https://deafnews.it/it/notizie/cybersecurity/cve-2026-3854-rce-in-github-con-un-solo-git-push-88-istanze-ghes-esposte DeafNews it 2026-08-15T23:05:46.6618Z CVE-2026-3854: RCE in GitHub con un solo git push, 88% istanze GHES esposte https://deafnews.it/en/news/cybersecurity/cve-2026-3854-one-git-push-rce-in-github-88-of-ghes-instances-exposed DeafNews en 2026-08-15T23:05:46.6618Z CVE-2026-3854: One git push RCE in GitHub, 88% of GHES instances exposed https://deafnews.it/it/notizie/news/sharepoint-authentication-bypass-exploitation DeafNews it 2026-08-15T22:08:49.980411Z SharePoint authentication bypass exploitation https://deafnews.it/en/news/news/sharepoint-authentication-bypass-under-active-exploitation-days-after-poc-release DeafNews en 2026-08-15T22:08:49.980411Z SharePoint Authentication Bypass Under Active Exploitation Days After PoC Release https://deafnews.it/it/notizie/cybersecurity/cve-2026-17583-tre-decadi-di-prove-dna-a-rischio-manomissione-digitale DeafNews it 2026-08-15T21:06:33.595233Z CVE-2026-17583: tre decadi di prove DNA a rischio manomissione digitale https://deafnews.it/en/news/cybersecurity/cve-2026-17583-three-decades-of-dna-evidence-at-risk-of-digital-tampering DeafNews en 2026-08-15T21:06:33.595233Z CVE-2026-17583: Three Decades of DNA Evidence at Risk of Digital Tampering https://deafnews.it/it/notizie/cybersecurity/lazarus-sfrutta-zero-day-microsoft-offerte-lavoro-diventano-spyware-kernel DeafNews it 2026-08-15T20:05:48.264701Z Lazarus sfrutta zero-day Microsoft: offerte lavoro diventano spyware kernel https://deafnews.it/en/news/cybersecurity/lazarus-exploits-microsoft-zero-day-job-offers-turn-into-kernel-spyware DeafNews en 2026-08-15T20:05:48.264701Z Lazarus Exploits Microsoft Zero-Day: Job Offers Turn Into Kernel Spyware https://deafnews.it/it/notizie/news/lazarus-arma-un-zero-day-windows-con-crittografia-post-quantum-il-traffico-c2 DeafNews it 2026-08-15T19:08:00.175463Z Lazarus arma un zero-day Windows con crittografia post-quantum: il traffico C2 https://deafnews.it/en/news/news/lazarus-weaponizes-windows-zero-day-with-post-quantum-encryption-inside-the-c2-traffic DeafNews en 2026-08-15T19:08:00.175463Z Lazarus Weaponizes Windows Zero-Day with Post-Quantum Encryption: Inside the C2 Traffic https://deafnews.it/it/notizie/cybersecurity/metabase-zero-day-cve-2026-72898-attacco-attivo-con-cvss-10-blast-radius DeafNews it 2026-08-15T18:07:02.476932Z Metabase zero-day CVE-2026-72898: attacco attivo con CVSS 10, blast radius https://deafnews.it/en/news/cybersecurity/metabase-zero-day-cve-2026-72898-active-exploitation-cvss-100-wide-blast-radius DeafNews en 2026-08-15T18:07:02.476932Z Metabase Zero-Day CVE-2026-72898: Active Exploitation, CVSS 10.0, Wide Blast Radius https://deafnews.it/it/notizie/zero/geoserver-zero-day-sotto-attacco-la-regression-che-rivela-crepe-nel-ciclo-di DeafNews it 2026-08-15T14:04:58.11959Z GeoServer zero-day sotto attacco: la regression che rivela crepe nel ciclo di https://deafnews.it/en/news/zero/geoserver-zero-day-under-attack-the-regression-exposing-cracks-in-the-secure-development-lifecycle DeafNews en 2026-08-15T14:04:58.11959Z GeoServer Zero-Day Under Attack: The Regression Exposing Cracks in the Secure Development Lifecycle https://deafnews.it/it/notizie/cybersecurity/sonicwall-email-security-lpe-da-cli-a-root-via-command-injection DeafNews it 2026-08-15T13:09:40.166639Z SonicWall Email Security: LPE da CLI a root via command injection https://deafnews.it/en/news/cybersecurity/sonicwall-email-security-local-privilege-escalation-from-cli-to-root-via-command-injection DeafNews en 2026-08-15T13:09:40.166639Z SonicWall Email Security: Local Privilege Escalation from CLI to Root via Command Injection https://deafnews.it/it/notizie/cybersecurity/shinyhunters-ha-sfruttato-una-zero-day-oracle-peoplesoft-per-due-settimane DeafNews it 2026-08-15T08:08:26.061485Z ShinyHunters ha sfruttato una zero-day Oracle PeopleSoft per due settimane