https://deafnews.it/it/notizie/cybersecurity/xorg-server-bug-critico-in-glamor-font-consente-escalation-a-root DeafNews it 2026-07-26T23:06:18.817704Z X.Org Server: bug critico in Glamor Font consente escalation a root https://deafnews.it/en/news/cybersecurity/xorg-server-critical-glamor-font-bug-allows-root-privilege-escalation DeafNews en 2026-07-26T23:06:18.817704Z X.Org Server: Critical Glamor Font Bug Allows Root Privilege Escalation https://deafnews.it/it/notizie/supply/litellm-il-gateway-llm-open-source-ha-distribuito-malware-ruba-credenziali DeafNews it 2026-07-26T20:04:35.850446Z LiteLLM, il gateway LLM open source, ha distribuito malware ruba-credenziali https://deafnews.it/en/news/supply/litellm-open-source-llm-gateway-distributes-credential-stealing-malware DeafNews en 2026-07-26T20:04:35.850446Z LiteLLM Open-Source LLM Gateway Distributes Credential-Stealing Malware https://deafnews.it/it/notizie/cybersecurity/github-actions-e-diventata-involontariamente-unisp-per-criminali DeafNews it 2026-07-26T19:05:17.280262Z GitHub Actions è diventata involontariamente un'ISP per criminali https://deafnews.it/en/news/cybersecurity/github-actions-unwittingly-became-an-isp-for-criminals DeafNews en 2026-07-26T19:05:17.280262Z GitHub Actions Unwittingly Became an ISP for Criminals https://deafnews.it/it/notizie/ransomware/stadler-rifiuta-riscatto-da-123-milioni-everest-non-ha-leakato-i-dati DeafNews it 2026-07-26T18:07:14.236385Z Stadler rifiuta riscatto da 12,3 milioni: Everest non ha leakato i dati https://deafnews.it/en/news/ransomware/stadler-rejects-123m-ransom-everest-fails-to-leak-data DeafNews en 2026-07-26T18:07:14.236385Z Stadler Rejects $12.3M Ransom: Everest Fails to Leak Data https://deafnews.it/it/notizie/cybersec/legacyhive-zero-day-windows-patchata-da-0patch-prima-di-microsoft DeafNews it 2026-07-26T17:05:41.450792Z LegacyHive: zero-day Windows patchata da 0Patch prima di Microsoft https://deafnews.it/en/news/cybersec/legacyhive-zero-day-windows-flaw-patched-by-0patch-before-microsoft DeafNews en 2026-07-26T17:05:41.450792Z LegacyHive: Zero-Day Windows Flaw Patched by 0Patch Before Microsoft https://deafnews.it/it/notizie/ai/ai-autonoma-contro-una-rete-idrica-claude-ha-mappato-lambiente-ot-senza DeafNews it 2026-07-26T15:10:35.071994Z AI autonoma contro una rete idrica: Claude ha mappato l'ambiente OT senza https://deafnews.it/en/news/ai/autonomous-ai-vs-a-water-network-how-claude-mapped-an-ot-environment-without-a-manual DeafNews en 2026-07-26T15:10:35.071994Z Autonomous AI vs. a Water Network: How Claude Mapped an OT Environment Without a Manual https://deafnews.it/it/notizie/cybersecurity/sleepergem-il-giorno-in-cui-rubygems-e-diventato-un-bersaglio-npm-style DeafNews it 2026-07-26T14:05:39.132095Z SleeperGem: il giorno in cui RubyGems è diventato un bersaglio npm-style https://deafnews.it/en/news/cybersecurity/sleepergem-the-day-rubygems-became-an-npm-style-target DeafNews en 2026-07-26T14:05:39.132095Z SleeperGem: The Day RubyGems Became an npm-Style Target https://deafnews.it/it/notizie/cybersecurity/dydx-terzo-attacco-supply-chain-pacchetti-npm-e-pypi-compromessi DeafNews it 2026-07-26T13:04:50.344904Z dYdX: terzo attacco supply chain, pacchetti npm e PyPI compromessi