https://plainsec.com/stories/bc128256-93f2-45fd-b77e-fbbce184e319/russian-linked-hackers-exploit-routine-ios-and-android-browsing PlainSec en 2026-11-04T10:24:24Z APT29's Plerdy tracker compromise reached hundreds of sites https://plainsec.com/it/stories/bc128256-93f2-45fd-b77e-fbbce184e319/russian-linked-hackers-exploit-routine-ios-and-android-browsing PlainSec it 2026-11-04T10:24:24Z Un tracker compromesso ha trasformato centinaia di siti in esche https://plainsec.com/stories/f8f30896-3f5a-4a04-af06-bd57eac13e16/zyxel-switch-schwachstelle-erm-glicht-codeausf-hrung PlainSec en 2026-11-05T04:21:35Z Zyxel GS1900 Patch 2 missed the exploited flaw https://plainsec.com/it/stories/f8f30896-3f5a-4a04-af06-bd57eac13e16/zyxel-switch-schwachstelle-erm-glicht-codeausf-hrung PlainSec it 2026-11-05T04:21:35Z La Patch 2 Zyxel lasciava aperto l’exploit sui GS1900 https://plainsec.com/stories/2d650e4e-3dff-4f25-a7fd-b3a93d3cbb40/storm-2603s-sharepoint-foothold-hid-in-iis-memory PlainSec en 2026-11-05T14:28:50Z Storm-2603's SharePoint foothold hid in IIS memory https://plainsec.com/it/stories/2d650e4e-3dff-4f25-a7fd-b3a93d3cbb40/storm-2603s-sharepoint-foothold-hid-in-iis-memory PlainSec it 2026-11-05T14:28:50Z Il controllo su SharePoint resta nascosto nella memoria del server https://plainsec.com/stories/e4a08975-e167-4e24-81f7-4d5315d92881/trojanized-cwp-server-spreads-a-linux-backdoor PlainSec en 2026-11-06T06:22:41Z Trojanized CWP server spreads a Linux backdoor https://plainsec.com/it/stories/e4a08975-e167-4e24-81f7-4d5315d92881/trojanized-cwp-server-spreads-a-linux-backdoor PlainSec it 2026-11-06T06:22:41Z Il backdoor arriva dal server, anche senza pannello esposto https://plainsec.com/stories/f83ea6cf-1e6b-49c3-b241-af978ae638cf/proxy-services-made-white-house-addresses-rentable PlainSec en 2026-11-05T22:27:10Z Proxy traffic puts Executive Office IP attribution in doubt https://plainsec.com/it/stories/f83ea6cf-1e6b-49c3-b241-af978ae638cf/proxy-services-made-white-house-addresses-rentable PlainSec it 2026-11-05T22:27:10Z Gli IP della Casa Bianca diventano copertura per traffico a noleggio https://plainsec.com/stories/e9709a86-7886-4940-b72e-c654a99bc34b/supplier-attack-altered-blood-service-cold-rooms-at-three-sites PlainSec en 2026-11-04T18:31:58Z Supplier attack altered blood-service cold rooms at three sites https://plainsec.com/it/stories/e9709a86-7886-4940-b72e-c654a99bc34b/supplier-attack-altered-blood-service-cold-rooms-at-three-sites PlainSec it 2026-11-04T18:31:58Z Un attacco al fornitore altera il freddo del sangue in tre sedi https://plainsec.com/stories/24c3e2cc-b145-4f1f-9f14-2928c60759d5/chatgpt-previews-opened-a-route-to-data-theft-and-phishing PlainSec en 2026-11-05T18:34:48Z ChatGPT previews opened a route to data theft and phishing https://plainsec.com/it/stories/24c3e2cc-b145-4f1f-9f14-2928c60759d5/chatgpt-previews-opened-a-route-to-data-theft-and-phishing PlainSec it 2026-11-05T18:34:48Z Un’anteprima HTML aggira Lockdown Mode e apre la porta al phishing https://plainsec.com/stories/8ddda1c3-d541-46ef-b5ee-210b742f1484/ghostmap-can-crash-pixel-10-before-an-app-runs PlainSec en 2026-11-05T14:28:50Z GhostMap can crash Pixel 10 before an app runs https://plainsec.com/it/stories/8ddda1c3-d541-46ef-b5ee-210b742f1484/ghostmap-can-crash-pixel-10-before-an-app-runs PlainSec it 2026-11-05T14:28:50Z Un APK installato può mandare il Pixel 10 in crash loop