https://plainsec.com/stories/5cf1254a-9efa-4b70-9d0c-1a6dcd76b10f/cryptopayment-gateway-flaw-exposes-stored-wallet-keys PlainSec en 2026-11-03T06:25:17Z CryptoPayment Gateway flaw exposes stored wallet keys https://plainsec.com/it/stories/5cf1254a-9efa-4b70-9d0c-1a6dcd76b10f/cryptopayment-gateway-flaw-exposes-stored-wallet-keys PlainSec it 2026-11-03T06:25:17Z Le chiavi dei wallet restano esposte dopo la rimozione del plugin https://plainsec.com/stories/67d59d47-5f41-4a29-a9f4-882c6d487c6a/cpguard-update-hijack-left-linux-server-credentials-exposed PlainSec en 2026-11-03T18:31:50Z cPGuard update hijack left Linux server credentials exposed https://plainsec.com/it/stories/67d59d47-5f41-4a29-a9f4-882c6d487c6a/cpguard-update-hijack-left-linux-server-credentials-exposed PlainSec it 2026-11-03T18:31:50Z Il canale fidato di cPGuard ha portato una backdoor sui server Linux https://plainsec.com/stories/37ddf9c2-6124-4c82-b031-75248e975da2/stolen-llm-keys-can-expand-access-and-fund-cheap-ai PlainSec en 2026-11-02T18:27:42Z Stolen LLM keys now fund a resale service https://plainsec.com/it/stories/37ddf9c2-6124-4c82-b031-75248e975da2/stolen-llm-keys-can-expand-access-and-fund-cheap-ai PlainSec it 2026-11-02T18:27:42Z Le chiavi AI rubate alimentano un mercato da quasi un milione https://plainsec.com/stories/18ffd167-9c4c-4c33-85e5-b55c17d7d55f/european-freezer-attacks-spoil-stock-across-six-countries PlainSec en 2026-11-02T16:28:16Z European freezer attacks spoil stock in more than 115 stores https://plainsec.com/it/stories/18ffd167-9c4c-4c33-85e5-b55c17d7d55f/european-freezer-attacks-spoil-stock-across-six-countries PlainSec it 2026-11-02T16:28:16Z Oltre 115 negozi perdono scorte per controlli remoti violati https://plainsec.com/stories/36769b02-f3b5-4468-97b9-0ebd85666797/videostrong-built-xcpe-into-set-top-boxes-for-profit PlainSec en 2026-11-02T22:26:40Z XCPE takedown cuts affiliate control, leaves backdoors https://plainsec.com/it/stories/36769b02-f3b5-4468-97b9-0ebd85666797/videostrong-built-xcpe-into-set-top-boxes-for-profit PlainSec it 2026-11-02T22:26:40Z Il takedown XCPE taglia il controllo criminale su altri 10 milioni di dispositivi https://plainsec.com/stories/71670d6b-416f-498c-b5bb-f687d3901025/outdated-btcpay-server-instances-face-hot-wallet-theft PlainSec en 2026-11-03T10:29:03Z Outdated BTCPay Server instances face hot-wallet theft https://plainsec.com/it/stories/71670d6b-416f-498c-b5bb-f687d3901025/outdated-btcpay-server-instances-face-hot-wallet-theft PlainSec it 2026-11-03T10:29:03Z Le istanze obsolete di BTCPay Server espongono i fondi degli hot wallet https://plainsec.com/stories/2d3fcc61-2359-41a3-85c3-fdb4ffea1f7f/active-gitlab-rce-attacks-put-hosted-code-at-risk PlainSec en 2026-11-02T16:28:16Z Active GitLab RCE attacks put hosted code at risk https://plainsec.com/it/stories/2d3fcc61-2359-41a3-85c3-fdb4ffea1f7f/active-gitlab-rce-attacks-put-hosted-code-at-risk PlainSec it 2026-11-02T16:28:16Z Oltre 1.000 server GitLab esposti restano vulnerabili a RCE https://plainsec.com/stories/8f538896-99fe-46c8-9af2-e2e45f3cd8bd/langflow-mcp-flaw-exposes-servers-to-code-execution PlainSec en 2026-11-02T14:39:31Z Langflow MCP flaw exposes servers to code execution https://plainsec.com/it/stories/8f538896-99fe-46c8-9af2-e2e45f3cd8bd/langflow-mcp-flaw-exposes-servers-to-code-execution