I criminali informatici specializzati in ransomware hanno avuto un mese di vantaggio sulla vulnerabilità 0-day della VPN di Check Point, per la quale è ora disponibile una correzione
Sintesi redazionale: Dei criminali, tra cui un affiliato del ransomware Qilin, hanno iniziato a sfruttare questa vulnerabilità il 7 maggio. Fonte originale: https://www.theregister.com/cyber-crime/2026/06/08/attackers-had-month-long-head-start-on-patched-check-point-vpn-zero-day/5252438
<p>### TOP STORIES</p><p>### AI</p><p>-<br>ai and ml</p><p>#### Anthropic promises zero data retention – but customers must check it worked</p><p>More compliance-friendly stance could boost appeal of Fable</p><p>-<br>Security</p><p>#### Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks</p><p>The model provider gave METR the credits for free. An actual customer would not have been so lucky</p><p>-<br>ai and ml</p><p>#### Anthropic pledges to try harder to keep models under control, asks partners to chip in</p><p>Security ... this time it will be different</p><p>-<br>SYSTEMS</p><p>#### Nvidia is building an IP licensing empire on the back of NVLink</p><p>Even when you think you're not buying Nvidia, you might still be buying Nvidia</p><p>-<br>ai and ml</p><p>#### Energy biz SSE smacked around in court by a guy and AI</p><p>Company's three year pursuit of debt from non-existent address ended by Oxford judge</p><p>### Infosec</p><p>-<br>Security</p><p>#### Russians are posing as Signal support to launch phishing attacks</p><p>PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!</p><p>-<br>Security</p><p>#### Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack</p><p>PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more</p><p>-<br>Black Hat and DEF CON</p><p>#### DEF CON Franklin project enlists hackers to harden critical infrastructure</p><p>Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included</p><p>-<br>Security</p><p>#### EQT buys majority share in Swiss cybersecurity biz Acronis</p><p>Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified</p><p>-<br>Malware Month</p><p>#### Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight</p><p>On the plus side, infosec's a good bet for a long, stable career</p><p>### FOSS</p><p>-<br>#### Debian votes to let contributors code with AI</p><p>Disclosure optional, quality mandatory</p><p>-<br>#### LibreOffice 26.8 is out – local first, and with no AI</p><p>It looks a bit clunky, but it does the job – and on your own computer</p><p>-<br>#### Keepers of Noble Numbats to be offered a Resolute Racoon: Ubuntu 26.04.1 is coming</p><p>GRUB's up for furry new update</p><p>-<br>#### AROS, the FOSS recreation of AmigaOS, comes to Raspberry Pi</p><p>Plus: new official Amiga-branded hardware is coming</p><p>-<br>#### Emperor Penguin Linus Torvalds banishes a bug – with a bot</p><p>The lad himself finds and fixes a tricky one… or does he?</p><p>-<br>#### FOSS smashed one Microsoft monopoly. After 20 years of failure, it's time to smash another</p><p>Word up</p>