https://deafnews.it/it/notizie/malware/windrelay-trasforma-lo-smartphone-android-in-relay-nfc-per-svuotare-carte DeafNews it 2026-08-13T12:05:05.980817Z WindRelay trasforma lo smartphone Android in relay NFC per svuotare carte https://deafnews.it/en/news/malware/windrelay-turns-android-phones-into-nfc-relays-to-drain-contactless-cards DeafNews en 2026-08-13T12:05:05.980817Z WindRelay Turns Android Phones into NFC Relays to Drain Contactless Cards https://deafnews.it/it/notizie/news/adobe-commerce-tentativi-di-exploit-per-la-cve-2026-71362-il-conflitto-tra DeafNews it 2026-08-13T11:08:17.641911Z Adobe Commerce, tentativi di exploit per la CVE-2026-71362: il conflitto tra https://deafnews.it/en/news/news/adobe-commerce-exploit-attempts-for-cve-2026-71362-the-conflict-between-vendor-advisory-and-security-vendor-detection DeafNews en 2026-08-13T11:08:17.641911Z Adobe Commerce Exploit Attempts for CVE-2026-71362: The Conflict Between Vendor Advisory and Security Vendor Detection https://deafnews.it/it/notizie/cybersecurity/cisa-stringe-su-loadmaster-792-tentativi-di-exploit-e-patch-obbligatoria DeafNews it 2026-08-13T02:11:57.177396Z CISA stringe su LoadMaster: 792 tentativi di exploit e patch obbligatoria https://deafnews.it/en/news/cybersecurity/cisa-cracks-down-on-loadmaster-792-exploit-attempts-and-mandatory-patching DeafNews en 2026-08-13T02:11:57.177396Z CISA Cracks Down on LoadMaster: 792 Exploit Attempts and Mandatory Patching https://deafnews.it/it/notizie/vulnerabilita/metabase-sotto-attacco-zero-day-una-sql-injection-da-cvss-100-espone-interi DeafNews it 2026-08-13T01:12:04.648841Z Metabase sotto attacco zero-day: una SQL injection da CVSS 10.0 espone interi https://deafnews.it/en/news/vulnerabilities/metabase-under-zero-day-attack-critical-sql-injection-with-cvss-100-exposes-entire-data-layers DeafNews en 2026-08-13T01:12:04.648841Z Metabase Under Zero-Day Attack: Critical SQL Injection with CVSS 10.0 Exposes Entire Data Layers https://deafnews.it/it/notizie/news/teampcp-avvelena-litellm-su-pypi-40-minuti-di-pacchetto-malevolo-espongono DeafNews it 2026-08-12T23:06:34.235235Z TeamPCP avvelena LiteLLM su PyPI: 40 minuti di pacchetto malevolo espongono https://deafnews.it/en/news/news/teampcp-poisons-litellm-on-pypi-40-minutes-of-malicious-package-exposure DeafNews en 2026-08-12T23:06:34.235235Z TeamPCP Poisons LiteLLM on PyPI: 40 Minutes of Malicious Package Exposure https://deafnews.it/it/notizie/vulnerabilita/copyescape-un-semplice-docker-cp-apre-alla-fuga-dai-container DeafNews it 2026-08-12T22:08:09.873351Z CopyEscape: un semplice docker cp apre alla fuga dai container https://deafnews.it/en/news/vulnerabilities/copyescape-a-simple-docker-cp-opens-the-door-to-container-escape DeafNews en 2026-08-12T22:08:09.873351Z CopyEscape: A Simple docker cp Opens the Door to Container Escape https://deafnews.it/it/notizie/cybersecurity/shieldbreak-un-nuovo-zero-day-in-defender-espone-sistemi-windows DeafNews it 2026-08-12T21:05:57.182118Z ShieldBreak: un nuovo zero-day in Defender espone sistemi Windows https://deafnews.it/en/news/cybersecurity/shieldbreak-new-zero-day-in-defender-exposes-windows-systems DeafNews en 2026-08-12T21:05:57.182118Z