https://plainsec.com/stories/e43a1aeb-11a1-4811-a296-ac22bc5324d1/gheist-plants-secret-dumping-workflows-across-github-repositories PlainSec en 2026-10-25T20:45:49Z Gheist plants secret-dumping workflows across GitHub repositories https://plainsec.com/it/stories/e43a1aeb-11a1-4811-a296-ac22bc5324d1/gheist-plants-secret-dumping-workflows-across-github-repositories PlainSec it 2026-10-25T20:45:49Z Un token rubato apre ogni repository che può raggiungere https://plainsec.com/stories/f98a286e-b2cd-42c2-b9a2-e98188e0bcb5/downloads-file-steers-ai-coding-agent-into-rogue-package PlainSec en 2026-10-26T10:56:37Z Downloads files can persist in Codex and expose Claude tokens https://plainsec.com/it/stories/f98a286e-b2cd-42c2-b9a2-e98188e0bcb5/downloads-file-steers-ai-coding-agent-into-rogue-package PlainSec it 2026-10-26T10:56:37Z Un file in Downloads modifica Codex anche fuori dalla cartella https://plainsec.com/stories/6a064d7d-67e9-4aa5-b645-e4fcb06c838c/wasmtime-flaws-let-webassembly-escape-sandboxing PlainSec en 2026-10-26T15:32:18Z Wasmtime flaws let WebAssembly escape sandboxing https://plainsec.com/it/stories/6a064d7d-67e9-4aa5-b645-e4fcb06c838c/wasmtime-flaws-let-webassembly-escape-sandboxing PlainSec it 2026-10-26T15:32:18Z Il sandbox di Wasmtime può cedere anche nei prodotti di terzi https://plainsec.com/stories/3e52dbac-55ac-47a9-9104-ec6005b901fd/php-patch-rollout-leaves-most-installations-vulnerable PlainSec en 2026-10-26T15:32:18Z PHP patch rollout leaves most installations vulnerable https://plainsec.com/it/stories/3e52dbac-55ac-47a9-9104-ec6005b901fd/php-patch-rollout-leaves-most-installations-vulnerable PlainSec it 2026-10-26T15:32:18Z Solo 199.000 installazioni PHP aggiornate nelle prime 12 ore https://plainsec.com/stories/87c6c3b9-5dc6-40aa-966f-2b1157269001/phps-rce-flaw-hinges-on-a-runtime-session-switch PlainSec en 2026-10-26T10:56:37Z PHP's RCE flaw hinges on a runtime session switch https://plainsec.com/it/stories/87c6c3b9-5dc6-40aa-966f-2b1157269001/phps-rce-flaw-hinges-on-a-runtime-session-switch PlainSec it 2026-10-26T10:56:37Z La RCE di PHP richiede una configurazione di sessione rara https://plainsec.com/stories/eabd7cc7-d7ea-45eb-8b0d-3e4371e5a653/collabora-backdoors-target-credential-stores-as-vco-flaws-recur PlainSec en 2026-10-25T04:24:02Z Collabora backdoors target credential stores as VCO flaws recur https://plainsec.com/it/stories/eabd7cc7-d7ea-45eb-8b0d-3e4371e5a653/collabora-backdoors-target-credential-stores-as-vco-flaws-recur PlainSec it 2026-10-25T04:24:02Z Server Nextcloud compromessi, Arista VCO alla terza falla sfruttata