https://deafnews.it/it/notizie/cybersecurity/notepad-compromesso-lotus-blossom-ha-dirottato-aggiornamenti-per-mesi DeafNews it 2026-08-03T22:07:55.265565Z Notepad++ compromesso: Lotus Blossom ha dirottato aggiornamenti per mesi https://deafnews.it/en/news/cybersecurity/notepad-compromised-lotus-blossom-hijacked-updates-for-months DeafNews en 2026-08-03T22:07:55.265565Z Notepad++ Compromised: Lotus Blossom Hijacked Updates for Months https://deafnews.it/it/notizie/cybersecurity/inc-ransomware-domina-la-catena-di-zero-day-sonicwall-quando-lappliance-vpn DeafNews it 2026-08-03T21:10:16.714563Z INC Ransomware domina la catena di zero-day SonicWall: quando l'appliance VPN https://deafnews.it/en/news/cybersecurity/inc-ransomware-dominates-sonicwall-zero-day-chain-when-the-vpn-appliance-becomes-an-unmonitored-bridge DeafNews en 2026-08-03T21:10:16.714563Z INC Ransomware Dominates SonicWall Zero-Day Chain: When the VPN Appliance Becomes an Unmonitored Bridge https://deafnews.it/it/notizie/phishing/tokenlover-e-yaksalover-il-phaas-che-misura-la-persistenza-con-il-password DeafNews it 2026-08-03T20:06:58.863732Z TokenLover e YaksaLover, il PhaaS che misura la persistenza con il "password https://deafnews.it/en/news/phishing/tokenlover-and-yaksalover-the-phaas-kits-that-measure-persistence-with-a-password-change-survival-rate DeafNews en 2026-08-03T20:06:58.863732Z TokenLover and YaksaLover: The PhaaS Kits That Measure Persistence With a 'Password Change Survival Rate' https://deafnews.it/it/notizie/cybersecurity/iraniani-hanno-colpito-plcs-rockwell-oltre-30-sistemi-idrici-del-minnesota DeafNews it 2026-08-03T19:11:02.30626Z Iraniani hanno colpito PLCs Rockwell: oltre 30 sistemi idrici del Minnesota https://deafnews.it/en/news/cybersecurity/iranian-apts-hit-rockwell-plcs-over-30-minnesota-water-systems-compromised DeafNews en 2026-08-03T19:11:02.30626Z Iranian APTs Hit Rockwell PLCs: Over 30 Minnesota Water Systems Compromised https://deafnews.it/it/notizie/cybersecurity/apt28-frostarmada-il-router-soho-e-il-nuovo-perimetro-invisibile-della-minaccia DeafNews it 2026-08-03T18:06:25.930297Z APT28 FrostArmada: il router SOHO è il nuovo perimetro invisibile della minaccia https://deafnews.it/en/news/cybersecurity/apt28-frostarmada-the-soho-router-is-the-new-invisible-perimeter-of-state-sponsored-espionage DeafNews en 2026-08-03T18:06:25.930297Z APT28 FrostArmada: The SOHO Router Is the New Invisible Perimeter of State-Sponsored Espionage https://deafnews.it/it/notizie/cybersecurity/midnight-blizzard-trasforma-lhotel-wi-fi-in-trappola-per-viaggiatori-corporate DeafNews it 2026-08-03T17:07:47.955942Z Midnight Blizzard trasforma l'hotel Wi-Fi in trappola per viaggiatori corporate https://deafnews.it/en/news/cybersecurity/midnight-blizzard-turns-hotel-wi-fi-into-a-trap-for-corporate-travelers DeafNews en 2026-08-03T17:07:47.955942Z Midnight Blizzard Turns Hotel Wi-Fi Into a Trap for Corporate Travelers https://deafnews.it/it/notizie/cybersecurity/miasma-colpisce-npm-red-hat-malware-con-slsa-provenance-valida DeafNews it 2026-08-03T15:10:56.941171Z Miasma colpisce npm Red Hat: malware con SLSA provenance valida https://deafnews.it/en/news/cybersecurity/miasma-hits-red-hat-npm-malware-with-valid-slsa-provenance DeafNews en 2026-08-03T15:10:56.941171Z Miasma Hits Red Hat npm: Malware with Valid SLSA Provenance https://deafnews.it/it/notizie/cybersecurity/attacchi-dns-su-hotel-la-vpn-aziendale-non-basta-a-proteggere-microsoft-365 DeafNews it 2026-08-03T14:07:22.812771Z Attacchi DNS su hotel: la VPN aziendale non basta a proteggere Microsoft 365 