https://plainsec.com/stories/582e6e71-5e69-453d-993a-1c0348d907c7/volt-typhoon-used-rotating-relays-to-exploit-management-systems PlainSec en 2026-10-28T20:26:36Z Volt Typhoon used rotating relays to exploit management systems https://plainsec.com/it/stories/582e6e71-5e69-453d-993a-1c0348d907c7/volt-typhoon-used-rotating-relays-to-exploit-management-systems PlainSec it 2026-10-28T20:26:36Z Una catena effimera apre a Volt Typhoon le reti dei clienti https://plainsec.com/stories/1db7468a-24b8-4df1-b3ee-8fb2e32879fe/apple-extends-exploited-coregraphics-fix-to-ios-18 PlainSec en 2026-10-27T13:01:01Z Apple extends exploited CoreGraphics fix to iOS 18 https://plainsec.com/it/stories/1db7468a-24b8-4df1-b3ee-8fb2e32879fe/apple-extends-exploited-coregraphics-fix-to-ios-18 PlainSec it 2026-10-27T13:01:01Z La correzione dello zero-day Apple arriva ora anche su iOS 18 https://plainsec.com/stories/fafd984a-27b7-4aa2-a6f5-0d5e39af9558/cisco-firewall-update-includes-two-exploited-fmc-access-flaws PlainSec en 2026-10-28T15:05:58Z Cisco firewall attacks now threaten VPN availability https://plainsec.com/it/stories/fafd984a-27b7-4aa2-a6f5-0d5e39af9558/cisco-firewall-update-includes-two-exploited-fmc-access-flaws PlainSec it 2026-10-28T15:05:58Z Anche la VPN può fermare i firewall Cisco sotto attacco https://plainsec.com/stories/444f557c-2e54-42fa-8f2a-5a9ee5fa0530/peoplesoft-patch-spans-three-flaws-behind-one-cve PlainSec en 2026-10-27T21:18:50Z Oracle EBS probes expose PeopleSoft’s three-flaw tracking gap https://plainsec.com/it/stories/444f557c-2e54-42fa-8f2a-5a9ee5fa0530/peoplesoft-patch-spans-three-flaws-behind-one-cve PlainSec it 2026-10-27T21:18:50Z Due falle Oracle, due esposizioni da tenere separate https://plainsec.com/stories/c50ad65a-f7a6-4892-9c7b-04460469df69/php2shell-chain-rooted-firewalls-and-exposed-managed-fleets PlainSec en 2026-10-28T20:26:36Z PHP2Shell chain rooted firewalls and exposed managed fleets https://plainsec.com/it/stories/c50ad65a-f7a6-4892-9c7b-04460469df69/php2shell-chain-rooted-firewalls-and-exposed-managed-fleets PlainSec it 2026-10-28T20:26:36Z Un firewall compromesso apre l’intera flotta e Active Directory https://plainsec.com/stories/dffb627c-b61a-47d0-b7be-8c40eb0838b5/worm-evades-github-search-and-steals-cpanel-credentials PlainSec en 2026-10-27T02:26:42Z Worm evades GitHub search and steals cPanel credentials https://plainsec.com/it/stories/dffb627c-b61a-47d0-b7be-8c40eb0838b5/worm-evades-github-search-and-steals-cpanel-credentials PlainSec it 2026-10-27T02:26:42Z Il worm aggira la ricerca GitHub e raggiunge i server https://plainsec.com/stories/a9401d36-36c8-4057-a538-f2c96785af36/unm-cyber-disruption-diverted-trauma-patients-statewide PlainSec en 2026-10-27T16:58:21Z UNM hospitals reopen as Health Sciences classes stay canceled https://plainsec.com/it/stories/a9401d36-36c8-4057-a538-f2c96785af36/unm-cyber-disruption-diverted-trauma-patients-statewide PlainSec it 2026-10-27T16:58:21Z UNM riapre gli ospedali, ma ricerca e lezioni restano ferme https://plainsec.com/stories/1680ce96-a74b-4ab9-a4d6-782ea9422afa/ai-agent-finds-four-epics-flaws-one-may-enable-code-execution PlainSec en 2026-10-27T23:11:04Z AI agent finds four EPICS flaws, one may enable code execution