Nuovo episodio di HAIP dedicato alle minacce più urgenti di fine agosto 2025. Parliamo delle tre falle critiche in Citrix NetScaler già sfruttate in rete, del problema di default password nei sistemi ABB e della porta di debug aperta nei controller Rockwell. In area arancio ci soffermiamo sui buffer overflow che affliggono i range extender Linksys, sul bug di accesso nei progetti Siemens Polarion ALM e sulle vulnerabilità di backup in PostgreSQL. Chiudiamo con un occhio alle campagne di sfruttamento di vulnerabilità note nei router e al nuovo attacco di clickjacking che colpisce i password manager, con tre consigli pratici da mettere subito in pratica. Note dell’episodio - NetScaler ADC/Gateway: tre vulnerabilità critiche (CVE‑2025‑7775/7776/8424) — ACN — https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-citrix-6?utm_source=chatgpt.com - ABB ASPECT/NEXUS/MATRIX: default password (CVE‑2024‑51555) — VulDB — https://vuldb.com/?id.287013&utm_source=chatgpt.com - Rockwell ControlLogix: porta debug WDB (CVE‑2025‑7353) — Rockwell Advisory — https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1732.html?utm_source=chatgpt.com - Linksys RE range extender: stack overflow multipli (CVE‑2025‑9481/9482/9483/9392/9393) — VulDB — https://vuldb.com/?id.321396&utm_source=chatgpt.com - Siemens Polarion ALM: access control flaw (CVE‑2024‑33647) — CISA — https://www.cisa.gov/news-events/ics-advisories/icsa-24-137-04?utm_source=chatgpt.com - PostgreSQL 17.6/16.10/15.14/14.19/13.22: correzioni CVE‑2025‑8713/8714/8715 — PostgreSQL — https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/?utm_source=chatgpt.com - Campagna di sfruttamento di vulnerabilità note nei router — ACN — https://www.acn.gov.it/portale/w/rilevata-campagna-di-sfruttamento-vulnerabilita-note?utm_source=chatgpt.com - DOM-based extension clickjacking: attacco ai password manager — The Hacker News — https://thehackernews.com/2025/08/dom-based-extension-clickjacking.html?utm_source=chatgpt.com

Adaptiva's latest report on patch management highlights critical gaps in autonomous patching maturity despite increased automation. It offers insights into how enterprises can bridge these gaps to enhance their cybersecurity.

Absolute Security has been recognized in the latest GigaOm Radar for Patch Management Solutions as both a Leader and Outperformer, showcasing its innovative solutions.

Adaptiva has been awarded the 2025 CyberSecurity Breakthrough Award for its innovative patch management solution, OneSite Patch, marking its second consecutive win in this category.

SecPod’s SanerNow has been proudly named a Leader and Outperformer in GigaOm’s 2024 Patch Management report, showcasing its exceptional capabilities.

SecPod's flagship product SanerNow has been honored as a leader in the GigaOm Radar for Patch Management 2024, highlighting its innovation and effectiveness.

SecPod's SanerNow has been recognized as a Leader and Outperformer in the 2024 GigaOm Radar for its innovative patch management capabilities, setting a new standard in cybersecurity.

Adaptiva's latest report highlights how automation is becoming increasingly essential in patch management, addressing the challenges faced by IT and security teams.

Action1 unleashes its patch management tools for free, empowering users from nonprofits to individuals, boosting digital security for everyone.