● On the wire
Ubuntu OpenSSH Critical Remote Access Issues Fixed USN-8928-1//Ubuntu 16.04 14.04 Linux Kernel Important Flaws USN-8923-1//Ubuntu 24.04 LTS Linux Kernel Important Security Flaws USN-8917-1//Ubuntu 18.04 LTS Kernel Important Fix Multiple Issues USN-8921-1//Debian Trixie SOGo Key Cross-Site Scripting SQL Injection CVE-2026-93453//Ubuntu 26.04 LTS PyJWT Important Token Forging Issues USN-8916-1//Ubuntu FFmpeg Important Code Exec Denial of Service USN-8915-1//MISP Modules v3.0.12 Released - richer threat intelligence enrichment, improved interoperability with MISP objects, new enrichment capabilities, and increased reliability across existing modules.//Debian librsvg Critical DoS and Code Exec Flaw DSA-6555-1 CVE-2026-96889//Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)//Cisco Advance Notification for Publication of October 21, 2026, Security Advisories//Debian Trixie DSA-6557-1 ntfs-3g Critical Security Flaw Root Escalation//Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)//Playing It SFAPE: Code Execution in Isolated User Mode//Power Grid Model Security Audit//Ubuntu OpenSSH Critical Remote Access Issues Fixed USN-8928-1//Ubuntu 16.04 14.04 Linux Kernel Important Flaws USN-8923-1//Ubuntu 24.04 LTS Linux Kernel Important Security Flaws USN-8917-1//Ubuntu 18.04 LTS Kernel Important Fix Multiple Issues USN-8921-1//Debian Trixie SOGo Key Cross-Site Scripting SQL Injection CVE-2026-93453//Ubuntu 26.04 LTS PyJWT Important Token Forging Issues USN-8916-1//Ubuntu FFmpeg Important Code Exec Denial of Service USN-8915-1//MISP Modules v3.0.12 Released - richer threat intelligence enrichment, improved interoperability with MISP objects, new enrichment capabilities, and increased reliability across existing modules.//Debian librsvg Critical DoS and Code Exec Flaw DSA-6555-1 CVE-2026-96889//Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)//Cisco Advance Notification for Publication of October 21, 2026, Security Advisories//Debian Trixie DSA-6557-1 ntfs-3g Critical Security Flaw Root Escalation//Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)//Playing It SFAPE: Code Execution in Isolated User Mode//Power Grid Model Security Audit//
Attacco alla supply chain di Brevo espone oltre 100.000 siti web
Top story — News

Brevo supply chain attack exposes over 100,000 websites

Brevo, the French marketing and communications platform formerly known as Sendinblue, suffered a supply chain attack that may have affected more than 100,000 websites. On September 10, the attackers reportedly exploited a vulnerability in the SAML SSO system, gaining access to 138 accounts, exporting contacts from 43 of them, and using six for phishing campaigns. Four days later, they returned…

Read the article →
From the newsroom
Spotlight
CISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogZero-day critico in Cisco Catalyst SD-WAN Manager sfruttato attivamenteCritical Zero-Day in Cisco Catalyst SD-WAN Manager Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedZero-day nei server di gestione Check Point sfruttata in attacchi miratiZero-day in Check Point management servers exploited in targeted attacksF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogZero-day critico in Cisco Catalyst SD-WAN Manager sfruttato attivamenteCritical Zero-Day in Cisco Catalyst SD-WAN Manager Actively ExploitedHacker stranieri manipolano i sistemi operativi di due acquedotti in ColoradoForeign Hackers Manipulate the Operational Systems of Two Colorado Water UtilitiesUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news