https://deafnews.it/it/notizie/cybersecurity/florida-breach-sul-sito-degli-aiuti-studenteschi-49-milioni-di-ssn-potenzialmente-a-rischio DeafNews it 2026-10-30T18:08:47.658295Z Florida, breach sul sito degli aiuti studenteschi: 4,9 milioni di SSN potenzialmente a rischio https://deafnews.it/en/news/cybersecurity/florida-student-aid-site-breach-puts-49-million-ssns-at-risk DeafNews en 2026-10-30T18:08:47.658295Z Florida Student Aid Site Breach Puts 4.9 Million SSNs at Risk https://deafnews.it/it/notizie/cybersecurity/netamloader-colpisce-windows-10-governativo-asiatico-il-paradosso-della-sovranita-tecnologica DeafNews it 2026-10-30T17:05:19.143308Z NetamLoader colpisce Windows 10 governativo asiatico: il paradosso della sovranità tecnologica https://deafnews.it/en/news/cybersecurity/netamloader-hits-asian-government-windows-10-the-paradox-of-technological-sovereignty DeafNews en 2026-10-30T17:05:19.143308Z NetamLoader Hits Asian Government Windows 10: The Paradox of Technological Sovereignty https://deafnews.it/it/notizie/vulnerabilita/vulnerabilita-cve-2026-118539-nel-modulo-drupal-commerce-core-patch-e-audit-storico-necessari DeafNews it 2026-10-30T16:05:45.435177Z Vulnerabilità CVE-2026-118539 nel modulo Drupal Commerce Core: patch e audit storico necessari https://deafnews.it/en/news/vulnerabilities/cve-2026-118539-in-drupal-commerce-core-patch-and-historical-audit-required DeafNews en 2026-10-30T16:05:45.435177Z CVE-2026-118539 in Drupal Commerce Core: Patch and Historical Audit Required https://deafnews.it/it/notizie/cybersecurity/php2shell-exploit-custom-per-pan-os-25-server-rooted-in-15-minuti DeafNews it 2026-10-30T14:08:04.198547Z PHP2Shell: exploit custom per PAN-OS, 25 server rooted in 15 minuti https://deafnews.it/en/news/cybersecurity/php2shell-custom-pan-os-exploit-roots-25-servers-in-under-15-minutes DeafNews en 2026-10-30T14:08:04.198547Z PHP2Shell: Custom PAN-OS Exploit Roots 25 Servers in Under 15 Minutes https://deafnews.it/it/notizie/cybersecurity/teamviewer-cve-2026-111585-lhost-attacca-il-tecnico-con-un-integer-overflow DeafNews it 2026-10-30T10:06:09.131814Z TeamViewer CVE-2026-111585: l'host attacca il tecnico con un integer overflow https://deafnews.it/en/news/cybersecurity/teamviewer-cve-2026-111585-malicious-host-attacks-technician-via-integer-overflow DeafNews en 2026-10-30T10:06:09.131814Z TeamViewer CVE-2026-111585: Malicious Host Attacks Technician via Integer Overflow https://deafnews.it/it/notizie/cybersecurity/fragnesia-nel-kev-cisa-il-reboot-per-la-patch-cancella-le-evidenze-dellattacco DeafNews it 2026-10-30T05:07:25.377343Z Fragnesia nel KEV CISA: il reboot per la patch cancella le evidenze dell'attacco https://deafnews.it/en/news/cybersecurity/fragnesia-added-to-cisa-kev-reboot-for-patch-erases-attack-evidence DeafNews en 2026-10-30T05:07:25.377343Z Fragnesia Added to CISA KEV: Reboot for Patch Erases Attack Evidence https://deafnews.it/it/notizie/cybersecurity/campagna-cryptomining-su-hugging-face-supera-32000-download-con-19-nuovi-repository-dopo-takedown DeafNews it 2026-10-29T23:09:35.247895Z Campagna cryptomining su Hugging Face supera 32.000 download con 19 nuovi repository dopo takedown https://deafnews.it/en/news/cybersecurity/hugging-face-cryptomining-campaign-surpasses-32000-downloads-with-19-new-repositories-after-takedown DeafNews en 2026-10-29T23:09:35.247895Z Hugging Face Cryptomining Campaign Surpasses 32,000 Downloads With 19 New Repositories After Takedown https://deafnews.it/it/notizie/cybersecurity/mlflow-ai-gateway-la-flessibilita-degli-endpoint-arbitrari-si-trasforma-in-ssrf DeafNews it 2026-10-29T21:07:53.974276Z MLflow AI Gateway, la flessibilità degli endpoint arbitrari si trasforma in SSRF https://deafnews.it/en/news/cybersecurity/mlflow-ai-gateway-arbitrary-endpoint-flexibility-turns-into-ssrf DeafNews en 2026-10-29T21:07:53.974276Z MLflow AI Gateway: Arbitrary Endpoint Flexibility Turns into SSRF https://deafnews.it/it/notizie/cybersecurity/cve-2026-98432-la-guerra-dei-cvss-sulla-vulnerabilita-tcp-del-kernel-linux DeafNews it 2026-10-29T17:15:45.348486Z CVE-2026-98432: la guerra dei CVSS sulla vulnerabilità TCP del kernel Linux https://deafnews.it/en/news/cybersecurity/cve-2026-98432-the-cvss-war-over-the-linux-kernel-tcp-vulnerability DeafNews en 2026-10-29T17:15:45.348486Z CVE-2026-98432: The CVSS War Over the Linux Kernel