https://deafnews.it/it/notizie/cybersecurity/mlflow-ai-gateway-la-flessibilita-degli-endpoint-arbitrari-si-trasforma-in-ssrf DeafNews it 2026-10-29T21:07:53.974276Z MLflow AI Gateway, la flessibilità degli endpoint arbitrari si trasforma in SSRF https://deafnews.it/en/news/cybersecurity/mlflow-ai-gateway-arbitrary-endpoint-flexibility-turns-into-ssrf DeafNews en 2026-10-29T21:07:53.974276Z MLflow AI Gateway: Arbitrary Endpoint Flexibility Turns into SSRF https://deafnews.it/it/notizie/cybersecurity/cve-2026-98432-la-guerra-dei-cvss-sulla-vulnerabilita-tcp-del-kernel-linux DeafNews it 2026-10-29T17:15:45.348486Z CVE-2026-98432: la guerra dei CVSS sulla vulnerabilità TCP del kernel Linux https://deafnews.it/en/news/cybersecurity/cve-2026-98432-the-cvss-war-over-the-linux-kernel-tcp-vulnerability DeafNews en 2026-10-29T17:15:45.348486Z CVE-2026-98432: The CVSS War Over the Linux Kernel TCP Vulnerability https://deafnews.it/it/notizie/cybersecurity/cisco-patcha-cve-2026-76418-attacchi-dos-attivi-su-firewall-asa-e-ftd-ssl-vpn DeafNews it 2026-10-29T14:18:49.95195Z Cisco patcha CVE-2026-76418: attacchi DoS attivi su firewall ASA e FTD SSL VPN https://deafnews.it/en/news/cybersecurity/cisco-patches-cve-2026-76418-active-dos-attacks-on-asa-and-ftd-ssl-vpn-firewalls DeafNews en 2026-10-29T14:18:49.95195Z Cisco Patches CVE-2026-76418: Active DoS Attacks on ASA and FTD SSL VPN Firewalls https://deafnews.it/it/notizie/cybersecurity/zdi-26-818-0-day-in-ultralytics-path-traversal-nel-download-google-drive-permette-rce DeafNews it 2026-10-29T13:20:14.644405Z ZDI-26-818: 0-day in Ultralytics, path traversal nel download Google Drive permette RCE https://deafnews.it/en/news/cybersecurity/zdi-26-818-zero-day-in-ultralytics-google-drive-download-path-traversal-enables-rce DeafNews en 2026-10-29T13:20:14.644405Z ZDI-26-818: Zero-Day in Ultralytics — Google Drive Download Path Traversal Enables RCE https://deafnews.it/it/notizie/cybersecurity/vmware-esx-bug-cvss-27-usato-da-attori-china-nexus-per-ridurre-visibilita-audit-trail DeafNews it 2026-10-29T11:10:12.39658Z VMware ESX, bug CVSS 2.7 usato da attori China-nexus per ridurre visibilità audit trail https://deafnews.it/en/news/cybersecurity/vmware-esx-flaw-cvss-27-exploited-by-china-nexus-actors-to-blind-audit-trails DeafNews en 2026-10-29T11:10:12.39658Z VMware ESX Flaw (CVSS 2.7) Exploited by China-Nexus Actors to Blind Audit Trails https://deafnews.it/it/notizie/cybersecurity/apple-macos-font-malizioso-sfrutta-out-of-bounds-read-in-coretext-per-divulgare-memoria-di-processo DeafNews it 2026-10-29T06:13:24.321876Z Apple macOS: font malizioso sfrutta out-of-bounds read in CoreText per divulgare memoria di processo https://deafnews.it/en/news/cybersecurity/apple-macos-malicious-font-exploits-coretext-out-of-bounds-read-to-leak-process-memory DeafNews en 2026-10-29T06:13:24.321876Z Apple macOS: Malicious Font Exploits CoreText Out-of-Bounds Read to Leak Process Memory https://deafnews.it/it/notizie/vulnerabilita/alpine-ilx-f511-0-day-automotive-svelata-a-pwn2own-nessuna-patch-dopo-otto-mesi DeafNews it 2026-10-29T05:11:26.792359Z Alpine iLX-F511: 0-day automotive svelata a Pwn2Own, nessuna patch dopo otto mesi https://deafnews.it/en/news/vulnerabilities/alpine-ilx-f511-0-day-automotive-flaw-disclosed-at-pwn2own-no-patch-after-eight-months DeafNews en 