ShieldBreak: New Zero-Day in Defender Exposes Windows Systems https://deafnews.it/it/notizie/cybersecurity/hacker-attraversano-apn-privata-arrestata-turbina-impianto-termico-polacco DeafNews it 2026-08-12T20:12:27.577631Z Hacker attraversano APN privata: arrestata turbina impianto termico polacco https://deafnews.it/en/news/cybersecurity/hackers-traverse-private-apn-shut-down-turbine-at-polish-thermal-plant DeafNews en 2026-08-12T20:12:27.577631Z Hackers Traverse Private APN, Shut Down Turbine at Polish Thermal Plant https://deafnews.it/it/notizie/cybersecurity/zdi-26-558-amazon-smart-plug-falla-di-validazione-certificati-nei-firmware-ota DeafNews it 2026-08-12T18:12:22.645021Z ZDI-26-558: Amazon Smart Plug, falla di validazione certificati nei firmware OTA https://deafnews.it/en/news/cybersecurity/zdi-26-558-amazon-smart-plug-certificate-validation-flaw-in-ota-firmware-updates DeafNews en 2026-08-12T18:12:22.645021Z ZDI-26-558: Amazon Smart Plug Certificate Validation Flaw in OTA Firmware Updates https://deafnews.it/it/notizie/news/sap-commerce-cloud-una-falla-cvss-100-sfrutta-il-client-di-autenticazione-di DeafNews it 2026-08-12T17:15:19.762118Z SAP Commerce Cloud: una falla CVSS 10.0 sfrutta il client di autenticazione di https://deafnews.it/en/news/news/sap-commerce-cloud-cvss-100-flaw-exploits-default-authentication-client-for-unauthenticated-rce DeafNews en 2026-08-12T17:15:19.762118Z SAP Commerce Cloud: CVSS 10.0 Flaw Exploits Default Authentication Client for Unauthenticated RCE https://deafnews.it/it/notizie/vulnerabilita/windows-bug-nel-driver-win32kfull-permette-escalation-a-system DeafNews it 2026-08-12T12:09:05.558623Z Windows: bug nel driver win32kfull permette escalation a SYSTEM https://deafnews.it/en/news/vulnerabilities/windows-win32kfull-driver-bug-allows-escalation-to-system DeafNews en 2026-08-12T12:09:05.558623Z Windows: win32kfull Driver Bug Allows Escalation to SYSTEM https://deafnews.it/it/notizie/cybersecurity/originlab-origin-viewer-patch-rce-per-file-ogw-disclosure-zdi DeafNews it 2026-08-12T11:06:31.747281Z OriginLab Origin Viewer: patch RCE per file OGW, disclosure ZDI https://deafnews.it/en/news/cybersecurity/originlab-origin-viewer-rce-patch-for-ogw-files-zdi-disclosure DeafNews en 2026-08-12T11:06:31.747281Z OriginLab Origin Viewer: RCE Patch for OGW Files, ZDI Disclosure https://deafnews.it/it/notizie/vulnerabilita/phoenix-contact-charx-sec-3000-rce-come-root-via-command-injection DeafNews it 2026-08-12T10:09:44.002601Z Phoenix Contact CHARX SEC-3000: RCE come root via command injection https://deafnews.it/en/news/vulnerabilities/phoenix-contact-charx-sec-3000-rce-as-root-via-command-injection DeafNews en 2026-08-12T10:09:44.002601Z Phoenix Contact CHARX SEC-3000: RCE as Root via Command Injection https://deafnews.it/it/notizie/cybersecurity/cve-2026-54984-rce-nel-parser-icc-di-windows-ma-il-vettore-e-locale DeafNews it 2026-08-12T09:07:32.975064Z CVE-2026-54984: RCE nel parser ICC di Windows, ma il vettore è locale https://deafnews.it/en/news/cybersecurity/cve-2026-54984-rce-in-windows-icc-parser-but-the-vector-is-local DeafNews en 2026-08-12T09:07:32.975064Z CVE-2026-54984: RCE in Windows ICC Parser, but the