https://deafnews.it/en/news/cybersecurity/dydx-hit-by-third-supply-chain-attack-compromised-npm-and-pypi-packages-deliver-wallet-stealer-and-rat DeafNews en 2026-07-26T13:04:50.344904Z dYdX Hit by Third Supply-Chain Attack: Compromised npm and PyPI Packages Deliver Wallet Stealer and RAT https://deafnews.it/it/notizie/cybersecurity/cve-2026-3888-lpe-to-root-in-snapd-colpisce-ubuntu-lts-dal-2016 DeafNews it 2026-07-26T12:05:59.947067Z CVE-2026-3888: LPE to root in snapd colpisce Ubuntu LTS dal 2016 https://deafnews.it/en/news/cybersecurity/cve-2026-3888-lpe-to-root-in-snapd-hits-ubuntu-lts-since-2016 DeafNews en 2026-07-26T12:05:59.947067Z CVE-2026-3888: LPE to Root in snapd Hits Ubuntu LTS Since 2016 https://deafnews.it/it/notizie/nvidia/nvidia-nvtabular-rce-via-pickle-cve-2026-24237-con-cvss-78 DeafNews it 2026-07-26T10:06:44.289307Z NVIDIA NVTabular: RCE via pickle, CVE-2026-24237 con CVSS 7.8 https://deafnews.it/en/news/nvidia/nvidia-nvtabular-rce-via-pickle-cve-2026-24237-rated-cvss-78 DeafNews en 2026-07-26T10:06:44.289307Z NVIDIA NVTabular: RCE via Pickle, CVE-2026-24237 Rated CVSS 7.8 https://deafnews.it/it/notizie/vulnerabilita/zdi-26-419-bug-in-adobeupdateservice-permette-escalation-a-privilegi-system DeafNews it 2026-07-26T09:06:10.675162Z ZDI-26-419: bug in AdobeUpdateService permette escalation a privilegi SYSTEM https://deafnews.it/en/news/vulnerabilities/zdi-26-419-adobeupdateservice-bug-allows-local-privilege-escalation-to-system DeafNews en 2026-07-26T09:06:10.675162Z ZDI-26-419: AdobeUpdateService Bug Allows Local Privilege Escalation to SYSTEM https://deafnews.it/it/notizie/vulnerabilita/il-driver-fantasma-di-msi-center-escalation-locale-a-system-con-un-comando DeafNews it 2026-07-26T08:05:38.003038Z Il driver fantasma di MSI Center: escalation locale a SYSTEM con un comando https://deafnews.it/en/news/vulnerabilities/msi-centers-ghost-driver-local-escalation-to-system-in-one-command DeafNews en 2026-07-26T08:05:38.003038Z MSI Center's Ghost Driver: Local Escalation to SYSTEM in One Command https://deafnews.it/it/notizie/vulnerabilita/zdi-26-443-bug-vmwgfx-nel-kernel-linux-permette-escalation-privilegi-a-cvss-88 DeafNews it 2026-07-26T07:10:41.66885Z ZDI-26-443: bug vmwgfx nel kernel Linux permette escalation privilegi a CVSS 8.8 https://deafnews.it/en/news/vulnerabilities/zdi-26-443-linux-kernel-vmwgfx-integer-overflow-enables-local-privilege-escalation-at-cvss-88 DeafNews en 2026-07-26T07:10:41.66885Z ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Enables Local Privilege Escalation at CVSS 8.8 https://deafnews.it/it/notizie/cybersecurity/scanner-pubblico-per-la-vulnerabilita-nginx-map-regex-lexploit-rce-e-atteso DeafNews it 2026-07-26T05:06:26.420849Z Scanner pubblico per la vulnerabilità NGINX map regex: l'exploit RCE è atteso https://deafnews.it/en/news/cybersecurity/public-scanner-released-for-nginx-map-regex-flaw-full-rce-exploit-expected-around-august-5 DeafNews en 2026-07-26T05:06:26.420849Z Public Scanner Released for NGINX Map Regex Flaw; Full RCE Exploit Expected Around August 5 https://deafnews.it/it/notizie/cybersecurity/russia-sfrutta-zero-day-zimbra-laggiornamento-non-basta-a-scacciare-gli-spie DeafNews it 2026-07-26T04:06:00.34386Z Russia sfrutta zero-day Zimbra: l'aggiornamento non basta a scacciare