https://deafnews.it/it/notizie/cybersecurity/certighost-dieci-giorni-dopo-la-patch-lexploit-e-pubblico-e-il-dominio-crolla DeafNews it 2026-07-27T16:07:29.038583Z Certighost: dieci giorni dopo la patch, l'exploit è pubblico e il dominio crolla https://deafnews.it/en/news/cybersecurity/certighost-ten-days-after-the-patch-the-exploit-is-public-and-the-domain-falls DeafNews en 2026-07-27T16:07:29.038583Z Certighost: Ten Days After the Patch, the Exploit Is Public and the Domain Falls https://deafnews.it/it/notizie/cybersecurity/heimdall-data-database-proxy-scoperta-vulnerabilita-rce-con-privilegi-root DeafNews it 2026-07-27T15:05:02.342519Z Heimdall Data Database Proxy, scoperta vulnerabilità RCE con privilegi root https://deafnews.it/en/news/cybersecurity/heimdall-data-database-proxy-rce-vulnerability-with-root-privileges-discovered DeafNews en 2026-07-27T15:05:02.342519Z Heimdall Data Database Proxy: RCE Vulnerability with Root Privileges Discovered https://deafnews.it/it/notizie/malware/spyware-octagonpanel-si-nasconde-dietro-falsa-app-di-allerta-civile-del-bahrain DeafNews it 2026-07-27T14:06:46.825031Z Spyware OctagonPanel si nasconde dietro falsa app di allerta civile del Bahrain https://deafnews.it/en/news/malware/octagonpanel-spyware-hides-behind-fake-bahrain-civil-defense-alert-app DeafNews en 2026-07-27T14:06:46.825031Z OctagonPanel Spyware Hides Behind Fake Bahrain Civil Defense Alert App https://deafnews.it/it/notizie/microsoft/patch-tuesday-record-microsoft-fissa-570-cve-e-due-zero-day-attivi-su-ad-fs-e DeafNews it 2026-07-27T12:08:06.704451Z Patch Tuesday record: Microsoft fissa 570 CVE e due zero-day attivi su AD FS e https://deafnews.it/en/news/microsoft/record-patch-tuesday-microsoft-fixes-570-cves-and-two-actively-exploited-zero-days-in-ad-fs-and-sharepoint DeafNews en 2026-07-27T12:08:06.704451Z Record Patch Tuesday: Microsoft Fixes 570 CVEs and Two Actively Exploited Zero-Days in AD FS and SharePoint https://deafnews.it/it/notizie/cybersecurity/iran-apt-sabotaggio-plc-usa-cisa-allarma-su-rischio-fisico DeafNews it 2026-07-27T10:09:09.463767Z Iran APT sabotaggio PLC USA: CISA allarma su rischio fisico https://deafnews.it/en/news/cybersecurity/iran-apt-sabotages-us-plcs-cisa-warns-of-physical-risk DeafNews en 2026-07-27T10:09:09.463767Z Iran APT Sabotages US PLCs: CISA Warns of Physical Risk https://deafnews.it/it/notizie/cybersecurity/cisa-impone-tre-giorni-per-lo-zero-day-splunk-il-nuovo-bod-26-04-supera-il DeafNews it 2026-07-27T09:05:46.040215Z CISA impone tre giorni per lo zero-day Splunk: il nuovo BOD 26-04 supera il https://deafnews.it/en/news/cybersecurity/cisa-mandates-three-day-patch-for-splunk-zero-day-new-bod-26-04-ups-the-ante DeafNews en 2026-07-27T09:05:46.040215Z CISA Mandates Three-Day Patch for Splunk Zero-Day: New BOD 26-04 Ups the Ante https://deafnews.it/it/notizie/vulnerabilita/apple-patcha-0-day-nel-dyld-di-ios-26-attacchi-mirati-gia-in-corso DeafNews it 2026-07-27T08:06:16.403569Z Apple patcha 0-day nel dyld di iOS 26: attacchi mirati già in corso https://deafnews.it/en/news/vulnerabilities/apple-patches-ios-26-dyld-zero-day-targeted-attacks-already-underway DeafNews en 2026-07-27T08:06:16.403569Z Apple Patches iOS 26 dyld Zero-Day: Targeted Attacks Already Underway https://deafnews.it/it/notizie/ransomware/qilin-sfrutta-cve-2026-0257-dal-vpn-bypass-al-ransomware-in-4-giorni DeafNews it 2026-07-27T07:05:48.690917Z Qilin sfrutta CVE-2026-0257: dal VPN bypass al ransomware in 4 giorni https://deafnews.it/en/news/ransomware/qilin-exploits-cve-2026-0257-from-vpn-bypass-to-ransomware-in-4-days DeafNews en 2026-07-27T07:05:48.690917Z Qilin Exploits CVE-2026-0257: From VPN Bypass to Ransomware in 4 Days