https://deafnews.it/en/news/cybersecurity/hotel-dns-attacks-corporate-vpns-arent-enough-to-protect-microsoft-365 DeafNews en 2026-08-03T14:07:22.812771Z Hotel DNS Attacks: Corporate VPNs Aren't Enough to Protect Microsoft 365 https://deafnews.it/it/notizie/cybersecurity/cisco-conferma-zero-day-su-fmc-credenziali-statiche-sotto-attacco-deadline DeafNews it 2026-08-03T12:17:37.828458Z Cisco conferma zero-day su FMC: credenziali statiche sotto attacco, deadline https://deafnews.it/en/news/cybersecurity/cisco-confirms-fmc-zero-day-static-credentials-under-attack-cisa-sets-august-1-deadline DeafNews en 2026-08-03T12:17:37.828458Z Cisco Confirms FMC Zero-Day: Static Credentials Under Attack, CISA Sets August 1 Deadline https://deafnews.it/it/notizie/cybersecurity/f5-corre-contro-il-proprio-codice-rubato-45-vulnerabilita-in-un-trimestre DeafNews it 2026-08-03T10:10:14.284178Z F5 corre contro il proprio codice rubato: 45 vulnerabilità in un trimestre https://deafnews.it/en/news/cybersecurity/f5-races-against-its-own-stolen-code-45-vulnerabilities-disclosed-in-a-single-quarter DeafNews en 2026-08-03T10:10:14.284178Z F5 Races Against Its Own Stolen Code: 45 Vulnerabilities Disclosed in a Single Quarter https://deafnews.it/it/notizie/cybersec/phishing-oltre-il-50-dei-casi-ir-cisco-talos-segnala-il-crollo-del-perimetro DeafNews it 2026-08-03T09:13:36.607743Z Phishing oltre il 50% dei casi IR: Cisco Talos segnala il crollo del perimetro https://deafnews.it/en/news/cybersec/phishing-tops-50-of-ir-cases-cisco-talos-flags-perimeter-collapse DeafNews en 2026-08-03T09:13:36.607743Z Phishing Tops 50% of IR Cases: Cisco Talos Flags Perimeter Collapse https://deafnews.it/it/notizie/news/whatsapp-patcha-zero-day-zero-click-la-combinazione-con-apple-che-espone DeafNews it 2026-08-03T08:08:15.964313Z WhatsApp patcha zero-day zero-click: la combinazione con Apple che espone https://deafnews.it/en/news/news/whatsapp-patches-zero-day-zero-click-the-apple-combo-that-exposes DeafNews en 2026-08-03T08:08:15.964313Z WhatsApp Patches Zero-Day Zero-Click: The Apple Combo That Exposes https://deafnews.it/it/notizie/cybersecurity/broadcom-patcha-cinque-vulnerabilita-vmware-tre-critiche-con-cvss-fino-a-98 DeafNews it 2026-08-03T06:07:33.397343Z Broadcom patcha cinque vulnerabilità VMware: tre critiche con CVSS fino a 9.8 https://deafnews.it/en/news/cybersecurity/broadcom-patches-five-vmware-vulnerabilities-three-critical-flaws-up-to-cvss-98 DeafNews en 2026-08-03T06:07:33.397343Z Broadcom Patches Five VMware Vulnerabilities: Three Critical Flaws Up to CVSS 9.8 https://deafnews.it/it/notizie/cybersecurity/nginx-rift-e-fragnesia-due-falle-critiche-nel-cuore-dellinfrastruttura DeafNews it 2026-08-03T05:09:43.97927Z NGINX Rift e Fragnesia: due falle critiche nel cuore dell'infrastruttura https://deafnews.it/en/news/cybersecurity/nginx-rift-and-fragnesia-two-critical-flaws-at-the-heart-of-internet-infrastructure DeafNews en 2026-08-03T05:09:43.97927Z NGINX Rift and Fragnesia: Two Critical Flaws at the Heart of Internet Infrastructure https://deafnews.it/it/notizie/cybersecurity/patch-tuesday-maggio-2026-161-cve-nessuna-zero-day-ma-rischi-wormable DeafNews it 2026-08-03T04:05:37.571415Z Patch Tuesday maggio 2026: 161 CVE, nessuna zero-day ma rischi wormable https://deafnews.it/en/news/cybersecurity/may-2026-patch-tuesday-161-cves-no-zero-days-but-wormable-risks-loom DeafNews en 2026-08-03T04:05:37.571415Z May 2026 Patch Tuesday: 161 CVEs, No Zero-Days, But Wormable Risks Loom https://deafnews.it/it/notizie/vulnerabilita/gstreamer-scoperta-vulnerabilita-rce-nel-codec-rtpsbcdepay-patch-disponibile