gli spie https://deafnews.it/en/news/cybersecurity/russia-exploits-zimbra-zero-day-patching-alone-wont-evict-the-spies DeafNews en 2026-07-26T04:06:00.34386Z Russia Exploits Zimbra Zero-Day: Patching Alone Won't Evict the Spies https://deafnews.it/it/notizie/vulnerabilita/fastjson-1x-senza-via-duscita-quando-le-mitigazioni-standard-non-bastano DeafNews it 2026-07-26T03:06:36.988265Z Fastjson 1.x senza via d'uscita: quando le mitigazioni standard non bastano https://deafnews.it/en/news/vulnerabilities/fastjson-1x-has-no-exit-when-standard-mitigations-arent-enough DeafNews en 2026-07-26T03:06:36.988265Z Fastjson 1.x Has No Exit: When Standard Mitigations Aren't Enough https://deafnews.it/it/notizie/cybersecurity/wallbox-autel-esposto-a-rce-pre-autenticazione-il-bug-pwn2own-che-colpisce-la DeafNews it 2026-07-26T00:05:10.298302Z Wallbox Autel esposto a RCE pre-autenticazione: il bug Pwn2Own che colpisce la https://deafnews.it/en/news/cybersecurity/autel-wallbox-exposed-to-pre-auth-rce-the-pwn2own-bug-hitting-home-ev-chargers DeafNews en 2026-07-26T00:05:10.298302Z Autel Wallbox Exposed to Pre-Auth RCE: The Pwn2Own Bug Hitting Home EV Chargers https://deafnews.it/it/notizie/phishing/server-mal-configurato-espone-tre-operazioni-evilginx-contro-microsoft-365 DeafNews it 2026-07-25T21:06:23.27116Z Server mal configurato espone tre operazioni Evilginx contro Microsoft 365 https://deafnews.it/en/news/phishing/misconfigured-server-exposes-three-evilginx-operations-targeting-microsoft-365 DeafNews en 2026-07-25T21:06:23.27116Z Misconfigured Server Exposes Three Evilginx Operations Targeting Microsoft 365 https://deafnews.it/it/notizie/vulnerabilita/oracle-simphony-quattro-cve-critiche-espongono-i-pos-dellospitalita-a-rce DeafNews it 2026-07-25T20:04:58.931112Z Oracle Simphony: quattro CVE critiche espongono i POS dell'ospitalità a RCE https://deafnews.it/en/news/vulnerabilities/oracle-simphony-four-critical-cves-expose-hospitality-pos-to-rce DeafNews en 2026-07-25T20:04:58.931112Z Oracle Simphony: Four Critical CVEs Expose Hospitality POS to RCE https://deafnews.it/it/notizie/phishing/operazione-congiunta-smantella-kratos-il-kit-aitm-che-bypassa-mfa DeafNews it 2026-07-25T18:04:51.964212Z Operazione congiunta smantella Kratos: il kit AiTM che bypassa MFA https://deafnews.it/en/news/phishing/joint-operation-dismantles-kratos-the-aitm-phishing-kit-that-bypasses-mfa DeafNews en 2026-07-25T18:04:51.964212Z Joint Operation Dismantles Kratos: The AiTM Phishing Kit That Bypasses MFA https://deafnews.it/it/notizie/ai/liran-ha-armato-il-suo-playbook-asimmetrico-con-lai-commerciale DeafNews it 2026-07-25T17:05:50.505841Z L'Iran ha armato il suo playbook asimmetrico con l'AI commerciale https://deafnews.it/en/news/ai/iran-weaponizes-its-asymmetric-playbook-with-commercial-ai DeafNews en 2026-07-25T17:05:50.505841Z Iran Weaponizes Its Asymmetric Playbook With Commercial AI https://deafnews.it/it/notizie/cybersecurity/cl0p-colpisce-ptc-windchill-rce-zero-day-sfruttato-per-furto-di-ip-industriale DeafNews it 2026-07-25T14:06:19.580745Z Cl0p colpisce PTC Windchill: RCE zero-day sfruttato per furto di IP industriale https://deafnews.it/en/news/cybersecurity/cl0p-hits-ptc-windchill-zero-day-rce-exploited-for-industrial-ip-theft DeafNews en 