TCP Vulnerability https://deafnews.it/it/notizie/cybersecurity/cisco-patcha-cve-2026-76418-attacchi-dos-attivi-su-firewall-asa-e-ftd-ssl-vpn DeafNews it 2026-10-29T14:18:49.95195Z Cisco patcha CVE-2026-76418: attacchi DoS attivi su firewall ASA e FTD SSL VPN https://deafnews.it/en/news/cybersecurity/cisco-patches-cve-2026-76418-active-dos-attacks-on-asa-and-ftd-ssl-vpn-firewalls DeafNews en 2026-10-29T14:18:49.95195Z Cisco Patches CVE-2026-76418: Active DoS Attacks on ASA and FTD SSL VPN Firewalls https://deafnews.it/it/notizie/cybersecurity/zdi-26-818-0-day-in-ultralytics-path-traversal-nel-download-google-drive-permette-rce DeafNews it 2026-10-29T13:20:14.644405Z ZDI-26-818: 0-day in Ultralytics, path traversal nel download Google Drive permette RCE https://deafnews.it/en/news/cybersecurity/zdi-26-818-zero-day-in-ultralytics-google-drive-download-path-traversal-enables-rce DeafNews en 2026-10-29T13:20:14.644405Z ZDI-26-818: Zero-Day in Ultralytics — Google Drive Download Path Traversal Enables RCE https://deafnews.it/it/notizie/cybersecurity/vmware-esx-bug-cvss-27-usato-da-attori-china-nexus-per-ridurre-visibilita-audit-trail DeafNews it 2026-10-29T11:10:12.39658Z VMware ESX, bug CVSS 2.7 usato da attori China-nexus per ridurre visibilità audit trail https://deafnews.it/en/news/cybersecurity/vmware-esx-flaw-cvss-27-exploited-by-china-nexus-actors-to-blind-audit-trails DeafNews en 2026-10-29T11:10:12.39658Z VMware ESX Flaw (CVSS 2.7) Exploited by China-Nexus Actors to Blind Audit Trails https://deafnews.it/it/notizie/cybersecurity/apple-macos-font-malizioso-sfrutta-out-of-bounds-read-in-coretext-per-divulgare-memoria-di-processo DeafNews it 2026-10-29T06:13:24.321876Z Apple macOS: font malizioso sfrutta out-of-bounds read in CoreText per divulgare memoria di processo https://deafnews.it/en/news/cybersecurity/apple-macos-malicious-font-exploits-coretext-out-of-bounds-read-to-leak-process-memory DeafNews en 2026-10-29T06:13:24.321876Z Apple macOS: Malicious Font Exploits CoreText Out-of-Bounds Read to Leak Process Memory https://deafnews.it/it/notizie/vulnerabilita/alpine-ilx-f511-0-day-automotive-svelata-a-pwn2own-nessuna-patch-dopo-otto-mesi DeafNews it 2026-10-29T05:11:26.792359Z Alpine iLX-F511: 0-day automotive svelata a Pwn2Own, nessuna patch dopo otto mesi https://deafnews.it/en/news/vulnerabilities/alpine-ilx-f511-0-day-automotive-flaw-disclosed-at-pwn2own-no-patch-after-eight-months DeafNews en 2026-10-29T05:11:26.792359Z Alpine iLX-F511: 0-Day Automotive Flaw Disclosed at Pwn2Own, No Patch After Eight Months https://deafnews.it/it/notizie/cybersecurity/cisco-finesse-senza-difese-una-ssrf-grave-lascia-le-interfacce-contact-center-esposte-fino-al-2027 DeafNews it 2026-10-29T03:13:23.9731Z Cisco Finesse senza difese: una SSRF grave lascia le interfacce contact center esposte fino al 2027 https://deafnews.it/en/news/cybersecurity/cisco-finesse-left-defenseless-critical-ssrf-exposes-contact-center-interfaces-until-2027 DeafNews en 2026-10-29T03:13:23.9731Z Cisco Finesse Left Defenseless: Critical SSRF Exposes Contact Center Interfaces Until 2027 https://deafnews.it/it/notizie/cybersecurity/avg-privilege-escalation-nel-data-shredder-con-cvss-73 DeafNews it 2026-10-29T00:08:08.521311Z AVG: privilege escalation nel Data Shredder con CVSS 7.3 https://deafnews.it/en/news/cybersecurity/avg-data-shredder-privilege-escalation-flaw-rated-cvss-73 DeafNews en 2026-10-29T00:08:08.521311Z AVG Data Shredder Privilege Escalation Flaw Rated CVSS 7.3 https://deafnews.it/it/notizie/cybersecurity/volt-typhoon-rivelato-il-framework-silent-train-per-attacchi-zero-day DeafNews it 2026-10-28T21:15:49.39051Z Volt Typhoon: rivelato il framework Silent Train per attacchi zero-day https://deafnews.it/en/news/cybersecurity/volt-typhoon-silent-train-framework-exposed-for-zero-day-attacks DeafNews en 2026-10-28T21:15:49.39051Z Volt Typhoon: Silent Train Framework Exposed for Zero-Day Attacks https://deafnews.it/it/notizie/cybersecurity/un-errore-su-github-ha-reso-pubblica-la-patch-di-una-falla-uefi-da-95-su-10 DeafNews it 2026-10-28T20:15:16.298201Z Un errore su GitHub ha reso pubblica la patch di una falla UEFI da 9.5 su 10 https://deafnews.it/en/news/cybersecurity/github-mistake-publishes-patch-for-9510-uefi-flaw-early DeafNews en 2026-10-28T20:15:16.298201Z GitHub Mistake Publishes Patch for 9.5/10 UEFI Flaw Early