https://plainsec.com/stories/8d5bbad6-56ba-4aa4-bd96-63d28a709f4a/gpt-6-astra-quietly-underperformed-on-safety-research-tasks PlainSec en 2026-11-06T04:23:06Z GPT-6 Cyber’s bug haul meets Astra’s silent restraint https://plainsec.com/it/stories/8d5bbad6-56ba-4aa4-bd96-63d28a709f4a/gpt-6-astra-quietly-underperformed-on-safety-research-tasks PlainSec it 2026-11-06T04:23:06Z Le vulnerabilità arrivano più in fretta delle patch https://plainsec.com/stories/abc68e62-d789-402b-88b5-7cb70a7cc5a7/vapor-panda-coordinated-parallel-intrusions-across-14-countries PlainSec en 2026-11-05T14:28:50Z VAPOR PANDA coordinated parallel intrusions across 14 countries https://plainsec.com/it/stories/abc68e62-d789-402b-88b5-7cb70a7cc5a7/vapor-panda-coordinated-parallel-intrusions-across-14-countries PlainSec it 2026-11-05T14:28:50Z Un solo controller, intrusioni in 14 paesi e nove compromissioni confermate https://plainsec.com/stories/04e4e0ec-bf4f-4d65-b297-33f3aee32886/alpine-ssh-flaw-lets-attackers-into-passwordless-accounts PlainSec en 2026-11-05T22:27:10Z OpenSSH fixes musl flaw exposing passwordless accounts https://plainsec.com/it/stories/04e4e0ec-bf4f-4d65-b297-33f3aee32886/alpine-ssh-flaw-lets-attackers-into-passwordless-accounts PlainSec it 2026-11-05T22:27:10Z Gli account SSH senza password possono diventare una porta d'accesso https://plainsec.com/stories/dc4fb6a2-7809-437c-af13-bb0eaf4ba965/barracuda-flaws-make-reachable-admin-interfaces-a-root-path PlainSec en 2026-11-04T08:24:45Z Barracuda flaws make reachable admin interfaces a root path https://plainsec.com/it/stories/dc4fb6a2-7809-437c-af13-bb0eaf4ba965/barracuda-flaws-make-reachable-admin-interfaces-a-root-path PlainSec it 2026-11-04T08:24:45Z Un'interfaccia esposta può trasformare gli appliance Barracuda in accesso root https://plainsec.com/stories/5b47b0e6-b2e6-4205-820a-821428aeb0d0/fortinet-exploit-adds-13-payloads-for-account-creation-and-persistence PlainSec en 2026-11-05T14:28:50Z Fortinet exploit adds 13 payloads for account creation and persistence https://plainsec.com/it/stories/5b47b0e6-b2e6-4205-820a-821428aeb0d0/fortinet-exploit-adds-13-payloads-for-account-creation-and-persistence PlainSec it 2026-11-05T14:28:50Z Il PoC per FortiOS ora prepara anche la persistenza https://plainsec.com/stories/8581bf0d-257e-4bc2-92d4-dc95b87953c5/crafty-falcon-targets-finance-as-artex-backdoor-exposes-consoles PlainSec en 2026-11-05T12:39:27Z Crafty Falcon targets finance as ARTEX backdoor exposes consoles https://plainsec.com/it/stories/8581bf0d-257e-4bc2-92d4-dc95b87953c5/crafty-falcon-targets-finance-as-artex-backdoor-exposes-consoles PlainSec it 2026-11-05T12:39:27Z Attacchi alla finanza indiana e 62 console ARTEX esposte a root https://plainsec.com/stories/c43b6372-4b93-45f3-8fde-f977055730d2/norad-breach-leaves-high-risk-users-exposure-uncertain PlainSec en 2026-11-05T14:28:50Z Norad breach leaves high-risk users' exposure uncertain https://plainsec.com/it/stories/c43b6372-4b93-45f3-8fde-f977055730d2/norad-breach-leaves-high-risk-users-exposure-uncertain PlainSec it 2026-11-05T14:28:50Z Norad non sa se il furto espone persone in aree di conflitto https://plainsec.com/stories/e3dbd0be-dcfc-43c0-bf13-480cfc44beb8/rootevidence-scanner-probes-an-older-cisco-ios-flaw PlainSec en 2026-11-06T04:23:06Z RootEvidence scanner probes an older Cisco IOS flaw https://plainsec.com/it/stories/e3dbd0be-dcfc-43c0-bf13-480cfc44beb8/rootevidence-scanner-probes-an-older-cisco-ios-flaw PlainSec it 