DeafNews it 2026-08-03T02:06:19.92357Z GStreamer, scoperta vulnerabilità RCE nel codec rtpsbcdepay: patch disponibile https://deafnews.it/en/news/vulnerabilities/gstreamer-rce-flaw-in-rtpsbcdepay-codec-patch-available DeafNews en 2026-08-03T02:06:19.92357Z GStreamer RCE Flaw in rtpsbcdepay Codec: Patch Available https://deafnews.it/it/notizie/vulnerabilita/ssrf-nel-broker-mqtt-di-phoenix-contact-lassalto-alle-colonnine-ev-passa-per DeafNews it 2026-08-03T01:05:45.058912Z SSRF nel broker MQTT di Phoenix Contact: l'assalto alle colonnine EV passa per https://deafnews.it/en/news/vulnerabilities/ssrf-in-phoenix-contact-mqtt-broker-the-assault-on-ev-chargers-starts-here DeafNews en 2026-08-03T01:05:45.058912Z SSRF in Phoenix Contact MQTT Broker: The Assault on EV Chargers Starts Here https://deafnews.it/it/notizie/cybersecurity/estee-lauder-10-mesi-di-breach-oracle-ebs-il-patch-gap-sospettato-di-aver DeafNews it 2026-08-02T22:07:56.315372Z Estée Lauder, 10 mesi di breach Oracle EBS: il patch gap sospettato di aver https://deafnews.it/en/news/cybersecurity/estee-lauders-10-month-oracle-ebs-breach-the-suspected-patch-gap-that-let-clop-in DeafNews en 2026-08-02T22:07:56.315372Z Estée Lauder's 10-Month Oracle EBS Breach: The Suspected Patch Gap That Let Clop In https://deafnews.it/it/notizie/python/cve-2026-6100-python-a-rischio-uaf-con-cvss-91-nei-decompressori DeafNews it 2026-08-02T21:06:25.945778Z CVE-2026-6100: Python a rischio UAF con CVSS 9.1 nei decompressori https://deafnews.it/en/news/python/cve-2026-6100-cpython-use-after-free-in-decompressors-rated-cvss-91-critical DeafNews en 2026-08-02T21:06:25.945778Z CVE-2026-6100: CPython Use-After-Free in Decompressors Rated CVSS 9.1 Critical https://deafnews.it/it/notizie/ransomware/anmed-ransomware-72-ore-criminale-contro-72-ore-normativo DeafNews it 2026-08-02T20:06:43.680565Z AnMed ransomware: 72 ore criminale contro 72 ore normativo https://deafnews.it/en/news/ransomware/anmed-ransomware-72-hour-criminal-deadline-collides-with-72-hour-circia-mandate DeafNews en 2026-08-02T20:06:43.680565Z AnMed Ransomware: 72-Hour Criminal Deadline Collides With 72-Hour CIRCIA Mandate https://deafnews.it/it/notizie/malware/sourtrade-il-browser-diventa-fabbrica-di-malware-in-memoria DeafNews it 2026-08-02T18:08:24.849969Z SourTrade: il browser diventa fabbrica di malware in memoria https://deafnews.it/en/news/malware/sourtrade-the-browser-becomes-an-in-memory-malware-factory DeafNews en 2026-08-02T18:08:24.849969Z SourTrade: The Browser Becomes an In-Memory Malware Factory https://deafnews.it/it/notizie/vulnerabilita/aeon-scoperta-vulnerabilita-rce-via-dataset-pickle-rischio-per-pipeline-ml DeafNews it 2026-08-02T17:08:06.939676Z Aeon, scoperta vulnerabilità RCE via dataset pickle: rischio per pipeline ML https://deafnews.it/en/news/vulnerabilities/aeon-rce-via-pickle-dataset-ml-pipeline-risk DeafNews en 2026-08-02T17:08:06.939676Z Aeon RCE via Pickle Dataset: ML Pipeline Risk https://deafnews.it/it/notizie/cybersecurity/trendai-vision-one-il-caso-dello-storico-cve-2025-71387-patch-a-dicembre DeafNews it 2026-08-02T16:05:58.270344Z TrendAI Vision One, il caso dello 'storico' CVE-2025-71387: patch a dicembre https://deafnews.it/en/news/cybersecurity/trendai-vision-one-and-the-historical-cve-2025-71387-patched-in-december DeafNews en 2026-08-02T16:05:58.270344Z TrendAI Vision One and the 'Historical' CVE-2025-71387: Patched in December https://deafnews.it/it/notizie/cybersecurity/heimdall-data-database-proxy-rce-come-root-via-directory-traversal-in-uploadjar DeafNews it 