2026-07-25T14:06:19.580745Z Cl0p Hits PTC Windchill: Zero-Day RCE Exploited for Industrial IP Theft https://deafnews.it/it/notizie/vulnerabilita/venti-giorni-di-gap-la-patch-7-zip-per-cve-2026-14266-esiste-ma-lassenza-di DeafNews it 2026-07-25T12:07:06.818712Z Venti giorni di gap: la patch 7-Zip per CVE-2026-14266 esiste, ma l'assenza di https://deafnews.it/en/news/vulnerabilities/twenty-day-gap-7-zip-patch-for-cve-2026-14266-exists-but-no-auto-update-means-it-stays-unapplied DeafNews en 2026-07-25T12:07:06.818712Z Twenty-Day Gap: 7-Zip Patch for CVE-2026-14266 Exists, But No Auto-Update Means It Stays Unapplied https://deafnews.it/it/notizie/cybersecurity/darksword-il-kit-ios-che-ha-armato-tre-gruppi-di-spionaggio-con-6-flaw DeafNews it 2026-07-25T11:06:59.212485Z DarkSword: il kit iOS che ha armato tre gruppi di spionaggio con 6 flaw https://deafnews.it/en/news/cybersecurity/darksword-the-ios-kit-that-armed-three-spy-groups-with-six-flaws DeafNews en 2026-07-25T11:06:59.212485Z DarkSword: The iOS Kit That Armed Three Spy Groups With Six Flaws https://deafnews.it/it/notizie/infostealer/microsoft-smantella-la-rete-c2-di-stealc-ma-i-log-rubati-continuano-a-colpire DeafNews it 2026-07-25T10:09:36.816295Z Microsoft smantella la rete C2 di StealC, ma i log rubati continuano a colpire https://deafnews.it/en/news/infostealer/microsoft-dismantles-stealc-c2-network-but-stolen-logs-keep-fueling-breaches DeafNews en 2026-07-25T10:09:36.816295Z Microsoft Dismantles StealC C2 Network, But Stolen Logs Keep Fueling Breaches https://deafnews.it/it/notizie/cybersecurity/wind-tre-sanzionata-per-17-milioni-il-social-engineering-batte-i-firewall DeafNews it 2026-07-25T06:06:08.797991Z Wind Tre sanzionata per 1,7 milioni: il social engineering batte i firewall https://deafnews.it/en/news/cybersecurity/wind-tre-fined-17m-social-engineering-beats-firewalls DeafNews en 2026-07-25T06:06:08.797991Z Wind Tre Fined €1.7M: Social Engineering Beats Firewalls https://deafnews.it/it/notizie/cybersecurity/worm-miasma-73-repo-microsoft-su-github-infettati-tramite-agenti-ai-coding DeafNews it 2026-07-25T04:05:30.855275Z Worm Miasma: 73 repo Microsoft su GitHub infettati tramite agenti AI coding https://deafnews.it/en/news/cybersecurity/miasma-worm-infects-73-microsoft-github-repos-via-ai-coding-agents DeafNews en 2026-07-25T04:05:30.855275Z Miasma Worm Infects 73 Microsoft GitHub Repos via AI Coding Agents https://deafnews.it/it/notizie/news/telepuz-un-malware-maas-modulare-diffuso-via-clickfix-dal-16-luglio-2026 DeafNews it 2026-07-25T01:05:16.827585Z TELEPUZ: un malware MaaS modulare diffuso via ClickFix dal 16 luglio 2026 https://deafnews.it/en/news/news/telepuz-modular-maas-malware-spread-via-clickfix-since-july-16-2026 DeafNews en 2026-07-25T01:05:16.827585Z TELEPUZ: Modular MaaS Malware Spread via ClickFix Since July 16, 2026 https://deafnews.it/it/notizie/ai/google-denuncia-outsider-enterprise-gemini-trasformato-in-motore-phaas DeafNews it 2026-07-25T00:04:19.830505Z Google denuncia 'Outsider Enterprise': Gemini trasformato in motore PhaaS https://deafnews.it/en/news/ai/google-sues-outsider-enterprise-gemini-weaponized-as-phaas-engine DeafNews en 2026-07-25T00:04:19.830505Z Google Sues 'Outsider Enterprise': Gemini Weaponized as PhaaS Engine