https://plainsec.com/stories/0dab0b95-bb2f-4aef-940c-763d606951a5/php2shell-pocs-leave-real-world-exploitability-uncertain PlainSec en 2026-10-26T10:56:37Z PHP2Shell flaws are now exploited in the wild https://plainsec.com/it/stories/0dab0b95-bb2f-4aef-940c-763d606951a5/php2shell-pocs-leave-real-world-exploitability-uncertain PlainSec it 2026-10-26T10:56:37Z I dubbi sui PoC cedono agli attacchi reali contro PHP https://plainsec.com/stories/e43a1aeb-11a1-4811-a296-ac22bc5324d1/gheist-plants-secret-dumping-workflows-across-github-repositories PlainSec en 2026-10-25T20:45:49Z Gheist plants secret-dumping workflows across GitHub repositories https://plainsec.com/it/stories/e43a1aeb-11a1-4811-a296-ac22bc5324d1/gheist-plants-secret-dumping-workflows-across-github-repositories PlainSec it 2026-10-25T20:45:49Z Un token rubato apre ogni repository che può raggiungere https://plainsec.com/stories/f98a286e-b2cd-42c2-b9a2-e98188e0bcb5/downloads-file-steers-ai-coding-agent-into-rogue-package PlainSec en 2026-10-26T10:56:37Z Downloads file steers AI coding agent into rogue package https://plainsec.com/it/stories/f98a286e-b2cd-42c2-b9a2-e98188e0bcb5/downloads-file-steers-ai-coding-agent-into-rogue-package PlainSec it 2026-10-26T10:56:37Z Un file locale può spingere l'agente AI a installare un pacchetto ostile https://plainsec.com/stories/87c6c3b9-5dc6-40aa-966f-2b1157269001/phps-rce-flaw-hinges-on-a-runtime-session-switch PlainSec en 2026-10-26T10:56:37Z PHP's RCE flaw hinges on a runtime session switch https://plainsec.com/it/stories/87c6c3b9-5dc6-40aa-966f-2b1157269001/phps-rce-flaw-hinges-on-a-runtime-session-switch PlainSec it 2026-10-26T10:56:37Z La RCE di PHP richiede una configurazione di sessione rara https://plainsec.com/stories/eabd7cc7-d7ea-45eb-8b0d-3e4371e5a653/collabora-backdoors-target-credential-stores-as-vco-flaws-recur PlainSec en 2026-10-25T04:24:02Z Collabora backdoors target credential stores as VCO flaws recur https://plainsec.com/it/stories/eabd7cc7-d7ea-45eb-8b0d-3e4371e5a653/collabora-backdoors-target-credential-stores-as-vco-flaws-recur PlainSec it 2026-10-25T04:24:02Z Server Nextcloud compromessi, Arista VCO alla terza falla sfruttata