● On the wire
Ubuntu 26.04 LTS PyJWT Important Token Forging Issues USN-8916-1//Debian Linux Security Advisory DSA-6568-1 Addresses CVE-2025-38204 Risk//Ubuntu 26.04-20.04 BlueZ Critical Regression Denial of Service USN-8908-2//Debian Trixie SOGo Key Cross-Site Scripting SQL Injection CVE-2026-93453//Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026//Debian cifs-utils Major Privilege Escalation Vulnerabilities DSA-6567-1//Ubuntu 26.04 LTS curl Security Flaws Denial of Service Threat USN-8927-1//Debian Buildstream Important File Write Issue DSA-6559-1 CVE-2026-82331//Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)//Debian Mutt Important DoS Arbitrary Code Execution DSA-6563-1//Ubuntu 22.04 Go Important Network Access Escalation CVE-2026-39821//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Cisco Advance Notification for Publication of October 21, 2026, Security Advisories//Ubuntu curl Important Sensitive Info Denial of Service Vuln USN-8932-1//Ubuntu OpenSSH Critical Remote Access Issues Fixed USN-8928-1//Ubuntu 26.04 LTS PyJWT Important Token Forging Issues USN-8916-1//Debian Linux Security Advisory DSA-6568-1 Addresses CVE-2025-38204 Risk//Ubuntu 26.04-20.04 BlueZ Critical Regression Denial of Service USN-8908-2//Debian Trixie SOGo Key Cross-Site Scripting SQL Injection CVE-2026-93453//Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026//Debian cifs-utils Major Privilege Escalation Vulnerabilities DSA-6567-1//Ubuntu 26.04 LTS curl Security Flaws Denial of Service Threat USN-8927-1//Debian Buildstream Important File Write Issue DSA-6559-1 CVE-2026-82331//Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)//Debian Mutt Important DoS Arbitrary Code Execution DSA-6563-1//Ubuntu 22.04 Go Important Network Access Escalation CVE-2026-39821//Ubuntu Apache HTTP Server USN-8931-1 Critical Issues Revealed//Cisco Advance Notification for Publication of October 21, 2026, Security Advisories//Ubuntu curl Important Sensitive Info Denial of Service Vuln USN-8932-1//Ubuntu OpenSSH Critical Remote Access Issues Fixed USN-8928-1//
Hacker stranieri manipolano i sistemi operativi di due acquedotti in Colorado
Top story — News

Foreign Hackers Manipulate the Operational Systems of Two Colorado Water Utilities

Foreign actors breached the OT systems of two small private water utilities in Colorado in late August, altering plant settings, pumping cycles, and alarm configurations. The intruders also temporarily disabled remote access, but the incidents were brief and compromised neither water quality nor public safety. The affected facilities, which were not identified, serve fewer than 200 people in total, and…

Read the article →
From the newsroom
Spotlight
Sfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and FusionSfruttamento attivo di vulnerabilità critiche nei router MikroTik (CVE-2026-67276, CVE-2026-86060)Active Exploitation of Critical Vulnerabilities in MikroTik Routers (CVE-2026-67276, CVE-2026-86060)CISA segnala cinque vulnerabilità attivamente sfruttate in Artifactory, ScreenConnect e RouterOSCISA Flags Five Actively Exploited Vulnerabilities in Artifactory, ScreenConnect, and RouterOSCISA segnala tre vulnerabilità del kernel Linux già sfruttateCISA Flags Three Linux Kernel Vulnerabilities Already ExploitedF5, Check Point e Arista: quattro vulnerabilità sfruttate entrano nel catalogo CISA KEVF5, Check Point, and Arista: Four Exploited Vulnerabilities Added to CISA KEV CatalogVulnerabilità critica pre-autenticazione in Orkes Conductor sfruttata attivamenteCritical Pre-Authentication Vulnerability in Orkes Conductor Actively ExploitedUn agente OpenAI ha aggirato i controlli di un portale sanitario australianoAn OpenAI agent bypassed the controls of an Australian healthcare portalFBI e DOJ interrompono l’infrastruttura di Flax Typhoon contro reti criticheFBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical NetworksVulnerabilità critica di VM-Escape corretta in VMware Workstation e FusionCritical VM-Escape Vulnerability Fixed in VMware Workstation and Fusion
More news