2026-08-02T15:05:37.402774Z Heimdall Data Database Proxy: RCE come root via directory traversal in uploadJar https://deafnews.it/en/news/cybersecurity/heimdall-data-database-proxy-root-rce-via-directory-traversal-in-uploadjar DeafNews en 2026-08-02T15:05:37.402774Z Heimdall Data Database Proxy: Root RCE via Directory Traversal in uploadJar https://deafnews.it/it/notizie/cybersecurity/kemp-loadmaster-chiave-hard-coded-in-enablexroot-espone-appliance-a-root DeafNews it 2026-08-02T14:05:48.826183Z Kemp LoadMaster: chiave hard-coded in enablexroot espone appliance a root https://deafnews.it/en/news/cybersecurity/kemp-loadmaster-hard-coded-key-in-enablexroot-exposes-appliance-to-root DeafNews en 2026-08-02T14:05:48.826183Z Kemp LoadMaster: Hard-Coded Key in enablexroot Exposes Appliance to Root https://deafnews.it/it/notizie/cybersecurity/wordpress-wp2shell-rce-in-the-wild-entro-24-ore-dalla-scoperta-ai DeafNews it 2026-08-02T13:06:00.599251Z WordPress wp2shell: RCE in-the-wild entro 24 ore dalla scoperta AI https://deafnews.it/en/news/cybersecurity/wordpress-wp2shell-in-the-wild-rce-within-24-hours-of-ai-assisted-discovery DeafNews en 2026-08-02T13:06:00.599251Z WordPress wp2shell: In-the-Wild RCE Within 24 Hours of AI-Assisted Discovery https://deafnews.it/it/notizie/cybersecurity/heap-overflow-nel-kenwood-dnr1007xr-il-vcard-da-codice-arbitrario-come-root DeafNews it 2026-08-02T11:04:57.356944Z Heap overflow nel Kenwood DNR1007XR: il vCard da codice arbitrario come root https://deafnews.it/en/news/cybersecurity/heap-overflow-in-kenwood-dnr1007xr-malicious-vcard-grants-root-code-execution DeafNews en 2026-08-02T11:04:57.356944Z Heap Overflow in Kenwood DNR1007XR: Malicious vCard Grants Root Code Execution https://deafnews.it/it/notizie/cybersecurity/voidstealer-aggira-la-cifratura-di-chrome-attaccando-la-memoria DeafNews it 2026-08-02T09:05:30.826621Z VoidStealer aggira la cifratura di Chrome attaccando la memoria https://deafnews.it/en/news/cybersecurity/voidstealer-bypasses-chrome-encryption-by-attacking-memory DeafNews en 2026-08-02T09:05:30.826621Z VoidStealer Bypasses Chrome Encryption by Attacking Memory https://deafnews.it/it/notizie/cybersecurity/il-great-patching-non-basta-piu-quando-gli-attaccanti-usano-i-tuoi-tool DeafNews it 2026-08-02T08:07:48.400405Z Il Great Patching non basta più: quando gli attaccanti usano i tuoi tool https://deafnews.it/en/news/cybersecurity/the-great-patching-isnt-enough-anymore-when-attackers-weaponize-your-own-tools DeafNews en 2026-08-02T08:07:48.400405Z The Great Patching Isn't Enough Anymore: When Attackers Weaponize Your Own Tools https://deafnews.it/it/notizie/cybersecurity/apple-corretta-imageio-un-bug-di-parsing-apre-a-rce-su-otto-sistemi-operativi DeafNews it 2026-08-02T06:05:50.387507Z Apple corretta ImageIO: un bug di parsing apre a RCE su otto sistemi operativi https://deafnews.it/en/news/cybersecurity/apple-patches-imageio-parsing-bug-opens-door-to-rce-across-eight-operating-systems DeafNews en 2026-08-02T06:05:50.387507Z Apple Patches ImageIO: Parsing Bug Opens Door to RCE Across Eight Operating Systems https://deafnews.it/it/notizie/cybersecurity/transunion-il-paradosso-della-periferia-saas-44-milioni-di-ssn-esposti-da DeafNews it 2026-08-02T04:06:40.817209Z TransUnion, il paradosso della periferia SaaS: 4,4 milioni di SSN esposti da https://deafnews.it/en/news/cybersecurity/transunion-the-saas-periphery-paradox-44-million-ssns-exposed-via-third-party-oauth-app DeafNews en 2026-08-02T04:06:40.817209Z TransUnion, the SaaS Periphery Paradox: 4.4 Million SSNs Exposed via Third-Party OAuth App