https://deafnews.it/en/news/cybersecurity/shinyhunters-exploited-oracle-peoplesoft-zero-day-for-two-weeks DeafNews en 2026-08-15T08:08:26.061485Z ShinyHunters Exploited Oracle PeopleSoft Zero-Day for Two Weeks https://deafnews.it/it/notizie/cybersecurity/galaxy-s25-un-file-tiff-puo-eseguire-codice-malevolo-da-remoto DeafNews it 2026-08-15T07:06:49.888635Z Galaxy S25: un file TIFF può eseguire codice malevolo da remoto https://deafnews.it/en/news/cybersecurity/galaxy-s25-a-tiff-file-can-trigger-remote-code-execution DeafNews en 2026-08-15T07:06:49.888635Z Galaxy S25: A TIFF File Can Trigger Remote Code Execution https://deafnews.it/it/notizie/vulnerabilita/flowise-rce-cvss-94-nel-componente-airtableagent-rimosso-in-versione-313 DeafNews it 2026-08-15T06:05:34.206431Z Flowise: RCE CVSS 9.4 nel componente Airtable_Agent, rimosso in versione 3.1.3 https://deafnews.it/en/news/vulnerabilities/flowise-removes-airtable-and-csv-agents-after-critical-rce-cvss-94 DeafNews en 2026-08-15T06:05:34.206431Z Flowise Removes Airtable and CSV Agents After Critical RCE (CVSS 9.4) https://deafnews.it/it/notizie/cybersecurity/passkey-bypass-tre-ricerche-smontano-la-promessa-anti-phishing-di-fido2 DeafNews it 2026-08-15T05:06:20.123331Z Passkey bypass: tre ricerche smontano la promessa "anti-phishing" di FIDO2 https://deafnews.it/en/news/cybersecurity/passkey-bypass-three-studies-shatter-fido2s-anti-phishing-promise DeafNews en 2026-08-15T05:06:20.123331Z Passkey Bypass: Three Studies Shatter FIDO2's 'Anti-Phishing' Promise https://deafnews.it/it/notizie/cybersecurity/ftpm-20-compromesso-amd-e-intel-costrette-a-patchare-la-root-of-trust DeafNews it 2026-08-15T03:06:01.812025Z fTPM 2.0 compromesso: AMD e Intel costrette a patchare la root of trust https://deafnews.it/en/news/cybersecurity/ftpm-20-compromised-amd-and-intel-forced-to-patch-the-root-of-trust DeafNews en 2026-08-15T03:06:01.812025Z fTPM 2.0 Compromised: AMD and Intel Forced to Patch the Root of Trust https://deafnews.it/it/notizie/ransomware/ransomware-q2-1140-attacchi-industriali-il-nuovo-perimetro-e-nei-sistemi-it DeafNews it 2026-08-15T02:05:02.84889Z Ransomware Q2: 1.140 attacchi industriali, il nuovo perimetro è nei sistemi IT https://deafnews.it/en/news/ransomware/ransomware-q2-1140-industrial-attacks-the-new-perimeter-lies-in-it-systems DeafNews en 2026-08-15T02:05:02.84889Z Ransomware Q2: 1,140 Industrial Attacks, the New Perimeter Lies in IT Systems https://deafnews.it/it/notizie/ransomware/gunra-colpisce-infrastrutture-critiche-con-doppio-exploit-fortinet DeafNews it 2026-08-15T00:05:48.969981Z Gunra colpisce infrastrutture critiche con doppio exploit Fortinet https://deafnews.it/en/news/ransomware/gunra-hits-critical-infrastructure-with-dual-fortinet-exploit DeafNews en 2026-08-15T00:05:48.969981Z Gunra Hits Critical Infrastructure with Dual Fortinet Exploit https://deafnews.it/it/notizie/cybersecurity/pax-q80-zero-day-rce-non-patchabile-espone-i-pos-di-pagamento DeafNews it 2026-08-14T19:09:41.215663Z PAX Q80: zero-day RCE non patchabile espone i POS di pagamento https://deafnews.it/en/news/cybersecurity/pax-q80-unpatchable-zero-day-rce-exposes-payment-pos-terminals DeafNews en 2026-08-14T19:09:41.215663Z PAX Q80: Unpatchable Zero-Day RCE Exposes Payment POS Terminals https://deafnews.it/it/notizie/vulnerabilita/tontou-lattacco-che-azzera-le-mitigazioni-spectre-v2-e-leaka-password-linux DeafNews it 2026-08-14T16:07:02.231201Z TONTOU: l'attacco che azzera le mitigazioni Spectre v2 e leaka password Linux https://deafnews.it/en/news/vulnerabilities/tontou-the-attack-that-nullifies-spectre-v2-mitigations-and-leaks-linux-passwords DeafNews en 2026-08-14T16:07:02.231201Z TONTOU: The Attack That Nullifies Spectre v2 Mitigations and Leaks Linux Passwords https://deafnews.it/it/notizie/news/deepseek-ha-condotto-attacchi-cyber-autonomi-ha-fallito-ma-ha-funzionato DeafNews it 2026-08-14T14:07:48.234052Z DeepSeek ha condotto attacchi cyber