● On the wire
Debian libyaml-syck-perl Important DoS and Code Exec Issues DSA-6428-1//Introducing the AI Red Teaming Upskill Program//Debian Wordpress Critical Remote Code Execution Vulnerabilities DSA-6427-1//Debian SPIP Remote Code Execution SQL Injection and SSRF DSA-6435-1//Debian Flatpak Important Local Escalation Fix DSA-6432-1//Debian Postfix Critical DoS Policy Evasion Notice DSA-6430-1//Ubuntu 14.04 LTS Important Network Privilege Escalation - USN-8635-1//Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th)//Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability//Ubuntu 26.04 systemd Important Local Privilege Escalation Vuln 8626-1//CTI-Transmute 1.5 released with 16 security fixes and a first-class public API//Debian Xen Crucial Privilege Escalation Denial of Service Flaw DSA-6424-1//Debian DSA-6433-1 xdg-dbus-proxy Important Policy Bypass//Debian Caddy Important Access Control Breaches DSA-6429-1 CVE-2026-27585//Cisco Advance Notification for Publication of August 19, 2026, Security Advisories//Debian libyaml-syck-perl Important DoS and Code Exec Issues DSA-6428-1//Introducing the AI Red Teaming Upskill Program//Debian Wordpress Critical Remote Code Execution Vulnerabilities DSA-6427-1//Debian SPIP Remote Code Execution SQL Injection and SSRF DSA-6435-1//Debian Flatpak Important Local Escalation Fix DSA-6432-1//Debian Postfix Critical DoS Policy Evasion Notice DSA-6430-1//Ubuntu 14.04 LTS Important Network Privilege Escalation - USN-8635-1//Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th)//Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability//Ubuntu 26.04 systemd Important Local Privilege Escalation Vuln 8626-1//CTI-Transmute 1.5 released with 16 security fixes and a first-class public API//Debian Xen Crucial Privilege Escalation Denial of Service Flaw DSA-6424-1//Debian DSA-6433-1 xdg-dbus-proxy Important Policy Bypass//Debian Caddy Important Access Control Breaches DSA-6429-1 CVE-2026-27585//Cisco Advance Notification for Publication of August 19, 2026, Security Advisories//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilities
More news