News & Sicurezza

Cybercriminals scale up, government sector hit hardest Government agencies faced the highest volume of cyberattack campaigns in 2025, according to new findings from HPE Threat Labs, which tracked 1,186 active campaigns over the course of the year. The dat ... Read more Published Date: Mar 18, 2026 (19 hours, 37 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2023-26801 CVE-2023-1389 CVE-2017-17215 CVE-2017-9841 CVE-2014-8361

Ubuntu Desktop Systems Vulnerability Enables Attackers to Gain Full Root Access Ubuntu Desktop Systems Vulnerability A Local Privilege Escalation (LPE) vulnerability in default installations of Ubuntu Desktop 24.04 and later allows an unprivileged local attacker to gain full root ... Read more Published Date: Mar 18, 2026 (15 hours, 57 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-3888

Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS Apple on Tuesday released its first round of Background Security Improvements to address a security flaw in WebKit that affects iOS, iPadOS, and macOS. The vulnerability, tracked as CVE-2026-20643 (CV ... Read more Published Date: Mar 18, 2026 (16 hours, 4 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-20643 CVE-2023-43010 CVE-2026-21385 CVE-2026-20700 CVE-2026-21513 CVE-2023-43000 CVE-2024-23222 CVE-2023-41974

CVE ID :CVE-2026-32596 Published : March 18, 2026, 6:16 a.m. | 3 hours, 20 minutes ago Description :Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with `glances -w`, exposing REST API with sensitive system information including process command-lines containing credentials (passwords, API keys, tokens) to any network client. Version 4.5.2 fixes the issue. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-32606 Published : March 18, 2026, 6:16 a.m. | 3 hours, 20 minutes ago Description :IncusOS is an immutable OS image dedicated to running Incus. Prior to 202603142010, the default configuration of systemd-cryptenroll as used by IncusOS through mkosi allows for an attacker with physical access to the machine to access the encrypted data without requiring any interaction by the system's owner or any tampering of Secure Boot state or kernel (UKI) boot image. That's because in this configuration, the LUKS key is made available by the TPM so long as the system has the expected PCR7 value and the PCR11 policy matches. That default PCR11 policy importantly allows for the TPM to release the key to the booted system rather than just from the initrd part of the signed kernel image (UKI). The attack relies on the attacker being able to substitute the original encrypted root partition for one that they control. By doing so, the system will prompt for a recovery key on boot, which the attacker has defined and can provide, before booting the system using the attacker's root partition rather than the system's original one. The attacker only needs to put a systemd unit starting on system boot within their root partition to have the system run that logic on boot. That unit will then run in an environment where the TPM will allow for the retrieval of the encryption key of the real root disk, allowing the attacker to steal the LUKS volume key (immutable master key) and then use it against the real root disk, altering it or getting data out before putting the disk back the way it was and returning the system without a trace of this attack having happened. This is all possible because the system will have still booted with Secure Boot enabled, will have measured and ran the expected bootloader and kernel image (UKI). The initrd selects the root disk based on GPT partition identifiers making it possible to easily substitute the real root disk for an attacker controlled...

Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23 Cybersecurity researchers have disclosed a critical security flaw impacting the GNU InetUtils telnet daemon (telnetd) that could be exploited by an unauthenticated remote attacker to execute arbitrary ... Read more Published Date: Mar 18, 2026 (13 hours, 26 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-32746 CVE-2026-21385 CVE-2026-21513 CVE-2026-24061

CVE ID :CVE-2026-32268 Published : March 18, 2026, 6:16 a.m. | 3 hours, 20 minutes ago Description :The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS. In versions on the 2.x branch prior to 2.1.1, unauthenticated users can view a list of buckets the plugin has access to. The `DefaultController->actionLoadContainerData()` endpoint allows unauthenticated users with a valid CSRF token to view a list of buckets that the plugin is allowed to see. Because Azure can return sensitive data in error messages, additional attack vectors are also exposed. Users should update to version 2.1.1 of the plugin to mitigate the issue. Severity: 8.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-4366 Published : March 18, 2026, 4:17 a.m. | 5 hours, 19 minutes ago Description :A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources. As a result, sensitive internal services such as cloud metadata endpoints could be accessed. This issue may lead to information disclosure and enable attackers to map internal network infrastructure. Severity: 5.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-33188 Published : March 18, 2026, 4:17 a.m. | 5 hours, 19 minutes ago Description :Rejected reason: Further research determined the issue originates from a different product. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-33189 Published : March 18, 2026, 4:17 a.m. | 5 hours, 19 minutes ago Description :Rejected reason: Further research determined the issue originates from a different product. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-33187 Published : March 18, 2026, 4:17 a.m. | 5 hours, 19 minutes ago Description :Rejected reason: Further research determined the issue originates from a different product. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-32266 Published : March 18, 2026, 4:17 a.m. | 5 hours, 19 minutes ago Description :The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS. In versions on the 2.x branch prior to 2.2.1, the `DefaultController->actionLoadBucketData()` endpoint allows unauthenticated users with a valid CSRF token to view a list of buckets that the plugin is allowed to see. Users should update to version 2.2.1 of the plugin to mitigate the issue. Severity: 2.4 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...