2026-10-29T05:11:26.792359Z Alpine iLX-F511: 0-Day Automotive Flaw Disclosed at Pwn2Own, No Patch After Eight Months https://deafnews.it/it/notizie/cybersecurity/cisco-finesse-senza-difese-una-ssrf-grave-lascia-le-interfacce-contact-center-esposte-fino-al-2027 DeafNews it 2026-10-29T03:13:23.9731Z Cisco Finesse senza difese: una SSRF grave lascia le interfacce contact center esposte fino al 2027 https://deafnews.it/en/news/cybersecurity/cisco-finesse-left-defenseless-critical-ssrf-exposes-contact-center-interfaces-until-2027 DeafNews en 2026-10-29T03:13:23.9731Z Cisco Finesse Left Defenseless: Critical SSRF Exposes Contact Center Interfaces Until 2027 https://deafnews.it/it/notizie/cybersecurity/avg-privilege-escalation-nel-data-shredder-con-cvss-73 DeafNews it 2026-10-29T00:08:08.521311Z AVG: privilege escalation nel Data Shredder con CVSS 7.3 https://deafnews.it/en/news/cybersecurity/avg-data-shredder-privilege-escalation-flaw-rated-cvss-73 DeafNews en 2026-10-29T00:08:08.521311Z AVG Data Shredder Privilege Escalation Flaw Rated CVSS 7.3 https://deafnews.it/it/notizie/cybersecurity/volt-typhoon-rivelato-il-framework-silent-train-per-attacchi-zero-day DeafNews it 2026-10-28T21:15:49.39051Z Volt Typhoon: rivelato il framework Silent Train per attacchi zero-day https://deafnews.it/en/news/cybersecurity/volt-typhoon-silent-train-framework-exposed-for-zero-day-attacks DeafNews en 2026-10-28T21:15:49.39051Z Volt Typhoon: Silent Train Framework Exposed for Zero-Day Attacks https://deafnews.it/it/notizie/cybersecurity/un-errore-su-github-ha-reso-pubblica-la-patch-di-una-falla-uefi-da-95-su-10 DeafNews it 2026-10-28T20:15:16.298201Z Un errore su GitHub ha reso pubblica la patch di una falla UEFI da 9.5 su 10 https://deafnews.it/en/news/cybersecurity/github-mistake-publishes-patch-for-9510-uefi-flaw-early DeafNews en 2026-10-28T20:15:16.298201Z GitHub Mistake Publishes Patch for 9.5/10 UEFI Flaw Early https://deafnews.it/it/notizie/cybersecurity/oracle-ebs-probing-per-cve-2026-101767-rilevato-sette-giorni-dopo-patch-ottobre DeafNews it 2026-10-28T15:15:44.072962Z Oracle EBS: probing per CVE-2026-101767 rilevato sette giorni dopo patch ottobre https://deafnews.it/en/news/cybersecurity/oracle-ebs-probing-for-cve-2026-101767-detected-seven-days-after-october-patch DeafNews en 2026-10-28T15:15:44.072962Z Oracle EBS: Probing for CVE-2026-101767 Detected Seven Days After October Patch https://deafnews.it/it/notizie/cybersecurity/apple-corregge-286-falle-complessive-e-porta-la-patch-per-cve-2026-86950-su-dispositivi-obsoleti DeafNews it 2026-10-28T07:11:09.841083Z Apple corregge 286 falle complessive e porta la patch per CVE-2026-86950 su dispositivi obsoleti https://deafnews.it/en/news/cybersecurity/apple-patches-286-total-flaws-backports-cve-2026-86950-fix-to-obsolete-devices DeafNews en 2026-10-28T07:11:09.841083Z Apple Patches 286 Total Flaws, Backports CVE-2026-86950 Fix to Obsolete Devices https://deafnews.it/it/notizie/vulnerabilita/mailenable-scoperta-vulnerabilita-xxe-autenticato-ma-pericoloso DeafNews it 2026-10-28T05:05:41.04999Z MailEnable, scoperta vulnerabilità XXE: autenticato ma pericoloso https://deafnews.it/en/news/vulnerabilities/mailenable-xxe-vulnerability-authenticated-but-dangerous DeafNews en 2026-10-28T05:05:41.04999Z MailEnable XXE Vulnerability: Authenticated but Dangerous