https://plainsec.com/stories/87c6c3b9-5dc6-40aa-966f-2b1157269001/phps-rce-flaw-hinges-on-a-runtime-session-switch PlainSec en 2026-10-26T10:56:37Z PHP's two RCE flaws move to confirmed exploitation https://plainsec.com/it/stories/87c6c3b9-5dc6-40aa-966f-2b1157269001/phps-rce-flaw-hinges-on-a-runtime-session-switch PlainSec it 2026-10-26T10:56:37Z PHP: l'RCE è confermata, ma la prova resta circoscritta https://plainsec.com/stories/b82299c7-2d7a-4fb4-800e-4ae4172ac07d/magento-stores-served-hidden-loaders-despite-clean-scans PlainSec en 2026-10-26T21:20:41Z Magento loaders evade scans on previously infected stores https://plainsec.com/it/stories/b82299c7-2d7a-4fb4-800e-4ae4172ac07d/magento-stores-served-hidden-loaders-despite-clean-scans PlainSec it 2026-10-26T21:20:41Z Il nuovo loader torna in 60 negozi Magento già colpiti https://plainsec.com/stories/667e1407-8321-46ea-9de0-f316384f0167/android-authenticator-flaw-exposed-work-accounts-to-rogue-apps PlainSec en 2026-10-27T08:51:27Z Android Authenticator flaw exposed work accounts to rogue apps https://plainsec.com/it/stories/667e1407-8321-46ea-9de0-f316384f0167/android-authenticator-flaw-exposed-work-accounts-to-rogue-apps PlainSec it 2026-10-27T08:51:27Z Microsoft Authenticator si fidava dell’identità dichiarata dalle app https://plainsec.com/stories/dffb627c-b61a-47d0-b7be-8c40eb0838b5/worm-evades-github-search-and-steals-cpanel-credentials PlainSec en 2026-10-27T02:26:42Z Worm evades GitHub search and steals cPanel credentials https://plainsec.com/it/stories/dffb627c-b61a-47d0-b7be-8c40eb0838b5/worm-evades-github-search-and-steals-cpanel-credentials PlainSec it 2026-10-27T02:26:42Z Il worm aggira la ricerca GitHub e raggiunge i server https://plainsec.com/stories/f98a286e-b2cd-42c2-b9a2-e98188e0bcb5/downloads-file-steers-ai-coding-agent-into-rogue-package PlainSec en 2026-10-26T10:56:37Z Downloads files can persist in Codex and expose Claude tokens https://plainsec.com/it/stories/f98a286e-b2cd-42c2-b9a2-e98188e0bcb5/downloads-file-steers-ai-coding-agent-into-rogue-package PlainSec it 2026-10-26T10:56:37Z Un file in Downloads modifica Codex anche fuori dalla cartella https://plainsec.com/stories/f6edcec2-3596-4862-ba17-e7555a11f038/dahua-easy4ip-leaves-cameras-reachable-behind-firewalls PlainSec en 2026-10-27T08:51:27Z Dahua Easy4IP leaves cameras reachable behind firewalls https://plainsec.com/it/stories/f6edcec2-3596-4862-ba17-e7555a11f038/dahua-easy4ip-leaves-cameras-reachable-behind-firewalls PlainSec it 2026-10-27T08:51:27Z Il firewall non isola le telecamere Dahua raggiungibili via cloud https://plainsec.com/stories/e43a1aeb-11a1-4811-a296-ac22bc5324d1/gheist-plants-secret-dumping-workflows-across-github-repositories PlainSec en 2026-10-25T20:45:49Z Gheist carries GitHub secret theft into private repos and AWS https://plainsec.com/it/stories/e43a1aeb-11a1-4811-a296-ac22bc5324d1/gheist-plants-secret-dumping-workflows-across-github-repositories PlainSec it 2026-10-25T20:45:49Z La barriera pubblica di GitHub lascia esposti repository privati e ruoli AWS https://plainsec.com/stories/d1486d9f-959b-4070-be2e-12ef3129e1f3/apples-october-update-closes-exploited-coregraphics-flaw-on-ios-18 PlainSec en 2026-10-27T02:26:42Z Apple's October update closes exploited CoreGraphics flaw on iOS 18 https://plainsec.com/it/stories/d1486d9f-959b-4070-be2e-12ef3129e1f3/apples-october-update-closes-exploited-coregraphics-flaw-on-ios-18 PlainSec it 2026-10-27T02:26:42Z iOS 18 riceve un mese dopo la patch per una falla sfruttata https://plainsec.com/stories/6a064d7d-67e9-4aa5-b645-e4fcb06c838c/wasmtime-flaws-let-webassembly-escape-sandboxing PlainSec en 2026-10-26T15:32:18Z Wasmtime flaws let WebAssembly escape sandboxing https://plainsec.com/it/stories/6a064d7d-67e9-4aa5-b645-e4fcb06c838c/wasmtime-flaws-let-webassembly-escape-sandboxing PlainSec it 2026-10-26T15:32:18Z Il sandbox di Wasmtime può cedere anche nei prodotti di terzi https://plainsec.com/stories/294cacea-a210-4523-89e9-e8460fe76d10/microsoft-net-fixes-leave-bundled-apps-exposed PlainSec en 2026-10-26T22:56:33Z Microsoft .NET fixes leave bundled apps exposed https://plainsec.com/it/stories/294cacea-a210-4523-89e9-e8460fe76d10/microsoft-net-fixes-leave-bundled-apps-exposed PlainSec it 2026-10-26T22:56:33Z Le patch di .NET non raggiungono da sole app e container https://plainsec.com/stories/34f68489-2a8d-474e-8cc7-34c4109dd063/openai-compaction-flaw-moved-reasoning-between-models PlainSec en 2026-10-27T11:31:47Z OpenAI compaction flaw moved reasoning between models https://plainsec.com/it/stories/34f68489-2a8d-474e-8cc7-34c4109dd063/openai-compaction-flaw-moved-reasoning-between-models PlainSec it 2026-10-27T11:31:47Z La compattazione del contesto può trasportare ragionamento proprietario tra modelli https://plainsec.com/stories/bfdcabfd-ce13-4a9b-b2a0-8d345b65f538/gotenberg-exploit-points-to-a-wider-maintained-toolkit PlainSec en 2026-10-26T21:20:41Z Gotenberg exploit points to a wider maintained toolkit https://plainsec.com/it/stories/bfdcabfd-ce13-4a9b-b2a0-8d345b65f538/gotenberg-exploit-points-to-a-wider-maintained-toolkit PlainSec it 2026-10-26T21:20:41Z Il varco in Gotenberg apre su un toolkit sviluppato da mesi