Vector Is Local https://deafnews.it/it/notizie/vulnerabilita/parallels-ras-client-escalation-locale-a-system-via-exposed-dangerous-function DeafNews it 2026-08-12T08:05:15.868065Z Parallels RAS Client: escalation locale a SYSTEM via exposed dangerous function https://deafnews.it/en/news/vulnerabilities/parallels-ras-client-local-privilege-escalation-to-system-via-exposed-dangerous-function DeafNews en 2026-08-12T08:05:15.868065Z Parallels RAS Client: Local Privilege Escalation to SYSTEM via Exposed Dangerous Function https://deafnews.it/it/notizie/vulnerabilita/galaxy-s25-rce-tiff-patchato-a-luglio-la-disclosure-arriva-solo-ad-agosto DeafNews it 2026-08-12T06:06:52.243577Z Galaxy S25: RCE TIFF patchato a luglio, la disclosure arriva solo ad agosto https://deafnews.it/en/news/vulnerabilities/galaxy-s25-rce-tiff-flaw-patched-in-july-disclosure-arrives-in-august DeafNews en 2026-08-12T06:06:52.243577Z Galaxy S25: RCE TIFF Flaw Patched in July, Disclosure Arrives in August https://deafnews.it/it/notizie/cybersecurity/flowise-rce-pre-autenticazione-cvss-98-aggiornare-subito-alla-313 DeafNews it 2026-08-12T05:05:16.996949Z Flowise, RCE pre-autenticazione CVSS 9.8: aggiornare subito alla 3.1.3 https://deafnews.it/en/news/cybersecurity/flowise-pre-auth-rce-cvss-98-update-immediately-to-313 DeafNews en 2026-08-12T05:05:16.996949Z Flowise Pre-Auth RCE, CVSS 9.8: Update Immediately to 3.1.3 https://deafnews.it/it/notizie/cybersecurity/microsoft-classifica-exploitation-more-likely-per-cve-2026-62893-in-windows DeafNews it 2026-08-12T04:08:31.865123Z Microsoft classifica exploitation More Likely per CVE-2026-62893 in Windows https://deafnews.it/en/news/cybersecurity/microsoft-rates-exploitation-more-likely-for-cve-2026-62893-in-windows DeafNews en 2026-08-12T04:08:31.865123Z Microsoft Rates Exploitation 'More Likely' for CVE-2026-62893 in Windows https://deafnews.it/it/notizie/news/wazuh-dapi-rce-da-worker-node-compromesso-a-esecuzione-codice-come-root-sul DeafNews it 2026-08-12T03:11:12.879353Z Wazuh DAPI RCE: da worker node compromesso a esecuzione codice come root sul https://deafnews.it/en/news/news/wazuh-dapi-rce-from-compromised-worker-node-to-root-code-execution-on-master DeafNews en 2026-08-12T03:11:12.879353Z Wazuh DAPI RCE: From Compromised Worker Node to Root Code Execution on Master https://deafnews.it/it/notizie/cybersecurity/sony-xav-9500es-heap-overflow-avrcp-permette-rce-via-bluetooth DeafNews it 2026-08-12T01:11:00.769748Z Sony XAV-9500ES: heap overflow AVRCP permette RCE via Bluetooth https://deafnews.it/en/news/cybersecurity/sony-xav-9500es-avrcp-heap-overflow-enables-rce-via-bluetooth DeafNews en 2026-08-12T01:11:00.769748Z Sony XAV-9500ES: AVRCP Heap Overflow Enables RCE via Bluetooth https://deafnews.it/it/notizie/cybersecurity/red-hat-acm-il-controller-subscription-diventa-un-ponte-per-lescalation-totale DeafNews it 2026-08-12T00:07:45.481393Z Red Hat ACM, il controller Subscription diventa un ponte per l'escalation totale https://deafnews.it/en/news/cybersecurity/red-hat-acm-subscription-controller-becomes-bridge-for-total-privilege-escalation DeafNews en 2026-08-12T00:07:45.481393Z Red Hat ACM: Subscription Controller Becomes Bridge