News & Sicurezza

Hackers Use Jira Notifications to Bypass Spam Filters A new spam campaign is slipping past enterprise defenses by wearing a disguise that most security filters explicitly trust: Atlassian Jira. A new report from Trend Micro details how threat actors are ... Read more Published Date: Feb 18, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-20700 CVE-2025-22167 CVE-2024-25608 CVE-2023-22501

“Dormant” Backdoors: Ivanti EPMM Zero-Days Exploited to Plant Long-Term Spies Two critical zero-day vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) are currently being exploited in a widespread campaign to compromise enterprise networks across the globe. A new report f ... Read more Published Date: Feb 18, 2026 (19 hours, 2 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-20700 CVE-2026-1340 CVE-2026-1281 CVE-2025-58034 CVE-2025-53690 CVE-2025-24983 CVE-2024-11120 CVE-2024-47575

China-linked snoops have been exploiting Dell 0-day since mid-2024, using 'ghost NICs' to avoid detection China-linked attackers exploited a maximum-severity hardcoded-credential bug in Dell RecoverPoint for Virtual Machines as a zero-day since at least mid-2024. It's all part of a long-running effort to ... Read more Published Date: Feb 18, 2026 (17 hours, 3 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-22769

CISA Adds 2008 Windows Flaw & Chrome Zero-Day to KEV The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog with four new entries. The agency has confirmed evidence of active exploitatio ... Read more Published Date: Feb 18, 2026 (17 hours, 9 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-2441 CVE-2026-20700 CVE-2025-0111 CVE-2025-23209 CVE-2024-7694 CVE-2020-7796 CVE-2008-0015

CVE ID : CVE-2026-2570 Published : Feb. 17, 2026, 11:16 p.m. | 5 hours, 43 minutes ago Description : Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.

CVE ID : CVE-2026-26119 Published : Feb. 17, 2026, 11:16 p.m. | 5 hours, 43 minutes ago Description : Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2026-1670 Published : Feb. 17, 2026, 11:16 p.m. | 5 hours, 43 minutes ago Description : The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands and gain access to sensitive information due to unrestricted file uploads.

CVE ID : CVE-2025-62183 Published : Feb. 17, 2026, 11:16 p.m. | 5 hours, 43 minutes ago Description : Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights, impact to Confidentiality and Integrity are low. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-13333 Published : Feb. 17, 2026, 11:16 p.m. | 5 hours, 43 minutes ago Description : IBM WebSphere Application Server 9.0, and 8.5 could provide weaker than expected security during system administration of security settings. Severity: 4.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID : CVE-2025-13689 Published : Feb. 17, 2026, 11:16 p.m. | 5 hours, 43 minutes ago Description : IBM DataStage on Cloud Pak for Data could allow an authenticated user to execute arbitrary commands and gain access to sensitive information due to unrestricted file uploads. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...