● On the wire
Debian SRT Important DoS Encryption Bypass Vulnerabilities DSA-6450-1//Ubuntu 14.04 LTS Linux Kernel Security Advisory USN-8646-1//ARM64 stack internals and obfuscation on Apple Silicon//Debian SPIP Severe Remote Code Execution Vulnerability DSA-6448-1//Recovering Encrypted LLM Reasoning Traces//Debian DSA-6447-1 Librabbitmq Important DoS Code Exec Vulnerabilities//Debian expat Important UTF-16 Decode DoS Issue DSA-6446-1 CVE-2026-72522//Debian Trixie Unzip Important Code Execution Issue DSA-6440-1//Breaking secure boot without breaking the crypto//Ubuntu 24.04 LTS Linux Kernel Important Security Issues USN-8629-3//Debian Trixie Zip Command Injection Vulnerability DSA-6439-1//You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452//Ubuntu 22.04 LTS Linux Kernel Security Update USN-8630-3//Debian Python-httplib2 Important Denial of Service Vuln DSA-6441-1//Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect//Debian SRT Important DoS Encryption Bypass Vulnerabilities DSA-6450-1//Ubuntu 14.04 LTS Linux Kernel Security Advisory USN-8646-1//ARM64 stack internals and obfuscation on Apple Silicon//Debian SPIP Severe Remote Code Execution Vulnerability DSA-6448-1//Recovering Encrypted LLM Reasoning Traces//Debian DSA-6447-1 Librabbitmq Important DoS Code Exec Vulnerabilities//Debian expat Important UTF-16 Decode DoS Issue DSA-6446-1 CVE-2026-72522//Debian Trixie Unzip Important Code Execution Issue DSA-6440-1//Breaking secure boot without breaking the crypto//Ubuntu 24.04 LTS Linux Kernel Important Security Issues USN-8629-3//Debian Trixie Zip Command Injection Vulnerability DSA-6439-1//You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452//Ubuntu 22.04 LTS Linux Kernel Security Update USN-8630-3//Debian Python-httplib2 Important Denial of Service Vuln DSA-6441-1//Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect//
Check Point SmartConsole: bypass di autenticazione attivamente sfruttato
Top story — News

Check Point SmartConsole: authentication bypass actively exploited

Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate that the bug is already being exploited in the wild, although the direct impact currently concerns only a limited number of customers. The flaw affects Security…

Read the article →
From the newsroom
Ransomware sulla filiera del freddo in Giappone
News

Ransomware on Japan’s cold chain

A ransomware attack hit a Japanese food logistics company, causing delays and disruptions in the distribution chain for frozen products to thousands of customers. Among those affected are said to be major restaurant chains,…

Read the article →
Spotlight
HollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilitiesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: la race condition che porta al root localeUbuntu snap-confine: the race condition that leads to local rootAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismChina's Kimi K3 is testing Western AI pricing, chips, and sovereigntyChina’s Kimi K3 is testing Western AI pricing, chips, and sovereigntyANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingFSE 2.0: new privacy obligations for private facilitiesFSE 2.0: new privacy obligations for private facilities
More news