https://deafnews.it/it/notizie/cybersecurity/da-zero-a-shell-la-catena-wp2shell-colpisce-il-core-di-wordpress-in-pochi DeafNews it 2026-07-27T04:05:57.882067Z Da zero a shell: la catena wp2shell colpisce il core di WordPress in pochi https://deafnews.it/en/news/cybersecurity/from-zero-to-shell-the-wp2shell-chain-strikes-wordpress-core-in-seconds DeafNews en 2026-07-27T04:05:57.882067Z From Zero to Shell: The wp2shell Chain Strikes WordPress Core in Seconds https://deafnews.it/it/notizie/cybersecurity/delta-electronics-dtm-soft-esposto-a-rce-con-interazione-utente-tramite-file DeafNews it 2026-07-27T02:08:52.065853Z Delta Electronics DTM Soft esposto a RCE con interazione utente tramite file https://deafnews.it/en/news/cybersecurity/delta-electronics-dtm-soft-exposed-to-user-interaction-rce-via-project-files DeafNews en 2026-07-27T02:08:52.065853Z Delta Electronics DTM Soft Exposed to User-Interaction RCE via Project Files https://deafnews.it/it/notizie/vulnerabilita/scada-daqfactory-rce-via-file-ctl-ingegnerizzato-patch-disponibile DeafNews it 2026-07-27T01:05:11.773641Z SCADA DAQFactory: RCE via file .ctl ingegnerizzato, patch disponibile https://deafnews.it/en/news/vulnerabilities/scada-daqfactory-rce-via-engineered-ctl-file-patch-available DeafNews en 2026-07-27T01:05:11.773641Z SCADA DAQFactory: RCE via Engineered .ctl File, Patch Available https://deafnews.it/it/notizie/news/docker-desktop-macos-sandbox-escape-nellinference-server-patch-disponibile DeafNews it 2026-07-27T00:04:33.644043Z Docker Desktop macOS: sandbox escape nell'inference server, patch disponibile https://deafnews.it/en/news/news/docker-desktop-macos-sandbox-escape-in-inference-server-patch-available DeafNews en 2026-07-27T00:04:33.644043Z Docker Desktop macOS: Sandbox Escape in Inference Server, Patch Available https://deafnews.it/it/notizie/cybersecurity/xorg-server-bug-critico-in-glamor-font-consente-escalation-a-root DeafNews it 2026-07-26T23:06:18.817704Z X.Org Server: bug critico in Glamor Font consente escalation a root https://deafnews.it/en/news/cybersecurity/xorg-server-critical-glamor-font-bug-allows-root-privilege-escalation DeafNews en 2026-07-26T23:06:18.817704Z X.Org Server: Critical Glamor Font Bug Allows Root Privilege Escalation https://deafnews.it/it/notizie/supply/litellm-il-gateway-llm-open-source-ha-distribuito-malware-ruba-credenziali DeafNews it 2026-07-26T20:04:35.850446Z LiteLLM, il gateway LLM open source, ha distribuito malware ruba-credenziali https://deafnews.it/en/news/supply/litellm-open-source-llm-gateway-distributes-credential-stealing-malware DeafNews en 2026-07-26T20:04:35.850446Z LiteLLM Open-Source LLM Gateway Distributes Credential-Stealing Malware https://deafnews.it/it/notizie/cybersecurity/github-actions-e-diventata-involontariamente-unisp-per-criminali DeafNews it 2026-07-26T19:05:17.280262Z GitHub Actions è diventata involontariamente un'ISP per criminali https://deafnews.it/en/news/cybersecurity/github-actions-unwittingly-became-an-isp-for-criminals DeafNews en 2026-07-26T19:05:17.280262Z GitHub Actions Unwittingly Became an ISP for Criminals https://deafnews.it/it/notizie/ransomware/stadler-rifiuta-riscatto-da-123-milioni-everest-non-ha-leakato-i-dati DeafNews it 2026-07-26T18:07:14.236385Z Stadler rifiuta riscatto da 12,3 milioni: Everest non ha leakato i dati https://deafnews.it/en/news/ransomware/stadler-rejects-123m-ransom-everest-fails-to-leak-data DeafNews en 2026-07-26T18:07:14.236385Z Stadler Rejects $12.3M Ransom: Everest Fails to Leak Data https://deafnews.it/it/notizie/cybersec/legacyhive-zero-day-windows-patchata-da-0patch-prima-di-microsoft DeafNews it 2026-07-26T17:05:41.450792Z LegacyHive: zero-day Windows patchata da 0Patch prima di Microsoft