autonomi: ha fallito, ma ha funzionato https://deafnews.it/en/news/news/deepseek-ran-autonomous-cyberattacks-they-failed-but-the-pipeline-worked DeafNews en 2026-08-14T14:07:48.234052Z DeepSeek Ran Autonomous Cyberattacks: They Failed, But the Pipeline Worked https://deafnews.it/it/notizie/cybersecurity/wesco-conferma-incidente-crm-cloud-exfilsquad-rivendica-furto-di-26-milioni DeafNews it 2026-08-14T13:08:49.330227Z Wesco conferma incidente CRM cloud: ExfilSquad rivendica furto di 2,6 milioni https://deafnews.it/en/news/cybersecurity/wesco-confirms-cloud-crm-incident-exfilsquad-claims-theft-of-26-million-records DeafNews en 2026-08-14T13:08:49.330227Z Wesco Confirms Cloud CRM Incident: ExfilSquad Claims Theft of 2.6 Million Records https://deafnews.it/it/notizie/cybersecurity/apple-patcha-zero-day-decennale-nel-core-di-ios-dyld-aperto-per-10-anni DeafNews it 2026-08-14T12:09:34.678626Z Apple patcha zero-day decennale nel core di iOS: dyld aperto per 10+ anni https://deafnews.it/en/news/cybersecurity/apple-patches-decade-old-zero-day-in-ios-core-dyld-exposed-for-10-years DeafNews en 2026-08-14T12:09:34.678626Z Apple Patches Decade-Old Zero-Day in iOS Core: dyld Exposed for 10+ Years https://deafnews.it/it/notizie/cybersecurity/teampcp-compromette-litellm-434000-pipeline-esposte-in-40-minuti DeafNews it 2026-08-14T11:07:12.925039Z TeamPCP compromette LiteLLM: 434.000 pipeline esposte in 40 minuti https://deafnews.it/en/news/cybersecurity/teampcp-compromises-litellm-434000-pipelines-exposed-in-40-minutes DeafNews en 2026-08-14T11:07:12.925039Z TeamPCP Compromises LiteLLM: 434,000 Pipelines Exposed in 40 Minutes https://deafnews.it/it/notizie/blockchain/trezor-shipmonk-espone-13689-clienti-fisico-e-digitale-si-scontrano DeafNews it 2026-08-14T09:07:15.454769Z Trezor: ShipMonk espone 13.689 clienti, fisico e digitale si scontrano https://deafnews.it/en/news/blockchain/trezor-shipmonk-exposes-13689-customers-where-physical-and-digital-security-collide DeafNews en 2026-08-14T09:07:15.454769Z Trezor: ShipMonk Exposes 13,689 Customers — Where Physical and Digital Security Collide https://deafnews.it/it/notizie/cve/citrix-netscaler-nel-mirino-pre-auth-rce-da-heap-overflow-saml-probabile DeafNews it 2026-08-14T08:05:59.146061Z Citrix NetScaler nel mirino: pre-auth RCE da heap overflow SAML, probabile https://deafnews.it/en/news/cve/citrix-netscaler-in-the-crosshairs-pre-auth-rce-via-saml-heap-overflow-likely-cve-2026-8452 DeafNews en 2026-08-14T08:05:59.146061Z Citrix NetScaler in the Crosshairs: Pre-Auth RCE via SAML Heap Overflow, Likely CVE-2026-8452 https://deafnews.it/it/notizie/cybersecurity/cursor-ide-esegue-codice-da-repository-avvelenati-7-mesi-di-silence-nessuna DeafNews it 2026-08-14T06:11:41.489246Z Cursor IDE esegue codice da repository avvelenati: 7 mesi di silence, nessuna https://deafnews.it/en/news/cybersecurity/cursor-ide-executes-code-from-poisoned-repositories-7-months-of-silence-no-patch DeafNews en 2026-08-14T06:11:41.489246Z Cursor IDE Executes Code from Poisoned Repositories: 7 Months of Silence, No Patch https://deafnews.it/it/notizie/cybersecurity/chaindrop-il-worm-npm-che-ha-bucato-la-fiducia-crittografica-in-4-ore DeafNews it 2026-08-14T05:06:34.145895Z ChainDrop: il worm npm che ha bucato la fiducia crittografica in 4 ore https://deafnews.it/en/news/cybersecurity/chaindrop-the-npm-worm-that-broke-cryptographic-trust-in-four-hours DeafNews en 2026-08-14T05:06:34.145895Z ChainDrop: The npm Worm That Broke Cryptographic Trust in Four Hours https://deafnews.it/it/notizie/news/deadlock-sottrae-i-server-c2-alla-giustizia-i-proxy-ora-vivono-su-blockchain DeafNews it 2026-08-14T03:06:20.470823Z DeadLock sottrae i server C2 alla giustizia: i proxy ora vivono su blockchain https://deafnews.it/en/news/news/deadlock-ransomware-moves-c2-to-polygon-blockchain-evading-takedowns DeafNews en 2026-08-14T03:06:20.470823Z DeadLock Ransomware Moves C2 to Polygon Blockchain, Evading Takedowns