Feed
-
Le immagini vincitrici di Wiki Loves Earth Italy 2026 Paesaggi, montagne, laghi, coste e animali: sono gli splendidi protagonisti delle dieci immagini vincitrici di Wiki Loves Earth Italy 2026, la nona edizione nazionale del concorso fotografico internazionale […] --- https://www.wikimedia.it/news/le-immagini-vincitrici-di-wiki-loves-earth-italy-2026/
-
ItWikiCon 2026: iscrizioni aperte e appuntamenti in programma Si avvicina itWikiCon 2026, il convegno annuale della comunità Wikimedia di lingua italiana, che si terrà da venerdì 6 a domenica 8 novembre a Vezia, vicino […] --- https://www.wikimedia.it/news/itwikicon-2026-iscrizioni-aperte-e-appuntamenti-in-programma/
-
Dalle idee ai progetti, i risultati dell’hackathon Wikimedia a Messina Cosa succede quando i wikimediani incontrano i maker? È quello che abbiamo scoperto durante la terza edizione dell’hackathon italiano di Wikimedia, che abbiamo organizzato a Messina, […] --- https://www.wikimedia.it/news/dalle-idee-ai-progetti-i-risultati-dellhackathon-wikimedia-a-messina/
-
MacOS Extensions pack for the Apple Network Server v1.0 https://lobste.rs/s/7byfjv #retrocomputing #reversing http://oldvcr.blogspot.com/2026/10/macos-extensions-pack-for-apple-network.html
-
Two critical PHP core vulnerabilities enable pre-application RCE with CVSS 9.2. Cloudflare and Amazon confirm active exploitation. When the engine itself is compromised, https://deafnews.it/en/article/php2shell-when-the-engine-becomes-the-target-every-downstream-defense-fails
-
Qualys details BlueHammer (CVE-2026-33825), an eight-stage Windows Defender privilege escalation chain reaching SYSTEM. Same version, different risk: why version https://deafnews.it/en/article/bluehammer-shatters-version-scanning-the-same-defender-can-be-harmless-or-fatal
-
APT41 deploys BlackX UEFI bootkit against Central Asian diplomatic targets in Tajikistan, Uzbekistan and Turkmenistan, using a non-CVE Secure Boot bypass dubbed https://deafnews.it/en/article/apt41-adopts-blacklotus-techniques-blackx-uefi-bootkit-hits-central-asian-diplomats
-
Imperva researchers achieved full remote code execution on an unmodified Node.js Linux arm64 build using crafted Brotli data, moving beyond prior https://deafnews.it/en/article/node2shell-from-compressed-format-to-rce-on-nodejs-demonstrated-on-official-linux-arm64-build
-
OpenSSL CMP format string bug CVE-2026-63073 lets unauthenticated remote attackers crash PKI clients with sender or pinned cert validation. Disclosed after six months of https://deafnews.it/en/article/openssl-cmp-format-string-bug-cve-2026-63073-exposes-pki-clients-to-crash
-
Zimbra CVE-2026-73570: Unauthenticated RCE was actively exploited via Swatchdog log injection for over two weeks before patch disclosure, Microsoft reports. #Cybersecurity #InfoSec https://deafnews.it/en/article/zimbra-cve-2026-73570-unauthenticated-rce-exploited-before-patch
-
Snort 3's VBA inspection engine has a critical flaw: ZDI-26-788/CVE-2026-20218 is a stack-based buffer overflow rated 8.1 RCE, though Cisco calls it DoS. Independent RCE https://deafnews.it/en/article/snort-3-bug-when-the-vba-inspection-engine-becomes-an-attack-vector
-
NVIDIA Megatron Bridge has a HIGH-severity YAML parsing RCE (ZDI-26-787), but there's a catch: the CVE says no user interaction needed, while ZDI says otherwise. We break https://deafnews.it/en/article/nvidia-megatron-bridge-user-interaction-rce-in-model-config-yaml-parsing
-
Critical CVSS 9.8 flaw in Splunk Enterprise's Patroni REST API allows unauthenticated remote code execution for attackers with internal network access. No credentials https://deafnews.it/en/article/cve-2026-76268-unauthenticated-rce-in-splunk-enterprise-patroni-rest-api
-
A critical 12-year-old RCE flaw in Pillow, Python's most popular imaging library, let attackers inject commands through filenames passed to Ghostscript. CVSS 4.0 score: 9.2. Fixed in https://deafnews.it/en/article/pillow-1300-fixes-rce-the-filename-not-the-file-was-the-threat
-
BeyondTrust disclosed a critical Remote Support flaw after Chinese APT Armory Castle exploited it as a zero-day for 47 days, using Sawfly web shell and Bareclaw SOCKS5 tunnel for https://deafnews.it/en/article/beyondtrust-chinese-apt-armory-castle-exploited-zero-day-for-47-days
-
Qualys releases detection tools for compromised eMudhra certificates after eight intermediate CAs were hit by CVE-2026-111943 and CVE-2026-111944, with P-384 keys https://deafnews.it/en/article/emudhra-8-intermediate-cas-compromised-qualys-releases-operational-detection-tools
-
PHP discloses another unpatched RCE flaw just two days after the PHP2Shell emergency, assigning CVE-2026-115560. Same mitigation applies. https://deafnews.it/en/article/php-discloses-new-unpatched-rce-flaw-two-days-after-php2shell-emergency #Cybersecurity #InfoSec
-
Linux cargando mis ganas de no comprar una máquina nueva. 😅 :linux: #Linux #Meme #Foss #OpenSource #PC #Debian #Arch #Ubuntu #SoftwareLibre
-
Dejando por acá mi #ViernesDeEscritoro con Ubuntu :ubuntu: 😉 #Ubuntu #Linux #GNOME #OpenSource #SoftwareLibre #FOSS #Software 🖥️ :linux:
-
Dejando mi #ViernesDeEscritorio con Ubuntu :ubuntu: :linux: #Linux #Ubuntu #OpenSource #FOSS #Software #OS
-
🔥 openSUSE Tumbleweed toma la delantera: kernel 6.18 disponible antes que en Arch Linux 🐧 #openSUSE #Tumbleweed #Linux #OpenSource #FOSS #Arch
-
Dejando mi #ViernesDeEscritorio con #Ubuntu 25.10 :ubuntu: 😉 #Linux #OpenSource #Software #FOSS #SoftwareLibre
-
El logo de Ubuntu parece el icono de Compartir de la Barra de Accesos de Windows 8 🤔 :ubuntu: :windows: #Ubuntu #Windows #Linux
-
Bomba de gasolina en Austria corriendo Ubuntu 18.04 LTS 😮 :ubuntu: #Ubuntu #Linux #OpenSource
-
Dejando mi #ViernesDeEscritorio con la de siempre #Ubuntu 😊 :ubuntu: #Linux #SoftwareLibre #OpenSource