<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/apple-corregge-286-falle-complessive-e-porta-la-patch-per-cve-2026-86950-su-dispositivi-obsoleti</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T07:11:09.841083Z</news:publication_date>
      <news:title>Apple corregge 286 falle complessive e porta la patch per CVE-2026-86950 su dispositivi obsoleti</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/apple-patches-286-total-flaws-backports-cve-2026-86950-fix-to-obsolete-devices</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T07:11:09.841083Z</news:publication_date>
      <news:title>Apple Patches 286 Total Flaws, Backports CVE-2026-86950 Fix to Obsolete Devices</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/vulnerabilita/mailenable-scoperta-vulnerabilita-xxe-autenticato-ma-pericoloso</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T05:05:41.04999Z</news:publication_date>
      <news:title>MailEnable, scoperta vulnerabilità XXE: autenticato ma pericoloso</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/vulnerabilities/mailenable-xxe-vulnerability-authenticated-but-dangerous</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-28T05:05:41.04999Z</news:publication_date>
      <news:title>MailEnable XXE Vulnerability: Authenticated but Dangerous</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/microsoft-authenticator-per-android-il-confused-deputy-che-consegnava-token-aziendali-a-chiunque</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T13:05:43.857529Z</news:publication_date>
      <news:title>Microsoft Authenticator per Android: il &quot;confused deputy&quot; che consegnava token aziendali a chiunque</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/microsoft-authenticator-for-android-the-confused-deputy-that-handed-corporate-tokens-to-any-app</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T13:05:43.857529Z</news:publication_date>
      <news:title>Microsoft Authenticator for Android: The &apos;Confused Deputy&apos; That Handed Corporate Tokens to Any App</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/arista-velocloud-sql-injection-cve-2026-114625-con-cvss-99-e-scadenza-cisa-al-26-ottobre</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T07:08:21.486482Z</news:publication_date>
      <news:title>Arista VeloCloud: SQL injection CVE-2026-114625 con CVSS 9.9 e scadenza CISA al 26 ottobre</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/arista-velocloud-sql-injection-cve-2026-114625-scores-cvss-99-cisa-deadline-october-26</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-27T07:08:21.486482Z</news:publication_date>
      <news:title>Arista VeloCloud: SQL Injection CVE-2026-114625 Scores CVSS 9.9, CISA Deadline October 26</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/vulnerabilita/cve-2026-114550-rce-in-libwebsockets-mqtt-patch-di-una-riga</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T23:03:52.332883Z</news:publication_date>
      <news:title>CVE-2026-114550: RCE in libwebsockets MQTT, patch di una riga</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/vulnerabilities/cve-2026-114550-rce-in-libwebsockets-mqtt-one-line-patch</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T23:03:52.332883Z</news:publication_date>
      <news:title>CVE-2026-114550: RCE in libwebsockets MQTT, One-Line Patch</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/teams-vishing-centinaia-di-attacchi-it-themed-portano-a-ransomware-chaos</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T19:04:24.802838Z</news:publication_date>
      <news:title>Teams vishing: centinaia di attacchi IT-themed portano a ransomware Chaos</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/teams-vishing-hundreds-of-it-themed-attacks-lead-to-chaos-ransomware</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T19:04:24.802838Z</news:publication_date>
      <news:title>Teams Vishing: Hundreds of IT-Themed Attacks Lead to Chaos Ransomware</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/953-negozi-magento-infettati-quando-la-patch-non-ferma-il-malware-persistente</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T18:09:53.790432Z</news:publication_date>
      <news:title>953 negozi Magento infettati: quando la patch non ferma il malware persistente</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/953-magento-stores-infected-when-patching-doesnt-stop-persistent-malware</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T18:09:53.790432Z</news:publication_date>
      <news:title>953 Magento Stores Infected: When Patching Doesn&apos;t Stop Persistent Malware</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/zdi-divulga-sei-zero-day-linux-su-liste-pubbliche-con-exploit-root-e-cve-non-ancora-assegnati</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T15:06:16.773028Z</news:publication_date>
      <news:title>ZDI divulga sei zero-day Linux su liste pubbliche con exploit root e CVE non ancora assegnati</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/zdi-discloses-six-linux-kernel-zero-days-on-public-lists-with-root-exploit-no-cves-assigned</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T15:06:16.773028Z</news:publication_date>
      <news:title>ZDI Discloses Six Linux Kernel Zero-Days on Public Lists With Root Exploit, No CVEs Assigned</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/cisa-stringe-su-nextcloud-tre-giorni-per-chiudere-cve-2026-110447</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T13:05:49.950045Z</news:publication_date>
      <news:title>CISA stringe su Nextcloud: tre giorni per chiudere CVE-2026-110447</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/cisa-cracks-down-on-nextcloud-three-days-to-close-cve-2026-110447</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T13:05:49.950045Z</news:publication_date>
      <news:title>CISA Cracks Down on Nextcloud: Three Days to Close CVE-2026-110447</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/agenti-ai-di-coding-dirottati-da-un-file-in-downloads-niente-da-patchare</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T12:09:32.929491Z</news:publication_date>
      <news:title>Agenti AI di coding dirottati da un file in Downloads: niente da patchare</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/ai-coding-agents-hijacked-by-a-file-in-downloads-nothing-to-patch</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-26T12:09:32.929491Z</news:publication_date>
      <news:title>AI Coding Agents Hijacked by a File in Downloads: Nothing to Patch</news:title>
    </news:news>
  </url>
</urlset>
