● On the wire
Debian expat Critical Memory Corruption Denial of Service Vuln DSA-6404-1//Ubuntu Samba Critical Denial Of Service Vulnerabilities USN-8621-1//Ubuntu 22.04 20.04 libinput Important Code Execution Issue USN-8602-1//Debian hplip Important Escalation and Code Exec Risks DSA-6402-1//Happening Today: “CVE and AI Vulnerability Discovery” Virtual Conference//Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)//Ubuntu 26.04 LTS GNU C Library Critical Denial of Service USN-8611-1//Ubuntu Linux Kernel Security Issues Severity Important USN-8570-2//Ubuntu FreeIPMI Critical Buffer Overflow Denial of Service Advisory 8613-1//Cisco Advance Notification for Publication of August 5, 2026, Security Advisories//Exploiting Titan Quest//Ubuntu 24.04 LTS Linux-NVIDIA Kernel Moderate Security Issue USN-8623-1//Critical Ubuntu 22.04 LTS Linux Kernel Issues With Patch USN-8620-2//Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Ubuntu 22.04 Linux Kernel Critical Privilege Escalation Vulnern 2025-8619-1//Debian expat Critical Memory Corruption Denial of Service Vuln DSA-6404-1//Ubuntu Samba Critical Denial Of Service Vulnerabilities USN-8621-1//Ubuntu 22.04 20.04 libinput Important Code Execution Issue USN-8602-1//Debian hplip Important Escalation and Code Exec Risks DSA-6402-1//Happening Today: “CVE and AI Vulnerability Discovery” Virtual Conference//Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)//Ubuntu 26.04 LTS GNU C Library Critical Denial of Service USN-8611-1//Ubuntu Linux Kernel Security Issues Severity Important USN-8570-2//Ubuntu FreeIPMI Critical Buffer Overflow Denial of Service Advisory 8613-1//Cisco Advance Notification for Publication of August 5, 2026, Security Advisories//Exploiting Titan Quest//Ubuntu 24.04 LTS Linux-NVIDIA Kernel Moderate Security Issue USN-8623-1//Critical Ubuntu 22.04 LTS Linux Kernel Issues With Patch USN-8620-2//Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability//Ubuntu 22.04 Linux Kernel Critical Privilege Escalation Vulnern 2025-8619-1//
Campagna russa contro Zimbra con exploit zero-click e furto di email e codici 2FA
Top story — News

Russian campaign against Zimbra with zero-click exploit and theft of emails and 2FA codes

Several Russia-linked groups exploited an as-yet-unknown vulnerability in Zimbra for months to target government and strategic organizations in the West. The vector was particularly dangerous because simply opening or even just viewing the email message in the web client was enough to trigger the exploit, with no explicit click required from the user. Once inside, the attackers targeted email inboxes…

Read the article →
From the newsroom
Spotlight
Italy fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use themItaly fines WINDTRE €1.7 million after two customer data breachesItaly fines WINDTRE €1.7 million after two customer data breachesHollowGraph usa i calendari Microsoft 365 come canale C2 covertHollowGraph uses Microsoft 365 calendars as a covert C2 channelOpenAI: the models escaped the sandbox and hit Hugging FaceOpenAI: the models escaped the sandbox and hit Hugging FaceAge verification tools raise privacy, security and civil-liberties trade-offsAge verification tools raise privacy, security and civil-liberties trade-offsPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingPublic-sector AI ethics: Italy’s governance debate meets France Travail’s algorithmic targetingGoogle lancia CodeMender e Gemini 3.5 Flash Cyber per scovare vulnerabilitàGoogle launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilitiesLa sicurezza OT: il 'air gap' è un mito e la resilienza va progettataOT security: the ‘air gap’ is a myth and resilience must be designedPR3TACK vuole mappare le minacce prima che gli attaccanti le usinoPR3TACK wants to map threats before attackers use them
More news