https://deafnews.it/it/notizie/cybersecurity/apple-macos-font-malizioso-sfrutta-out-of-bounds-read-in-coretext-per-divulgare-memoria-di-processo DeafNews it 2026-10-29T06:13:24.321876Z Apple macOS: font malizioso sfrutta out-of-bounds read in CoreText per divulgare memoria di processo https://deafnews.it/en/news/cybersecurity/apple-macos-malicious-font-exploits-coretext-out-of-bounds-read-to-leak-process-memory DeafNews en 2026-10-29T06:13:24.321876Z Apple macOS: Malicious Font Exploits CoreText Out-of-Bounds Read to Leak Process Memory https://deafnews.it/it/notizie/vulnerabilita/alpine-ilx-f511-0-day-automotive-svelata-a-pwn2own-nessuna-patch-dopo-otto-mesi DeafNews it 2026-10-29T05:11:26.792359Z Alpine iLX-F511: 0-day automotive svelata a Pwn2Own, nessuna patch dopo otto mesi https://deafnews.it/en/news/vulnerabilities/alpine-ilx-f511-0-day-automotive-flaw-disclosed-at-pwn2own-no-patch-after-eight-months DeafNews en 2026-10-29T05:11:26.792359Z Alpine iLX-F511: 0-Day Automotive Flaw Disclosed at Pwn2Own, No Patch After Eight Months https://deafnews.it/it/notizie/cybersecurity/cisco-finesse-senza-difese-una-ssrf-grave-lascia-le-interfacce-contact-center-esposte-fino-al-2027 DeafNews it 2026-10-29T03:13:23.9731Z Cisco Finesse senza difese: una SSRF grave lascia le interfacce contact center esposte fino al 2027 https://deafnews.it/en/news/cybersecurity/cisco-finesse-left-defenseless-critical-ssrf-exposes-contact-center-interfaces-until-2027 DeafNews en 2026-10-29T03:13:23.9731Z Cisco Finesse Left Defenseless: Critical SSRF Exposes Contact Center Interfaces Until 2027 https://deafnews.it/it/notizie/cybersecurity/avg-privilege-escalation-nel-data-shredder-con-cvss-73 DeafNews it 2026-10-29T00:08:08.521311Z AVG: privilege escalation nel Data Shredder con CVSS 7.3 https://deafnews.it/en/news/cybersecurity/avg-data-shredder-privilege-escalation-flaw-rated-cvss-73 DeafNews en 2026-10-29T00:08:08.521311Z AVG Data Shredder Privilege Escalation Flaw Rated CVSS 7.3 https://deafnews.it/it/notizie/cybersecurity/volt-typhoon-rivelato-il-framework-silent-train-per-attacchi-zero-day DeafNews it 2026-10-28T21:15:49.39051Z Volt Typhoon: rivelato il framework Silent Train per attacchi zero-day https://deafnews.it/en/news/cybersecurity/volt-typhoon-silent-train-framework-exposed-for-zero-day-attacks DeafNews en 2026-10-28T21:15:49.39051Z Volt Typhoon: Silent Train Framework Exposed for Zero-Day Attacks https://deafnews.it/it/notizie/cybersecurity/un-errore-su-github-ha-reso-pubblica-la-patch-di-una-falla-uefi-da-95-su-10 DeafNews it 2026-10-28T20:15:16.298201Z Un errore su GitHub ha reso pubblica la patch di una falla UEFI da 9.5 su 10 https://deafnews.it/en/news/cybersecurity/github-mistake-publishes-patch-for-9510-uefi-flaw-early DeafNews en 2026-10-28T20:15:16.298201Z GitHub Mistake Publishes Patch for 9.5/10 UEFI Flaw Early https://deafnews.it/it/notizie/cybersecurity/oracle-ebs-probing-per-cve-2026-101767-rilevato-sette-giorni-dopo-patch-ottobre DeafNews it 2026-10-28T15:15:44.072962Z Oracle EBS: probing per CVE-2026-101767 rilevato sette giorni dopo patch ottobre https://deafnews.it/en/news/cybersecurity/oracle-ebs-probing-for-cve-2026-101767-detected-seven-days-after-october-patch DeafNews en 2026-10-28T15:15:44.072962Z Oracle EBS: Probing for CVE-2026-101767 Detected Seven Days After October Patch https://deafnews.it/it/notizie/cybersecurity/apple-corregge-286-falle-complessive-e-porta-la-patch-per-cve-2026-86950-su-dispositivi-obsoleti DeafNews it 2026-10-28T07:11:09.841083Z Apple corregge 286 falle complessive e porta la patch per CVE-2026-86950 su dispositivi obsoleti https://deafnews.it/en/news/cybersecurity/apple-patches-286-total-flaws-backports-cve-2026-86950-fix-to-obsolete-devices DeafNews en 2026-10-28T07:11:09.841083Z Apple Patches 286 Total Flaws, Backports CVE-2026-86950 Fix to Obsolete Devices https://deafnews.it/it/notizie/vulnerabilita/mailenable-scoperta-vulnerabilita-xxe-autenticato-ma-pericoloso DeafNews it 2026-10-28T05:05:41.04999Z MailEnable, scoperta vulnerabilità XXE: autenticato ma pericoloso https://deafnews.it/en/news/vulnerabilities/mailenable-xxe-vulnerability-authenticated-but-dangerous DeafNews en 2026-10-28T05:05:41.04999Z MailEnable XXE Vulnerability: Authenticated but Dangerous https://deafnews.it/it/notizie/cybersecurity/microsoft-authenticator-per-android-il-confused-deputy-che-consegnava-token-aziendali-a-chiunque DeafNews it 2026-10-27T13:05:43.857529Z Microsoft Authenticator per Android: il "confused deputy" che consegnava token aziendali a chiunque https://deafnews.it/en/news/cybersecurity/microsoft-authenticator-for-android-the-confused-deputy-that-handed-corporate-tokens-to-any-app DeafNews en 2026-10-27T13:05:43.857529Z Microsoft Authenticator for Android: The 'Confused Deputy' That Handed Corporate Tokens to Any App