for Total Privilege Escalation https://deafnews.it/it/notizie/cybersecurity/trendai-vision-one-information-disclosure-nei-log-risolta-dopo-10-mesi DeafNews it 2026-08-11T20:22:09.601326Z TrendAI Vision One: information disclosure nei log risolta dopo 10 mesi https://deafnews.it/en/news/cybersecurity/trendai-vision-one-log-information-disclosure-fixed-after-10-months DeafNews en 2026-08-11T20:22:09.601326Z TrendAI Vision One: Log Information Disclosure Fixed After 10 Months https://deafnews.it/it/notizie/cybersecurity/lazarus-colpisce-con-cve-2026-68820-zero-day-microsoft-nel-settore-difesa DeafNews it 2026-08-11T19:13:46.082836Z Lazarus colpisce con CVE-2026-68820: zero-day Microsoft nel settore difesa https://deafnews.it/en/news/cybersecurity/lazarus-strikes-with-cve-2026-68820-microsoft-zero-day-in-defense-sector DeafNews en 2026-08-11T19:13:46.082836Z Lazarus Strikes with CVE-2026-68820: Microsoft Zero-Day in Defense Sector https://deafnews.it/it/notizie/cybersecurity/kenwood-dnr1007xr-aggiornamento-firmware-permette-rce-come-root DeafNews it 2026-08-11T18:09:40.390416Z Kenwood DNR1007XR: aggiornamento firmware permette RCE come root https://deafnews.it/en/news/cybersecurity/kenwood-dnr1007xr-firmware-update-flaw-enables-root-rce-via-symlink-following DeafNews en 2026-08-11T18:09:40.390416Z Kenwood DNR1007XR: Firmware Update Flaw Enables Root RCE via Symlink Following https://deafnews.it/it/notizie/zero/pax-q80-0-day-zdi-26-526-lascia-terminali-di-pagamento-senza-patch DeafNews it 2026-08-11T17:09:06.79265Z PAX Q80: 0-day ZDI-26-526 lascia terminali di pagamento senza patch https://deafnews.it/en/news/zero/pax-q80-0-day-zdi-26-526-leaves-payment-terminals-unpatched DeafNews en 2026-08-11T17:09:06.79265Z PAX Q80: 0-day ZDI-26-526 Leaves Payment Terminals Unpatched https://deafnews.it/it/notizie/cybersecurity/head-mare-apt-converte-server-trueconf-in-veicoli-di-supply-chain-attack DeafNews it 2026-08-11T16:19:02.4786Z Head Mare APT converte server TrueConf in veicoli di supply-chain attack https://deafnews.it/en/news/cybersecurity/head-mare-apt-turns-trueconf-servers-into-supply-chain-attack-vehicles DeafNews en 2026-08-11T16:19:02.4786Z Head Mare APT Turns TrueConf Servers into Supply-Chain Attack Vehicles https://deafnews.it/it/notizie/vulnerabilita/cisa-conferma-exploitation-ransomware-di-sharepoint-microsoft-tace DeafNews it 2026-08-11T15:15:40.933603Z CISA conferma exploitation ransomware di SharePoint, Microsoft tace https://deafnews.it/en/news/vulnerabilities/cisa-confirms-sharepoint-ransomware-exploitation-microsoft-stays-silent DeafNews en 2026-08-11T15:15:40.933603Z CISA Confirms SharePoint Ransomware Exploitation; Microsoft Stays Silent https://deafnews.it/it/notizie/cybersecurity/intellexa-trafugati-documenti-con-14-zero-day-e-accesso-remoto-ai-clienti DeafNews it 2026-08-11T13:10:40.790893Z Intellexa: trafugati documenti con 14 zero-day e accesso remoto ai clienti https://deafnews.it/en/news/cybersecurity/intellexa-leaked-documents-expose-14-zero-days-and-vendor-remote-access-to-government-clients DeafNews en 2026-08-11T13:10:40.790893Z Intellexa: Leaked Documents Expose 14 Zero-Days and Vendor Remote Access to Government Clients