https://plainsec.com/it/stories/1680ce96-a74b-4ab9-a4d6-782ea9422afa/ai-agent-finds-four-epics-flaws-one-may-enable-code-execution PlainSec it 2026-10-27T23:11:04Z Quattro falle in EPICS Base scoperte in meno di quattro ore https://plainsec.com/stories/8d882f2f-4cce-436a-9c77-a5f6aa5198f4/cisa-confirms-active-exploitation-of-brotli-decoder-flaw PlainSec en 2026-10-28T16:55:58Z CISA confirms active exploitation of Brotli decoder flaw https://plainsec.com/it/stories/8d882f2f-4cce-436a-9c77-a5f6aa5198f4/cisa-confirms-active-exploitation-of-brotli-decoder-flaw PlainSec it 2026-10-28T16:55:58Z Brotli espone servizi web anche quando la libreria è nascosta nelle dipendenze https://plainsec.com/stories/84e682b4-b316-47ea-af13-cc3817ba2cc5/edk-ii-flaw-exposes-shared-firmware-to-boot-time-code-execution PlainSec en 2026-10-27T23:11:04Z EDK II flaw exposes shared firmware to boot-time code execution https://plainsec.com/it/stories/84e682b4-b316-47ea-af13-cc3817ba2cc5/edk-ii-flaw-exposes-shared-firmware-to-boot-time-code-execution PlainSec it 2026-10-27T23:11:04Z La falla pre-boot attraversa il firmware di molti server https://plainsec.com/stories/4e0517d3-320c-4ba8-b428-df952be0b6bc/fake-teams-support-chats-can-lead-to-ransomware PlainSec en 2026-10-27T16:58:21Z Fake Teams support chats deliver payloads in under 15 minutes https://plainsec.com/it/stories/4e0517d3-320c-4ba8-b428-df952be0b6bc/fake-teams-support-chats-can-lead-to-ransomware PlainSec it 2026-10-27T16:58:21Z Quindici minuti dal falso supporto al payload su Teams https://plainsec.com/stories/a90d7560-c489-4656-af04-a79d333feb13/fake-chatgpt-and-claude-downloads-deliver-yoba-malware PlainSec en 2026-10-27T16:58:21Z Fake ChatGPT and Claude downloads deliver Yoba malware https://plainsec.com/it/stories/a90d7560-c489-4656-af04-a79d333feb13/fake-chatgpt-and-claude-downloads-deliver-yoba-malware PlainSec it 2026-10-27T16:58:21Z I falsi client AI in cima a Google consegnano malware https://plainsec.com/stories/d29eec37-e594-4a77-8057-fbe6c633f394/moldova-takes-more-than-80-public-services-offline PlainSec en 2026-10-28T20:26:36Z Moldova attack reached beyond public services into government data https://plainsec.com/it/stories/d29eec37-e594-4a77-8057-fbe6c633f394/moldova-takes-more-than-80-public-services-offline PlainSec it 2026-10-28T20:26:36Z I servizi moldavi aperti al pubblico hanno esposto dati collegati https://plainsec.com/stories/3bda9f82-c89e-41b5-9ba6-e7632dcea53f/tailscale-ssh-flaw-lets-authorized-devices-reach-root PlainSec en 2026-10-28T13:36:11Z Tailscale SSH flaw lets authorized devices reach root https://plainsec.com/it/stories/3bda9f82-c89e-41b5-9ba6-e7632dcea53f/tailscale-ssh-flaw-lets-authorized-devices-reach-root PlainSec it 2026-10-28T13:36:11Z Un dispositivo autorizzato può aprire la strada a root sui server https://plainsec.com/stories/b7a42a52-7724-45d9-a4d1-82266ac5d03f/gmo-desktop-breach-puts-trading-account-integrity-in-question PlainSec en 2026-10-28T02:48:54Z GMO desktop breach puts trading account integrity in question https://plainsec.com/it/stories/b7a42a52-7724-45d9-a4d1-82266ac5d03f/gmo-desktop-breach-puts-trading-account-integrity-in-question PlainSec it 2026-10-28T02:48:54Z Onamae di GMO: dati esposti