È stato rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2026-41709 - già sanata dal vendor nel luglio 2026 - presente in VMware ESX, Cloud Foundation, vSphere Foundation e Telco Cloud Platform. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un attaccante con privilegi amministrativi di eseguire determinate operazioni senza che queste vengano registrate nei log di sistema.
Une vulnérabilité a été découverte dans Stormshield Management Center. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
Serial number: AV26-1008 Date: October 7, 2026 As of October 7, 2026, VMware is affected by vulnerabilities in the following products: VMware Fusion MacOS Prior to 26H1u1 VMware Workstation Prior to 26H1u1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)…
For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Minnesota IT Services has confirmed coordinated cyberattacks affecting more than 30 community water utilities across the state. The incidents briefly disrupted a treatment plant in Braham and affected industrial control systems. Officials reported that drinking water safety was not affected. While the attack was not officially attributed, federal…