PlainSec it 2026-11-02T14:39:31Z Langflow espone i server all’RCE attraverso l’integrazione MCP https://plainsec.com/stories/7309dee4-e883-4c58-9861-efeff5ba2318/bitter-s-native-tool-chain-slips-past-malware-only-hunts PlainSec en 2026-11-02T16:28:16Z BITTER’s native-tool chain slips past malware-only hunts https://plainsec.com/it/stories/7309dee4-e883-4c58-9861-efeff5ba2318/bitter-s-native-tool-chain-slips-past-malware-only-hunts PlainSec it 2026-11-02T16:28:16Z Una catena di BITTER sfugge alla caccia ai malware binari https://plainsec.com/stories/bbd03798-2faf-47a5-8db7-e53977d89fef/gorbag-s-winrar-lures-conceal-credential-theft PlainSec en 2026-11-03T14:32:15Z Gorbag shifts to WinRAR archives for quick credential theft https://plainsec.com/it/stories/bbd03798-2faf-47a5-8db7-e53977d89fef/gorbag-s-winrar-lures-conceal-credential-theft PlainSec it 2026-11-03T14:32:15Z Una falla già usata da RomCom apre la nuova fase di Gorbag https://plainsec.com/stories/a56aa7bd-16ec-4abe-9b28-ca17adbbd5f3/c3rb3r-ransomware-surge-puts-synology-nas-files-at-risk PlainSec en 2026-11-03T08:24:16Z Synology ransomware targets outdated DSM as flaw remains unknown https://plainsec.com/it/stories/a56aa7bd-16ec-4abe-9b28-ca17adbbd5f3/c3rb3r-ransomware-surge-puts-synology-nas-files-at-risk PlainSec it 2026-11-03T08:24:16Z Il ransomware colpisce i NAS Synology, ma la falla resta da identificare https://plainsec.com/stories/c7a24f05-f34b-4201-b6a8-a0ab5eef3489/brotli-flaw-leaves-bundled-runtimes-exposed-after-patching PlainSec en 2026-11-03T08:24:16Z Brotli flaw leaves bundled runtimes exposed after patching https://plainsec.com/it/stories/c7a24f05-f34b-4201-b6a8-a0ab5eef3489/brotli-flaw-leaves-bundled-runtimes-exposed-after-patching PlainSec it 2026-11-03T08:24:16Z La patch al sistema non basta: Brotli resta nei runtime https://plainsec.com/stories/fa44db28-8876-4ce2-9d15-38168f621c50/volt-typhoon-s-relay-chains-conceal-reach-into-control-systems PlainSec en 2026-11-02T10:22:01Z Volt Typhoon’s relay chains conceal reach into control systems https://plainsec.com/it/stories/fa44db28-8876-4ce2-9d15-38168f621c50/volt-typhoon-s-relay-chains-conceal-reach-into-control-systems PlainSec it 2026-11-02T10:22:01Z I sistemi di gestione diventano il ponte di Volt Typhoon https://plainsec.com/stories/de16bdae-8a9e-4935-a6dc-57817b7a1453/node-red-flaw-exposes-siemens-iot2050-to-command-execution PlainSec en 2026-11-02T18:27:42Z Node-RED flaw exposes Siemens IoT2050 to command execution https://plainsec.com/it/stories/de16bdae-8a9e-4935-a6dc-57817b7a1453/node-red-flaw-exposes-siemens-iot2050-to-command-execution PlainSec it 2026-11-02T18:27:42Z Una falla in Node-RED apre il SIMATIC IoT2050 a comandi anonimi https://plainsec.com/stories/cbead4cb-c265-4fca-bf28-fb77be000f43/fortinet-flags-linux-kernel-remote-code-execution-flaw PlainSec en 2026-11-02T20:31:28Z Fortinet flags Linux kernel remote-code-execution flaw https://plainsec.com/it/stories/cbead4cb-c265-4fca-bf28-fb77be000f43/fortinet-flags-linux-kernel-remote-code-execution-flaw PlainSec it 2026-11-02T20:31:28Z La RCE nel kernel Linux resta senza perimetro definito https://plainsec.com/stories/ac5145dd-4ada-4a33-b3af-ad129f452b6a/3am-ransomware-crossed-school-domains-from-an-unmanaged-host PlainSec en 2026-11-03T16:35:49Z 3AM ransomware crossed school domains from an