● On the wire
Ubuntu 26.04 Libgcrypt Important Side-Channel Network Exposure USN-8711-1//Ubuntu 26.04 LTS BioSig Critical Denial of Service Vulnerabilities Found//Ubuntu FFmpeg Major Vulnerabilities in Code Execution and DoS USN-8716-1//Ubuntu 26.04 libssh2 Important Remote Exec DoS Issues USN-8722-1//Ubuntu ncurses Important Denial of Service Vuln USN-8709-1 CVE-2025-6141//Ubuntu 26.04 Pillow Important Image Processing Crash CVE-2026-59198//Debian Chromium Critical Remote Code Execution Denial of Service Advisory//Ubuntu 26.04 LTS rabbitmq-c Important Security Updates and Vulnerabilities//Ubuntu Kernel Update USN-8725-1 Multiple Security Issues//numbat - AI agent observability, (Fri, Sep 4th)//Cisco IOS XR Software Security Hardening Release: September 2026//What If Your Idea Became the Next OffSec Lab?//Ubuntu 26.04 openCryptoki Important Heap Corruption DoS Advisory USN-8707-1//Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability//Ubuntu 26.04 LTS SSSD Crash Due to Smartcard Interaction USN-8672-1//Ubuntu 26.04 Libgcrypt Important Side-Channel Network Exposure USN-8711-1//Ubuntu 26.04 LTS BioSig Critical Denial of Service Vulnerabilities Found//Ubuntu FFmpeg Major Vulnerabilities in Code Execution and DoS USN-8716-1//Ubuntu 26.04 libssh2 Important Remote Exec DoS Issues USN-8722-1//Ubuntu ncurses Important Denial of Service Vuln USN-8709-1 CVE-2025-6141//Ubuntu 26.04 Pillow Important Image Processing Crash CVE-2026-59198//Debian Chromium Critical Remote Code Execution Denial of Service Advisory//Ubuntu 26.04 LTS rabbitmq-c Important Security Updates and Vulnerabilities//Ubuntu Kernel Update USN-8725-1 Multiple Security Issues//numbat - AI agent observability, (Fri, Sep 4th)//Cisco IOS XR Software Security Hardening Release: September 2026//What If Your Idea Became the Next OffSec Lab?//Ubuntu 26.04 openCryptoki Important Heap Corruption DoS Advisory USN-8707-1//Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability//Ubuntu 26.04 LTS SSSD Crash Due to Smartcard Interaction USN-8672-1//
Chrome/V8 zero-day attivamente sfruttato e inserito nel catalogo CISA KEV
Top story — News

Chrome/V8 zero-day actively exploited and added to the CISA KEV catalog

Google has released an urgent update for Chrome that fixes 12 vulnerabilities, including CVE-2026-85046, a type confusion flaw in the V8 engine already exploited in the wild. The flaw can allow a remote attacker to execute arbitrary code in the browser sandbox through a specially crafted HTML page. CISA has added the bug to the Known Exploited Vulnerabilities catalog, confirming…

Read the article →
From the newsroom
Zero-day SonicWall SMA 1000 sfruttati in rete
News

Zero-day SonicWall SMA 1000 exploited in the wild

SonicWall has patched two vulnerabilities in SMA 1000 gateways already exploited in real-world attacks: CVE-2026-83548, a pre-authentication SSRF, and CVE-2026-83549, a post-authentication command injection flaw. Researchers and various advisories cite the possibility that attackers…

Read the article →
Spotlight
Check Point SmartConsole: bypass di autenticazione attivamente sfruttatoCheck Point SmartConsole: authentication bypass actively exploitedAttacchi iraniani contro sistemi industriali Siemens e SchneiderIranian attacks against Siemens and Schneider industrial systemsLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderCISA dimostra il divario difensivo in due infrastrutture criticheCISA Demonstrates the Defensive Gap in Two Critical InfrastructuresCheck Point SmartConsole: bypass di autenticazione attivamente sfruttatoCheck Point SmartConsole: authentication bypass actively exploitedAttacchi iraniani contro sistemi industriali Siemens e SchneiderIranian attacks against Siemens and Schneider industrial systemsLa falla di Adobe Acrobat per Chrome espone i dati di WhatsApp WebThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataRansomware sulla filiera del freddo in GiapponeRansomware on Japan’s cold chainUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootSmantellato Kratos, il kit di phishing dietro migliaia di campagne al meseKratos taken down, the phishing kit behind thousands of campaigns per monthFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderCISA dimostra il divario difensivo in due infrastrutture criticheCISA Demonstrates the Defensive Gap in Two Critical Infrastructures
More news