<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/cve-2026-105312-bug-nel-console-red-hat-kafka-espone-il-control-plane-a-tenant-non-attendibili</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T12:05:46.38792Z</news:publication_date>
      <news:title>CVE-2026-105312: bug nel Console Red Hat Kafka espone il control-plane a tenant non attendibili</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/cve-2026-105312-red-hat-kafka-console-bug-exposes-control-plane-to-untrusted-tenants</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T12:05:46.38792Z</news:publication_date>
      <news:title>CVE-2026-105312: Red Hat Kafka Console Bug Exposes Control Plane to Untrusted Tenants</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/ransomware/lerrore-opsec-dei-criminali-ai-la-memoria-che-rende-scalabile-lattacco-diventa-prova-incriminante</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T10:07:46.479784Z</news:publication_date>
      <news:title>L&apos;errore OPSEC dei criminali AI: la memoria che rende scalabile l&apos;attacco diventa prova incriminante</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/ransomware/the-ai-criminals-opsec-blunder-how-persistent-memory-turned-scalable-attacks-into-forensic-evidence</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T10:07:46.479784Z</news:publication_date>
      <news:title>The AI Criminals&apos; OPSEC Blunder: How Persistent Memory Turned Scalable Attacks Into Forensic Evidence</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/php-divulga-nuova-falla-rce-senza-patch-a-due-giorni-dallemergenza-php2shell</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:06:59.592631Z</news:publication_date>
      <news:title>PHP divulga nuova falla RCE senza patch a due giorni dall&apos;emergenza PHP2Shell</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/php-discloses-new-unpatched-rce-flaw-two-days-after-php2shell-emergency</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-25T00:06:59.592631Z</news:publication_date>
      <news:title>PHP Discloses New Unpatched RCE Flaw Two Days After PHP2Shell Emergency</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/emudhra-8-ca-compromesse-qualys-rilascia-strumenti-di-detection-operativa</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T06:05:28.085331Z</news:publication_date>
      <news:title>eMudhra: 8 CA compromesse, Qualys rilascia strumenti di detection operativa</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/emudhra-8-intermediate-cas-compromised-qualys-releases-operational-detection-tools</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T06:05:28.085331Z</news:publication_date>
      <news:title>eMudhra: 8 Intermediate CAs Compromised, Qualys Releases Operational Detection Tools</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/beyondtrust-47-giorni-di-zero-day-sfruttata-da-apt-cinese-armory-castle</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:05:00.266487Z</news:publication_date>
      <news:title>BeyondTrust: 47 giorni di zero-day sfruttata da APT cinese Armory Castle</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/beyondtrust-chinese-apt-armory-castle-exploited-zero-day-for-47-days</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-24T00:05:00.266487Z</news:publication_date>
      <news:title>BeyondTrust: Chinese APT Armory Castle Exploited Zero-Day for 47 Days</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/python/pillow-1300-corregge-rce-il-filename-non-il-file-era-la-minaccia</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T23:08:08.329867Z</news:publication_date>
      <news:title>Pillow 13.0.0 corregge RCE: il filename, non il file, era la minaccia</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/python/pillow-1300-fixes-rce-the-filename-not-the-file-was-the-threat</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T23:08:08.329867Z</news:publication_date>
      <news:title>Pillow 13.0.0 Fixes RCE: The Filename, Not the File, Was the Threat</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cve/cve-2026-76268-rce-non-autenticato-nella-patroni-rest-api-di-splunk-enterprise</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T22:05:09.443063Z</news:publication_date>
      <news:title>CVE-2026-76268: RCE non autenticato nella Patroni REST API di Splunk Enterprise</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cve/cve-2026-76268-unauthenticated-rce-in-splunk-enterprise-patroni-rest-api</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T22:05:09.443063Z</news:publication_date>
      <news:title>CVE-2026-76268: Unauthenticated RCE in Splunk Enterprise Patroni REST API</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/nvidia/nvidia-megatron-bridge-rce-con-interazione-utente-nel-parsing-yaml-di-configurazione-modelli</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T20:07:08.847085Z</news:publication_date>
      <news:title>NVIDIA Megatron Bridge: RCE con interazione utente nel parsing YAML di configurazione modelli</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/nvidia/nvidia-megatron-bridge-user-interaction-rce-in-model-config-yaml-parsing</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T20:07:08.847085Z</news:publication_date>
      <news:title>NVIDIA Megatron Bridge: User-Interaction RCE in Model Config YAML Parsing</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cybersecurity/bug-in-snort-3-quando-il-motore-di-inspection-vba-diventa-vettore-di-attacco</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T18:08:12.588588Z</news:publication_date>
      <news:title>Bug in Snort 3: quando il motore di inspection VBA diventa vettore di attacco</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cybersecurity/snort-3-bug-when-the-vba-inspection-engine-becomes-an-attack-vector</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T18:08:12.588588Z</news:publication_date>
      <news:title>Snort 3 Bug: When the VBA Inspection Engine Becomes an Attack Vector</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/it/notizie/cve/zimbra-cve-2026-73570-rce-non-autenticata-sfruttata-prima-della-patch</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>it</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T16:06:33.794072Z</news:publication_date>
      <news:title>Zimbra CVE-2026-73570: RCE non autenticata sfruttata prima della patch</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://deafnews.it/en/news/cve/zimbra-cve-2026-73570-unauthenticated-rce-exploited-before-patch</loc>
    <news:news>
      <news:publication>
        <news:name>DeafNews</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-23T16:06:33.794072Z</news:publication_date>
      <news:title>Zimbra CVE-2026-73570: Unauthenticated RCE Exploited Before Patch</news:title>
    </news:news>
  </url>
</urlset>