https://deafnews.it/en/news/cybersec/legacyhive-zero-day-windows-flaw-patched-by-0patch-before-microsoft DeafNews en 2026-07-26T17:05:41.450792Z LegacyHive: Zero-Day Windows Flaw Patched by 0Patch Before Microsoft https://deafnews.it/it/notizie/ai/ai-autonoma-contro-una-rete-idrica-claude-ha-mappato-lambiente-ot-senza DeafNews it 2026-07-26T15:10:35.071994Z AI autonoma contro una rete idrica: Claude ha mappato l'ambiente OT senza https://deafnews.it/en/news/ai/autonomous-ai-vs-a-water-network-how-claude-mapped-an-ot-environment-without-a-manual DeafNews en 2026-07-26T15:10:35.071994Z Autonomous AI vs. a Water Network: How Claude Mapped an OT Environment Without a Manual https://deafnews.it/it/notizie/cybersecurity/sleepergem-il-giorno-in-cui-rubygems-e-diventato-un-bersaglio-npm-style DeafNews it 2026-07-26T14:05:39.132095Z SleeperGem: il giorno in cui RubyGems è diventato un bersaglio npm-style https://deafnews.it/en/news/cybersecurity/sleepergem-the-day-rubygems-became-an-npm-style-target DeafNews en 2026-07-26T14:05:39.132095Z SleeperGem: The Day RubyGems Became an npm-Style Target https://deafnews.it/it/notizie/cybersecurity/dydx-terzo-attacco-supply-chain-pacchetti-npm-e-pypi-compromessi DeafNews it 2026-07-26T13:04:50.344904Z dYdX: terzo attacco supply chain, pacchetti npm e PyPI compromessi https://deafnews.it/en/news/cybersecurity/dydx-hit-by-third-supply-chain-attack-compromised-npm-and-pypi-packages-deliver-wallet-stealer-and-rat DeafNews en 2026-07-26T13:04:50.344904Z dYdX Hit by Third Supply-Chain Attack: Compromised npm and PyPI Packages Deliver Wallet Stealer and RAT https://deafnews.it/it/notizie/cybersecurity/cve-2026-3888-lpe-to-root-in-snapd-colpisce-ubuntu-lts-dal-2016 DeafNews it 2026-07-26T12:05:59.947067Z CVE-2026-3888: LPE to root in snapd colpisce Ubuntu LTS dal 2016 https://deafnews.it/en/news/cybersecurity/cve-2026-3888-lpe-to-root-in-snapd-hits-ubuntu-lts-since-2016 DeafNews en 2026-07-26T12:05:59.947067Z CVE-2026-3888: LPE to Root in snapd Hits Ubuntu LTS Since 2016 https://deafnews.it/it/notizie/nvidia/nvidia-nvtabular-rce-via-pickle-cve-2026-24237-con-cvss-78 DeafNews it 2026-07-26T10:06:44.289307Z NVIDIA NVTabular: RCE via pickle, CVE-2026-24237 con CVSS 7.8 https://deafnews.it/en/news/nvidia/nvidia-nvtabular-rce-via-pickle-cve-2026-24237-rated-cvss-78 DeafNews en 2026-07-26T10:06:44.289307Z NVIDIA NVTabular: RCE via Pickle, CVE-2026-24237 Rated CVSS 7.8 https://deafnews.it/it/notizie/vulnerabilita/zdi-26-419-bug-in-adobeupdateservice-permette-escalation-a-privilegi-system DeafNews it 2026-07-26T09:06:10.675162Z ZDI-26-419: bug in AdobeUpdateService permette escalation a privilegi SYSTEM https://deafnews.it/en/news/vulnerabilities/zdi-26-419-adobeupdateservice-bug-allows-local-privilege-escalation-to-system DeafNews en 2026-07-26T09:06:10.675162Z ZDI-26-419: AdobeUpdateService Bug Allows Local Privilege Escalation to SYSTEM https://deafnews.it/it/notizie/vulnerabilita/il-driver-fantasma-di-msi-center-escalation-locale-a-system-con-un-comando DeafNews it 2026-07-26T08:05:38.003038Z Il driver fantasma di MSI Center: escalation locale a SYSTEM con un comando https://deafnews.it/en/news/vulnerabilities/msi-centers-ghost-driver-local-escalation-to-system-in-one-command DeafNews en 2026-07-26T08:05:38.003038Z MSI Center's Ghost Driver: Local Escalation to SYSTEM in One Command https://deafnews.it/it/notizie/vulnerabilita/zdi-26-443-bug-vmwgfx-nel-kernel-linux-permette-escalation-privilegi-a-cvss-88 DeafNews it 2026-07-26T07:10:41.66885Z ZDI-26-443: bug vmwgfx nel kernel Linux permette escalation privilegi a CVSS 8.8 https://deafnews.it/en/news/vulnerabilities/zdi-26-443-linux-kernel-vmwgfx-integer-overflow-enables-local-privilege-escalation-at-cvss-88 DeafNews en 2026-07-26T07:10:41.66885Z ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Enables Local Privilege Escalation at CVSS 8.8 https://deafnews.it/it/notizie/cybersecurity/scanner-pubblico-per-la-vulnerabilita-nginx-map-regex-lexploit-rce-e-atteso DeafNews it 2026-07-26T05:06:26.420849Z Scanner pubblico per la vulnerabilità NGINX map regex: l'exploit RCE è atteso https://deafnews.it/en/news/cybersecurity/public-scanner-released-for-nginx-map-regex-flaw-full-rce-exploit-expected-around-august-5 DeafNews en 2026-07-26T05:06:26.420849Z Public Scanner Released for NGINX Map Regex Flaw; Full RCE Exploit Expected Around August 5 https://deafnews.it/it/notizie/cybersecurity/russia-sfrutta-zero-day-zimbra-laggiornamento-non-basta-a-scacciare-gli-spie DeafNews it 2026-07-26T04:06:00.34386Z Russia sfrutta zero-day Zimbra: l'aggiornamento non basta a scacciare gli spie https://deafnews.it/en/news/cybersecurity/russia-exploits-zimbra-zero-day-patching-alone-wont-evict-the-spies DeafNews en 2026-07-26T04:06:00.34386Z Russia Exploits Zimbra Zero-Day: Patching Alone Won't Evict the Spies https://deafnews.it/it/notizie/vulnerabilita/fastjson-1x-senza-via-duscita-quando-le-mitigazioni-standard-non-bastano DeafNews it 2026-07-26T03:06:36.988265Z Fastjson 1.x senza via d'uscita: quando le mitigazioni standard non bastano https://deafnews.it/en/news/vulnerabilities/fastjson-1x-has-no-exit-when-standard-mitigations-arent-enough DeafNews en 2026-07-26T03:06:36.988265Z Fastjson 1.x Has No Exit: When Standard Mitigations Aren't Enough https://deafnews.it/it/notizie/cybersecurity/wallbox-autel-esposto-a-rce-pre-autenticazione-il-bug-pwn2own-che-colpisce-la DeafNews it 2026-07-26T00:05:10.298302Z Wallbox Autel esposto a RCE pre-autenticazione: il bug Pwn2Own che colpisce la https://deafnews.it/en/news/cybersecurity/autel-wallbox-exposed-to-pre-auth-rce-the-pwn2own-bug-hitting-home-ev-chargers DeafNews en 2026-07-26T00:05:10.298302Z Autel Wallbox Exposed to Pre-Auth RCE: The Pwn2Own Bug Hitting Home EV Chargers https://deafnews.it/it/notizie/phishing/server-mal-configurato-espone-tre-operazioni-evilginx-contro-microsoft-365 DeafNews it 2026-07-25T21:06:23.27116Z Server mal configurato espone tre operazioni Evilginx contro Microsoft 365 https://deafnews.it/en/news/phishing/misconfigured-server-exposes-three-evilginx-operations-targeting-microsoft-365 DeafNews en 2026-07-25T21:06:23.27116Z Misconfigured Server Exposes Three Evilginx Operations Targeting Microsoft 365 https://deafnews.it/it/notizie/vulnerabilita/oracle-simphony-quattro-cve-critiche-espongono-i-pos-dellospitalita-a-rce DeafNews it 2026-07-25T20:04:58.931112Z Oracle Simphony: quattro CVE critiche espongono i POS dell'ospitalità a RCE https://deafnews.it/en/news/vulnerabilities/oracle-simphony-four-critical-cves-expose-hospitality-pos-to-rce DeafNews en 2026-07-25T20:04:58.931112Z Oracle Simphony: Four Critical CVEs Expose Hospitality POS to RCE https://deafnews.it/it/notizie/phishing/operazione-congiunta-smantella-kratos-il-kit-aitm-che-bypassa-mfa DeafNews it 2026-07-25T18:04:51.964212Z Operazione congiunta smantella Kratos: il kit AiTM che bypassa MFA https://deafnews.it/en/news/phishing/joint-operation-dismantles-kratos-the-aitm-phishing-kit-that-bypasses-mfa DeafNews en 2026-07-25T18:04:51.964212Z Joint Operation Dismantles Kratos: The AiTM Phishing Kit That Bypasses MFA https://deafnews.it/it/notizie/ai/liran-ha-armato-il-suo-playbook-asimmetrico-con-lai-commerciale DeafNews it 2026-07-25T17:05:50.505841Z L'Iran ha armato il suo playbook asimmetrico con l'AI commerciale https://deafnews.it/en/news/ai/iran-weaponizes-its-asymmetric-playbook-with-commercial-ai DeafNews en 2026-07-25T17:05:50.505841Z Iran Weaponizes Its Asymmetric Playbook With Commercial AI