● On the wire
Cisco Expressway Series Remote Code Execution Vulnerability//Debian bind9 Update Addresses DNS Attacks and Service Outages//Ubuntu libxs-parse-keyword-perl Update Prevents Denial of Service//Ubuntu PyJWT Fixes DoS and Token Key Issues in USN-8934-1//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities//Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability//Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Cisco Unified Communications Manager Improper Access Control Vulnerability//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Cisco Expressway Series Information Disclosure Vulnerability//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//Cisco Expressway Series Remote Code Execution Vulnerability//Debian bind9 Update Addresses DNS Attacks and Service Outages//Ubuntu libxs-parse-keyword-perl Update Prevents Denial of Service//Ubuntu PyJWT Fixes DoS and Token Key Issues in USN-8934-1//Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution//Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities//Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability//OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks//Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability//Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues//Cisco Unified Communications Manager Improper Access Control Vulnerability//Ubuntu NSS Update Removes Compromised Certificate Authority Roots//Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability//Cisco Expressway Series Information Disclosure Vulnerability//Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities//
Vulnerabilità critica di VM-Escape corretta in VMware Workstation e Fusion
Top story — News

Critical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion

Broadcom has released urgent security updates to fix a critical integer overflow vulnerability (CVE-2026-59346) in VMware Workstation and Fusion. This flaw, which has a CVSS score of 9.3, resides in the VMXNET3 virtual network adapter. An attacker with local administrative privileges on the virtual machine can exploit this flaw to execute arbitrary code on the underlying host system. No temporary…

Read the article →
From the newsroom
Spotlight
Zero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFurto da oltre 351 milioni di dollari a Bitget attribuito ad attori nordcoreaniTheft of Over $351 Million from Bitget Attributed to North Korean ActorsCISA segnala attacchi attivi contro Microsoft SharePoint e MikroTik RouterOSCISA Reports Active Attacks Against Microsoft SharePoint and MikroTik RouterOSDue zero-day critiche di Citrix NetScaler sfruttate prima della disponibilità delle patchTwo critical Citrix NetScaler zero-days exploited before patches became availableDue zero-day Citrix NetScaler sfruttati globalmenteTwo Citrix NetScaler Zero-Days Exploited GloballyLo sfruttamento dei nuovi zero-day Citrix NetScaler diventa massivoExploitation of New Citrix NetScaler Zero-Days Becomes WidespreadZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFurto da oltre 351 milioni di dollari a Bitget attribuito ad attori nordcoreaniTheft of Over $351 Million from Bitget Attributed to North Korean ActorsCISA segnala attacchi attivi contro Microsoft SharePoint e MikroTik RouterOSCISA Reports Active Attacks Against Microsoft SharePoint and MikroTik RouterOSDue zero-day critiche di Citrix NetScaler sfruttate prima della disponibilità delle patchTwo critical Citrix NetScaler zero-days exploited before patches became availableDue zero-day Citrix NetScaler sfruttati globalmenteTwo Citrix NetScaler Zero-Days Exploited GloballyLo sfruttamento dei nuovi zero-day Citrix NetScaler diventa massivoExploitation of New Citrix NetScaler Zero-Days Becomes Widespread
More news