● On the wire
Ubuntu 26.04 introduces vital fixes for LibTIFF denial of service flaw//Debian Ironic High Sign-in Access Bypass Code Execution DSA-6445-1//Breaking secure boot without breaking the crypto//Debian SPIP Severe Remote Code Execution Vulnerability DSA-6448-1//Ubuntu 14.04 LTS Linux Kernel Security Advisory USN-8646-1//Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect//Ubuntu 22.04 LTS Linux Kernel Security Update USN-8630-3//Ubuntu 24.04 LTS Linux Kernel Important Security Issues USN-8629-3//Ubuntu 26.04 libssh Important Denial of Service Vulnerability USN-8093-2//Ubuntu Nginx Important DoS Injection Flaws USN-8563-3 CVE-2026-42533//Debian DSA-6447-1 Librabbitmq Important DoS Code Exec Vulnerabilities//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Cisco RoomOS Stack Overflow Vulnerability//Ubuntu libheif Important Denial of Service Vulnerabilities USN-8649-1//Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability//Ubuntu 26.04 introduces vital fixes for LibTIFF denial of service flaw//Debian Ironic High Sign-in Access Bypass Code Execution DSA-6445-1//Breaking secure boot without breaking the crypto//Debian SPIP Severe Remote Code Execution Vulnerability DSA-6448-1//Ubuntu 14.04 LTS Linux Kernel Security Advisory USN-8646-1//Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect//Ubuntu 22.04 LTS Linux Kernel Security Update USN-8630-3//Ubuntu 24.04 LTS Linux Kernel Important Security Issues USN-8629-3//Ubuntu 26.04 libssh Important Denial of Service Vulnerability USN-8093-2//Ubuntu Nginx Important DoS Injection Flaws USN-8563-3 CVE-2026-42533//Debian DSA-6447-1 Librabbitmq Important DoS Code Exec Vulnerabilities//Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability//Cisco RoomOS Stack Overflow Vulnerability//Ubuntu libheif Important Denial of Service Vulnerabilities USN-8649-1//Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Spotlight
Italy fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralism
More news