unmanaged host https://plainsec.com/it/stories/ac5145dd-4ada-4a33-b3af-ad129f452b6a/3am-ransomware-crossed-school-domains-from-an-unmanaged-host PlainSec it 2026-11-03T16:35:49Z Un host non gestito apre la strada al ransomware tra scuole https://plainsec.com/stories/cd8e056c-be0a-42f8-92bd-ab3e8cfcbd7d/apple-spyware-alerts-reach-99-countries-leave-attribution-open PlainSec en 2026-11-02T18:27:42Z Apple spyware alerts span 99 countries, operators remain unknown https://plainsec.com/it/stories/cd8e056c-be0a-42f8-92bd-ab3e8cfcbd7d/apple-spyware-alerts-reach-99-countries-leave-attribution-open PlainSec it 2026-11-02T18:27:42Z Gli avvisi Apple raggiungono 99 paesi, ma non rivelano chi spia https://plainsec.com/stories/fa541d0b-609a-445d-a1fb-597f075b60f3/googles-november-android-bulletin-spans-225-vulnerabilities PlainSec en 2026-11-03T14:32:15Z Android's November patches leave 97 fixes for later https://plainsec.com/it/stories/fa541d0b-609a-445d-a1fb-597f075b60f3/googles-november-android-bulletin-spans-225-vulnerabilities PlainSec it 2026-11-03T14:32:15Z Il livello Android di novembre lascia fuori 97 correzioni https://plainsec.com/stories/b3c882bb-0bd4-43ed-8ae6-0134c714b9fe/gold-ogre-used-ai-agents-to-expand-ransomware-intrusions PlainSec en 2026-11-02T06:21:53Z GOLD OGRE used AI agents to expand ransomware intrusions https://plainsec.com/it/stories/b3c882bb-0bd4-43ed-8ae6-0134c714b9fe/gold-ogre-used-ai-agents-to-expand-ransomware-intrusions PlainSec it 2026-11-02T06:21:53Z L’AI accelera l’intrusione dopo il furto delle credenziali https://plainsec.com/stories/dc954841-11d2-472d-8fb8-00b15c4aeb79/volt-typhoon-routes-zero-day-attacks-through-rotating-devices PlainSec en 2026-11-03T12:27:36Z Volt Typhoon routes zero-day attacks through rotating devices https://plainsec.com/it/stories/dc954841-11d2-472d-8fb8-00b15c4aeb79/volt-typhoon-routes-zero-day-attacks-through-rotating-devices PlainSec it 2026-11-03T12:27:36Z Gli attacchi di Volt Typhoon passano da dispositivi di terzi https://plainsec.com/stories/f9126e2c-c229-4349-8f24-d33a845ee354/cyberstrikeai-carries-ai-directed-attacks-through-domain-compromise PlainSec en 2026-11-02T10:22:01Z CyberStrikeAI carries AI-directed attacks through domain compromise https://plainsec.com/it/stories/f9126e2c-c229-4349-8f24-d33a845ee354/cyberstrikeai-carries-ai-directed-attacks-through-domain-compromise PlainSec it 2026-11-02T10:22:01Z L’AI sceglie le mosse dopo la compromissione, fino al dominio https://plainsec.com/stories/365f28f0-7158-4e40-899e-f852940bd9bb/google-cloud-sdk-clients-may-trust-compromised-ca-roots PlainSec en 2026-11-03T06:25:17Z Google Cloud SDK clients may trust compromised CA roots https://plainsec.com/it/stories/365f28f0-7158-4e40-899e-f852940bd9bb/google-cloud-sdk-clients-may-trust-compromised-ca-roots PlainSec it 2026-11-03T06:25:17Z La revoca non basta: i client possono ancora fidarsi delle CA https://plainsec.com/stories/a51a9b96-b3f9-4334-a82f-d3b2f5768eb7/volta-turns-stolen-credentials-into-ranked-victim-dossiers PlainSec en 2026-11-02T06:21:53Z VOLTA builds financial dossiers from stolen Windows data https://plainsec.com/it/stories/a51a9b96-b3f9-4334-a82f-d3b2f5768eb7/volta-turns-stolen-credentials-into-ranked-victim-dossiers PlainSec it 2026-11-02T06:21:53Z VOLTA trasforma i dati rubati in profili finanziari dei bersagli