1//The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?//Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137//
Campagna russa contro Zimbra con exploit zero-click e furto di email e codici 2FA
Top story — News

Russian campaign against Zimbra with zero-click exploit and theft of emails and 2FA codes

Several Russia-linked groups exploited an as-yet-unknown vulnerability in Zimbra for months to target government and strategic organizations in the West. The vector was particularly dangerous because simply opening or even just viewing the email message in the web client was enough to trigger the exploit, with no explicit click required from the user. Once inside, the attackers targeted email inboxes…

Read the article →
From the newsroom
Ransomware sulla filiera del freddo in Giappone
News

Ransomware on Japan’s cold chain

A ransomware attack hit a Japanese food logistics company, causing delays and disruptions in the distribution chain for frozen products to thousands of customers. Among those affected are said to be major restaurant chains,…

Read the article →
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereignty
More news