UptimeMag

News

WordPress Core: patch per vulnerabilità critica di path traversal non autenticataNews

WordPress Core: critical unauthenticated path traversal patch

Wordfence reports a critical unauthenticated flaw in WordPress Core that can lead to local file inclusion and, in some cases, RCE. Immediate update required.

Wordfence scopre malware WordPress nascosto come plugin must-useNews

Wordfence uncovers WordPress malware concealed as must-use plugin

Wordfence reveals malware installed as a must-use plugin on WordPress, featuring mechanisms to survive removal attempts.

Grafana 13.2: policy di notifica multiple per instradare gli alert senza un unico albero globaleNews

Grafana 13.2: Multiple notification policies to route alerts without a single global tree

From Grafana 13.2 onwards, each team can have its own notification policy tree, managed and assigned independently from the rest.

LiteSpeed Cache per WordPress: patch per XSS CVE-2026-76579, aggiornare a 7.9.1News

LiteSpeed Cache for WordPress: XSS patch CVE-2026-76579, upgrade to 7.9.1

LiteSpeed has patched an XSS vulnerability in the LiteSpeed Cache for WordPress plugin. Upgrade to version 7.9.1 or later.

Wordfence Argus scopre vulnerabilità critica in libheif, la libreria che apre le foto iPhone sui serverNews

Wordfence Argus discovers critical libheif vulnerability affecting iPhone photo processing on servers

Wordfence Argus identifies a CVSS 9.8 flaw in libheif, used to process HEIC images. Code execution demonstrated on a live WordPress deployment.

Tutor LMS: PHP Object Injection porta a RCE, oltre 100.000 siti a rischioNews

Tutor LMS: PHP Object Injection leads to RCE, over 100,000 sites at risk

Wordfence Argus discovers PHP Object Injection in Tutor LMS: attackers with subscriber account access can execute remote code. Update to 4.0.8.

Bunny.net: Burrow Smart Routing in GA, 50 GB inclusi poi 0,06 $/GBNews

Bunny.net: Burrow Smart Routing in GA, 50 GB included then $0.06/GB

Bunny.net releases Burrow dynamic routing to general availability on Optimizer: 50 GB/month included, then $0.06/GB from 17 October 2026.

Let's Encrypt racconta come ha costruito il suo data warehouse con ClickHouseNews

Let's Encrypt built its data warehouse with ClickHouse

Let's Encrypt replaced log search scripts and SaaS with a self-hosted ClickHouse cluster, cutting public statistics computation from hours to 10 seconds.

Wordfence 9 aggiunge il login con passkey, gratuito per tutti gli utentiNews

Wordfence 9 adds passkey login, free for all users

Wordfence 9 introduces passkey authentication for WordPress login, eliminating the need for passwords across all user accounts.

Grafana Cloud collega Session Replay e check sintetici per il Digital Experience MonitoringNews

Grafana Cloud links Session Replay and synthetic checks for Digital Experience Monitoring

Grafana Cloud unifies Frontend Observability and Synthetic Monitoring: from a failed check to session replay in just a few clicks.

CVE-2026-72389: falla nel bridge del kernel porta a root su CloudLinux 7h e 8News

CVE-2026-72389: kernel bridge flaw grants root on CloudLinux 7h and 8

Kernel Linux bridge STP bug gives root to local user. On CloudLinux 7h, 8 and 8 LTS it is exploitable from a normal hosting account.

CloudLinux cambia chiave di firma pacchetti: scadenza il 1° dicembre 2026News

CloudLinux changes package signature key: deadline 1 December 2026

From 1 December 2026, CloudLinux signs packages only with the new GPG key. Those running obsolete cloudlinux-release must update beforehand, or they will stop receiving updates.

Grafana Cloud: le label custom di Synthetic Monitoring cambiano schemaNews

Grafana Cloud: Synthetic Monitoring custom labels change schema

Grafana Labs removes the label_ prefix and attaches custom labels to all check metrics. Migration recommended by 1 March 2027.

NGINX 1.31.5: i "predicate locations" instradano il traffico API su qualsiasi variabileNews

NGINX 1.31.5: "Predicate locations" route API traffic on any variable

NGINX 1.31.5 introduces variable-based location blocks: route traffic on headers, methods or JSON fields without external scripts.

CloudLinux e WebPros lanciano il sondaggio Industry Year in Review 2027News

CloudLinux and WebPros launch 2027 Industry Year in Review survey

CloudLinux and WebPros open annual hosting provider survey: 2026 data on revenue, churn, AI and support. Closes 16 October 2026.

NGINX Gateway Fabric 2.7: conformità Gateway API 1.6 e autenticazione esternaNews

NGINX Gateway Fabric 2.7: Gateway API 1.6 compliance and external auth

NGINX Gateway Fabric 2.7 promotes TCPRoute and UDPRoute to v1, adds HTTPExternalAuthFilter and moves seven settings out of snippets.

NGINX Ingress Controller 5.6: HSTS nativo e avvio da 107 a 6 secondiNews

NGINX Ingress Controller 5.6: native HSTS, startup in 6 seconds

The release moves HSTS out of snippets, speeds up startup on large clusters and fixes non-TLS secret rotation.

NGINX 1.31.5: arriva la Control API open source, più fix su FastCGI, QUIC e HTTP/2News

NGINX 1.31.5: open-source Control API arrives, plus FastCGI, QUIC and HTTP/2 fixes

NGINX 1.31.5 brings the Control API from NGINX Plus into the open-source core and fixes bugs affecting FastCGI, uWSGI, memcached, the slice filter, QUIC and HTTP/2.

Bunny.net rilascia il client ufficiale per Bunny Database basato su fetchNews

Bunny.net releases official fetch-based client for Bunny Database

Bunny.net publishes @bunny.net/database-client, a zero-dependency SQL library for querying Bunny Database from Edge Scripting, Node, Deno and Bun.

Bunny.net porta la gestione di Bunny Storage nella CLI ufficialeNews

Bunny.net brings Bunny Storage management to official CLI

Bunny.net adds Bunny Storage to its CLI in public preview: Storage Zones, Pull Zones and S3 credentials from the terminal.