2026-11-06T04:23:06Z Una richiesta a Cisco IOS non prova una compromissione https://plainsec.com/stories/61216e96-f24a-4f3a-8abf-1ffcf4c715e6/wordpress-upgrade-window-opens-a-path-to-server-code PlainSec en 2026-11-04T10:24:24Z WordPress upgrade window opens a path to server code https://plainsec.com/it/stories/61216e96-f24a-4f3a-8abf-1ffcf4c715e6/wordpress-upgrade-window-opens-a-path-to-server-code PlainSec it 2026-11-04T10:24:24Z La finestra d’aggiornamento espone WordPress a codice non autorizzato https://plainsec.com/stories/c930c1f0-0313-4b6d-8c6a-dee6b10164c0/slippynunchucks-uses-sogou-to-deliver-darkvigil PlainSec en 2026-11-04T14:37:56Z SlippyNunchucks uses Sogou to deliver DarkVigil https://plainsec.com/it/stories/c930c1f0-0313-4b6d-8c6a-dee6b10164c0/slippynunchucks-uses-sogou-to-deliver-darkvigil PlainSec it 2026-11-04T14:37:56Z Da QuickFox a Sogou, SlippyNunchucks amplia la diffusione di DarkVigil https://plainsec.com/stories/2956859a-4cc8-4a66-9d66-ee57e936e8d4/rails-upload-flaw-can-expose-secrets-beyond-the-server PlainSec en 2026-11-05T02:23:02Z Rails upload flaw can expose secrets beyond the server https://plainsec.com/it/stories/2956859a-4cc8-4a66-9d66-ee57e936e8d4/rails-upload-flaw-can-expose-secrets-beyond-the-server PlainSec it 2026-11-05T02:23:02Z Un upload anonimo può esporre i segreti delle app Rails https://plainsec.com/stories/247d4595-067c-430c-8430-8e80a1f01f38/m-ltiples-vulnerabilidades-en-fabric-composer-de-hpe PlainSec en 2026-11-04T14:37:56Z HPE Fabric Composer flaws expose admin access and code execution https://plainsec.com/it/stories/247d4595-067c-430c-8430-8e80a1f01f38/m-ltiples-vulnerabilidades-en-fabric-composer-de-hpe PlainSec it 2026-11-04T14:37:56Z Accesso amministrativo remoto e codice senza login in HPE Fabric Composer https://plainsec.com/stories/1c19974d-34ae-4bdd-b7db-90321bb3aa21/dameware-update-covers-flaws-beyond-its-own-code PlainSec en 2026-11-04T14:37:56Z Dameware update covers flaws beyond its own code https://plainsec.com/it/stories/1c19974d-34ae-4bdd-b7db-90321bb3aa21/dameware-update-covers-flaws-beyond-its-own-code PlainSec it 2026-11-04T14:37:56Z La patch di Dameware corregge anche falle nei componenti esterni https://plainsec.com/stories/f341b0ca-6c80-4b6b-a335-b25d1fac611b/cooling-system-attacks-put-food-and-blood-supplies-at-risk PlainSec en 2026-11-06T00:22:49Z Cooling-system attacks put food and blood supplies at risk https://plainsec.com/it/stories/f341b0ca-6c80-4b6b-a335-b25d1fac611b/cooling-system-attacks-put-food-and-blood-supplies-at-risk PlainSec it 2026-11-06T00:22:49Z Un accesso remoto può trasformare i frigoriferi in un rischio fisico https://plainsec.com/stories/492ab2af-c0a6-4ac4-acd9-582a6edcbd2c/microsoft-finds-fake-installers-monetizing-devices-three-ways PlainSec en 2026-11-04T20:22:25Z Microsoft finds fake installers monetizing devices three ways https://plainsec.com/it/stories/492ab2af-c0a6-4ac4-acd9-582a6edcbd2c/microsoft-finds-fake-installers-monetizing-devices-three-ways PlainSec it 2026-11-04T20:22:25Z Un solo download può trasformare il PC in un relay di traffico https://plainsec.com/stories/3f50741f-e066-4699-a7d6-7c0b4ca82213/apt29-used-analytics-code-to-reach-hundreds-of-sites PlainSec en 2026-11-04T16:30:46Z APT29 used analytics code to reach hundreds of sites https://plainsec.com/it/stories/3f50741f-e066-4699-a7d6-7c0b4ca82213/apt29-used-analytics-code-to-reach-hundreds-of-sites PlainSec it 2026-11-04T16:30:46Z Un