● On the wire
Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//Debian OpenJDK 21 DSA-6457-1 Denial of Service Issues Fixed//Ubuntu 22.04 LTS Linux Kernel Security Issues USN-8658-2//Ubuntu libpng Critical DoS Threats Addressed USN-8639-1//Debian SPIP Critical Remote Code Execution Vuln DSA-6456-1//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//Ubuntu 22.04 LTS Low Latency Kernel Key for Packet Injection 2026-8661-2//Ubuntu 20.04 Linux Kernel Security Update USN-8668-1 CVE-2023-45896//Ubuntu curl Important Sensitive Data Exposure USN-8651-1 CVE-2026-11856//Ubuntu 26.04 Cap'n Proto Important HTTP Request Smuggling Issues USN-8650-1//Debian libgit2 Vulnerability DSA-6453-1 for Command Execution Risks//Ubuntu 24.04 LTS Linux Kernel NVIDIA Important Update Advisory 8669-1//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//Debian OpenJDK 21 DSA-6457-1 Denial of Service Issues Fixed//Ubuntu 22.04 LTS Linux Kernel Security Issues USN-8658-2//Ubuntu libpng Critical DoS Threats Addressed USN-8639-1//Debian SPIP Critical Remote Code Execution Vuln DSA-6456-1//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//Ubuntu 22.04 LTS Low Latency Kernel Key for Packet Injection 2026-8661-2//Ubuntu 20.04 Linux Kernel Security Update USN-8668-1 CVE-2023-45896//Ubuntu curl Important Sensitive Data Exposure USN-8651-1 CVE-2026-11856//Ubuntu 26.04 Cap'n Proto Important HTTP Request Smuggling Issues USN-8650-1//Debian libgit2 Vulnerability DSA-6453-1 for Command Execution Risks//Ubuntu 24.04 LTS Linux Kernel NVIDIA Important Update Advisory 8669-1//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//
La CISA aggiunge quattro vulnerabilità critiche al catalogo KEV per sfruttamento attivo
Top story — News

CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a…

Read the article →
From the newsroom
Spotlight
OpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralism
More news