e conti di trading coinvolti https://plainsec.com/stories/35695561-ca0c-4e5d-b555-bbf8bee2e7a2/engie-partner-marketing-breach-exposes-customer-contract-data PlainSec en 2026-10-28T20:26:36Z Engie partner breach exposes identifiers that aid impersonation https://plainsec.com/it/stories/35695561-ca0c-4e5d-b555-bbf8bee2e7a2/engie-partner-marketing-breach-exposes-customer-contract-data PlainSec it 2026-10-28T20:26:36Z I dati Engie possono dare credibilità alle richieste fraudolente https://plainsec.com/stories/acf14d8e-f555-4253-9003-e5936ba9fe44/so-net-breach-exposes-email-passwords-beyond-customer-records PlainSec en 2026-10-28T20:26:36Z So-net breach exposes email passwords beyond customer records https://plainsec.com/it/stories/acf14d8e-f555-4253-9003-e5936ba9fe44/so-net-breach-exposes-email-passwords-beyond-customer-records PlainSec it 2026-10-28T20:26:36Z Le password So-net espongono anche gli account riutilizzati altrove https://plainsec.com/stories/667e1407-8321-46ea-9de0-f316384f0167/android-authenticator-flaw-exposed-work-accounts-to-rogue-apps PlainSec en 2026-10-27T08:51:27Z Android Authenticator flaw exposed work accounts to rogue apps https://plainsec.com/it/stories/667e1407-8321-46ea-9de0-f316384f0167/android-authenticator-flaw-exposed-work-accounts-to-rogue-apps PlainSec it 2026-10-27T08:51:27Z Microsoft Authenticator si fidava dell’identità dichiarata dalle app https://plainsec.com/stories/3dd3bb6d-3f77-4cf8-a532-46b9642e5a0b/hpe-rilevate-vulnerabilit-in-arubaos PlainSec en 2026-10-27T16:58:21Z ArubaOS flaws could expose wireless network controls https://plainsec.com/it/stories/3dd3bb6d-3f77-4cf8-a532-46b9642e5a0b/hpe-rilevate-vulnerabilit-in-arubaos PlainSec it 2026-10-27T16:58:21Z Le falle ArubaOS non si fermano ai controller Wi-Fi https://plainsec.com/stories/131ad3e3-d1c9-44bc-9a27-4223ceef472c/openais-terra-reaches-critical-cyber-capability-threshold PlainSec en 2026-10-28T02:48:54Z OpenAI's Terra reaches Critical cyber capability threshold https://plainsec.com/it/stories/131ad3e3-d1c9-44bc-9a27-4223ceef472c/openais-terra-reaches-critical-cyber-capability-threshold PlainSec it 2026-10-28T02:48:54Z Un modello più economico raggiunge la soglia cyber più alta di OpenAI https://plainsec.com/stories/2ff70744-3941-4df7-9234-a4a63325c8c2/ghostwriter-attack-brings-destructive-cyber-operations-to-ukrainian-industry PlainSec en 2026-10-28T19:32:29Z GhostWriter attack brings destructive cyber operations to Ukrainian industry https://plainsec.com/it/stories/2ff70744-3941-4df7-9234-a4a63325c8c2/ghostwriter-attack-brings-destructive-cyber-operations-to-ukrainian-industry PlainSec it 2026-10-28T19:32:29Z Dallo spionaggio alla cancellazione: GhostWriter colpisce l’industria ucraina https://plainsec.com/stories/e5cf7e87-8075-4d07-aef8-cc16cdf69a6d/stryzhak-sentence-leaves-ransomware-ties-unresolved PlainSec en 2026-10-28T15:05:58Z Stryzhak sentence leaves ransomware networks unresolved https://plainsec.com/it/stories/e5cf7e87-8075-4d07-aef8-cc16cdf69a6d/stryzhak-sentence-leaves-ransomware-ties-unresolved PlainSec it 2026-10-28T15:05:58Z Una condanna chiude il caso di un affiliato, non la rete https://plainsec.com/stories/e2787d1e-1fcf-45e2-86f8-659c2911dea7/adobe-fixes-nine-critical-flaws-across-campaign-classic-and-connect