fornitore compromesso porta exploit su centinaia di siti legittimi https://plainsec.com/stories/774fdc5f-8d14-4750-b7f3-56f6ba19e3bc/brotli-flaw-leaves-three-unicon-products-exposed PlainSec en 2026-11-04T14:37:56Z Brotli flaw leaves three Unicon products exposed https://plainsec.com/it/stories/774fdc5f-8d14-4750-b7f3-56f6ba19e3bc/brotli-flaw-leaves-three-unicon-products-exposed PlainSec it 2026-11-04T14:37:56Z Una falla Brotli coinvolge tre componenti Unicon, non solo Scout https://plainsec.com/stories/9a6839c9-79d6-4eb5-a505-c64e366249a6/google-calendar-lures-steal-sessions-despite-mfa PlainSec en 2026-11-05T04:21:35Z Google Calendar lures steal sessions despite MFA https://plainsec.com/it/stories/9a6839c9-79d6-4eb5-a505-c64e366249a6/google-calendar-lures-steal-sessions-despite-mfa PlainSec it 2026-11-05T04:21:35Z L’MFA approvata non ferma il furto delle sessioni Google https://plainsec.com/stories/7472237f-449f-4a76-be7c-d20632946954/apt-retries-can-turn-downloads-into-root-access PlainSec en 2026-11-05T10:25:08Z APT retries can turn downloads into root access https://plainsec.com/it/stories/7472237f-449f-4a76-be7c-d20632946954/apt-retries-can-turn-downloads-into-root-access PlainSec it 2026-11-05T10:25:08Z Il retry di APT può consegnare privilegi root a un pacchetto falso https://plainsec.com/stories/c8f9bbe5-3f1e-4f10-97cf-8637520df8b1/crowdstrike-puts-falcon-inside-cowork-s-execution-blind-spot PlainSec en 2026-11-05T00:24:20Z CrowdStrike pairs AI testing with Falcon agent monitoring https://plainsec.com/it/stories/c8f9bbe5-3f1e-4f10-97cf-8637520df8b1/crowdstrike-puts-falcon-inside-cowork-s-execution-blind-spot PlainSec it 2026-11-05T00:24:20Z Falcon punta a seguire gli agenti AI dal test all’esercizio https://plainsec.com/stories/c8e527d6-8285-4db8-aef8-0ef3a1c43436/dreamhost-breach-reaches-beyond-hosted-files PlainSec en 2026-11-04T22:28:29Z DreamHost breach reaches beyond hosted files https://plainsec.com/it/stories/c8e527d6-8285-4db8-aef8-0ef3a1c43436/dreamhost-breach-reaches-beyond-hosted-files PlainSec it 2026-11-04T22:28:29Z Le credenziali rubate a DreamHost valgono oltre il File Manager https://plainsec.com/stories/54f48169-48dd-4b72-ae09-8b5b49bb3139/end-of-life-eol-sonicwall-gms-multiple-vulnerabilities PlainSec en 2026-11-04T18:31:58Z SonicWall GMS stays unpatched as Cisco, WatchGuard ship fixes https://plainsec.com/it/stories/54f48169-48dd-4b72-ae09-8b5b49bb3139/end-of-life-eol-sonicwall-gms-multiple-vulnerabilities PlainSec it 2026-11-04T18:31:58Z Le patch arrivano, ma SonicWall GMS resta senza rimedio https://plainsec.com/stories/b0b5a815-c5ad-4947-aa45-caa580902b63/university-supercomputers-served-as-mining-targets-and-pivots PlainSec en 2026-11-04T16:30:46Z University supercomputer case advances into U.S. prosecution https://plainsec.com/it/stories/b0b5a815-c5ad-4947-aa45-caa580902b63/university-supercomputers-served-as-mining-targets-and-pivots PlainSec it 2026-11-04T16:30:46Z I supercomputer universitari erano miniere e copertura per gli intrusi https://plainsec.com/stories/614df295-1730-44d8-93d4-8b7d86b3a6a0/rsync-3-5-2-closes-unauthenticated-cpu-exhaustion-flaw PlainSec en 2026-11-04T08:24:45Z rsync 3.5.2 closes unauthenticated CPU exhaustion flaw https://plainsec.com/it/stories/614df295-1730-44d8-93d4-8b7d86b3a6a0/rsync-3-5-2-closes-unauthenticated-cpu-exhaustion-flaw PlainSec it 2026-11-04T08:24:45Z Pochi client senza account possono saturare la CPU dei server rsync