● On the wire
BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Ubuntu 24.04 LTS Linux Kernel NVIDIA Important Update Advisory 8669-1//Ubuntu Linux Kernel NVIDIA Privilege Escalation Exploit USN-8663-1//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//Debian libnet-dns-perl Noticeable RCE DoS Resolution DSA-6459-1//Ubuntu 24.04 LTS Linux Kernel HWE Critical Security Flaw CVE-2026-64531//Debian SABnzbd+ Essential Web Interface Bypass Correction DSA-6454-1//Ubuntu 20.04 18.04 Linux Kernel Critical Network Threats USN-8666-1//Debian DSA-6458-1 Gst-Plugins-Bad1.0 Critical DoS Code Exec//Debian Thunderbird Important Code Execution Info Disclosure DSA-6461-1//Ubuntu 20.04 LTS Linux Kernel KVM Important Network Attack Fix USN-8667-1//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//AWS EKS forensics: data sources and investigation tooling//Debian faces immediate security challenge with Chromium and code exploit//BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive//Ubuntu 24.04 LTS Linux Kernel NVIDIA Important Update Advisory 8669-1//Ubuntu Linux Kernel NVIDIA Privilege Escalation Exploit USN-8663-1//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//Debian libnet-dns-perl Noticeable RCE DoS Resolution DSA-6459-1//Ubuntu 24.04 LTS Linux Kernel HWE Critical Security Flaw CVE-2026-64531//Debian SABnzbd+ Essential Web Interface Bypass Correction DSA-6454-1//Ubuntu 20.04 18.04 Linux Kernel Critical Network Threats USN-8666-1//Debian DSA-6458-1 Gst-Plugins-Bad1.0 Critical DoS Code Exec//Debian Thunderbird Important Code Execution Info Disclosure DSA-6461-1//Ubuntu 20.04 LTS Linux Kernel KVM Important Network Attack Fix USN-8667-1//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//AWS EKS forensics: data sources and investigation tooling//Debian faces immediate security challenge with Chromium and code exploit//
La CISA aggiunge quattro vulnerabilità critiche al catalogo KEV per sfruttamento attivo
Top story — News

CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a…

Read the article →
From the newsroom
Spotlight
FakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offs
More news