● On the wire
Who Secures AI When It Touches Every Security Team?//Ubuntu Linux Kernel NVIDIA Privilege Escalation Exploit USN-8663-1//Debian faces immediate security challenge with Chromium and code exploit//Ubuntu 20.04 Linux Kernel Security Update USN-8668-1 CVE-2023-45896//Ubuntu 24.04 LTS Linux Kernel Security Issues Local Exploit USN-8665-1//Debian Thunderbird Important Code Execution Info Disclosure DSA-6461-1//DOUBLECUP's PNG Payload, (Mon, Aug 24th)//Ubuntu PostgreSQL Critical Buffer Overflow SQL Injection Vuln 8653-1//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Debian OpenJDK 21 DSA-6457-1 Denial of Service Issues Fixed//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th)//Ubuntu 24.04 LTS Linux Kernel HWE Critical Security Flaw CVE-2026-64531//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//Who Secures AI When It Touches Every Security Team?//Ubuntu Linux Kernel NVIDIA Privilege Escalation Exploit USN-8663-1//Debian faces immediate security challenge with Chromium and code exploit//Ubuntu 20.04 Linux Kernel Security Update USN-8668-1 CVE-2023-45896//Ubuntu 24.04 LTS Linux Kernel Security Issues Local Exploit USN-8665-1//Debian Thunderbird Important Code Execution Info Disclosure DSA-6461-1//DOUBLECUP's PNG Payload, (Mon, Aug 24th)//Ubuntu PostgreSQL Critical Buffer Overflow SQL Injection Vuln 8653-1//Ubuntu 26.04 LTS Linux Kernel Important Security Flaws 2026-8664-1//Debian OpenJDK 21 DSA-6457-1 Denial of Service Issues Fixed//Ubuntu Vim Denial of Service USN-8657-1 CVE-2026-73071 CVE-2026-73072//ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th)//Ubuntu 24.04 LTS Linux Kernel HWE Critical Security Flaw CVE-2026-64531//Debian Highlights Key DNS Hijacking Denial of Service CVEs 6452-1//Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays, (Fri, Aug 21st)//
La CISA aggiunge quattro vulnerabilità critiche al catalogo KEV per sfruttamento attivo
Top story — News

CISA adds four critical vulnerabilities to KEV catalog for active exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in Apple macOS (CVE-2026-65400) and a weak authentication flaw in Microsoft SharePoint (CVE-2026-55040). Also included are a path traversal vulnerability in Broadcom VMware vCenter (CVE-2026-59310) and a…

Read the article →
From the newsroom
Ransomware sulla filiera del freddo in Giappone
News

Ransomware on Japan’s cold chain

A ransomware attack hit a Japanese food logistics company, causing delays and disruptions in the distribution chain for frozen products to thousands of customers. Among those affected are said to be major restaurant chains,…

Read the article →
Spotlight
WordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderDue milioni di auto con antifurto installato dal concessionario sono esposte via BluetoothTwo million cars with dealer-installed anti-theft systems are exposed via BluetoothLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralismWordPress wp2shell: la catena di exploit che sta alimentando la scansione di massaWordPress wp2shell: the exploit chain fueling mass scanningQilin sfrutta CVE-2026-0257 di PAN-OS GlobalProtect per entrare nelle VPNQilin exploits CVE-2026-0257 in PAN-OS GlobalProtect to breach VPNsFakeGit: 7.600 repository GitHub malevoli ingannano gli agenti AI e diffondono SmartLoaderFakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoaderDue milioni di auto con antifurto installato dal concessionario sono esposte via BluetoothTwo million cars with dealer-installed anti-theft systems are exposed via BluetoothLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themANPR data access via PDND changes the way the Italian public sector worksANPR data access via PDND changes the way the Italian public sector worksAGCOM says AI is reshaping access to information and pluralismAGCOM says AI is reshaping access to information and pluralism
More news