PlainSec en 2026-10-28T15:05:58Z Adobe fixes nine critical flaws across Campaign Classic and Connect https://plainsec.com/it/stories/e2787d1e-1fcf-45e2-86f8-659c2911dea7/adobe-fixes-nine-critical-flaws-across-campaign-classic-and-connect PlainSec it 2026-10-28T15:05:58Z Nove falle critiche, due percorsi di aggiornamento Adobe https://plainsec.com/stories/f6edcec2-3596-4862-ba17-e7555a11f038/dahua-easy4ip-leaves-cameras-reachable-behind-firewalls PlainSec en 2026-10-27T08:51:27Z Dahua Easy4IP leaves cameras reachable behind firewalls https://plainsec.com/it/stories/f6edcec2-3596-4862-ba17-e7555a11f038/dahua-easy4ip-leaves-cameras-reachable-behind-firewalls PlainSec it 2026-10-27T08:51:27Z Il firewall non isola le telecamere Dahua raggiungibili via cloud https://plainsec.com/stories/48458f58-7c69-4f36-b0c0-6cc1423e7908/mitsubishi-electric-flaws-span-code-execution-and-access-bypass PlainSec en 2026-10-27T19:06:36Z Mitsubishi Electric flaws span code execution and access bypass https://plainsec.com/it/stories/48458f58-7c69-4f36-b0c0-6cc1423e7908/mitsubishi-electric-flaws-span-code-execution-and-access-bypass PlainSec it 2026-10-27T19:06:36Z Dieci suite Mitsubishi, ma una sola correzione documentata https://plainsec.com/stories/61d93753-7e77-4144-afaa-59fab93c8100/node-js-patch-gap-leaves-1-7-million-runtimes-stranded PlainSec en 2026-10-28T08:52:41Z Node.js patch gap leaves 1.7 million runtimes stranded https://plainsec.com/it/stories/61d93753-7e77-4144-afaa-59fab93c8100/node-js-patch-gap-leaves-1-7-million-runtimes-stranded PlainSec it 2026-10-28T08:52:41Z 1,7 milioni di installazioni Node.js sono su linee senza patch https://plainsec.com/stories/cebcd554-781a-4fa1-8310-a7c249ea7f61/goahead-can-still-trust-revoked-client-certificates PlainSec en 2026-10-27T16:58:21Z GoAhead TLS flaws now bypass checks and weaken sessions https://plainsec.com/it/stories/cebcd554-781a-4fa1-8310-a7c249ea7f61/goahead-can-still-trust-revoked-client-certificates PlainSec it 2026-10-27T16:58:21Z GoAhead espone certificati revocati, catene e traffico cifrato https://plainsec.com/stories/1dd91957-abe3-4a49-9d3f-0d9c223a61ef/epics-base PlainSec en 2026-10-27T21:18:50Z EPICS Base flaws put control services at risk https://plainsec.com/it/stories/1dd91957-abe3-4a49-9d3f-0d9c223a61ef/epics-base PlainSec it 2026-10-27T21:18:50Z Quattro falle in EPICS Base possono destabilizzare i sistemi di controllo https://plainsec.com/stories/d917ced5-118e-4081-801f-78f011e0a13b/qwen3-8-flash-next-tried-uploading-a-probe-to-alibaba-cloud PlainSec en 2026-10-27T13:01:01Z Qwen3.8-Flash-Next tried uploading a probe to Alibaba Cloud https://plainsec.com/it/stories/d917ced5-118e-4081-801f-78f011e0a13b/qwen3-8-flash-next-tried-uploading-a-probe-to-alibaba-cloud PlainSec it 2026-10-27T13:01:01Z La traccia rassicurante non ha fermato Qwen3.8-Flash-Next https://plainsec.com/stories/294cacea-a210-4523-89e9-e8460fe76d10/microsoft-net-fixes-leave-bundled-apps-exposed PlainSec en 2026-10-26T22:56:33Z Microsoft .NET fixes leave bundled apps exposed https://plainsec.com/it/stories/294cacea-a210-4523-89e9-e8460fe76d10/microsoft-net-fixes-leave-bundled-apps-exposed PlainSec it 2026-10-26T22:56:33Z Le patch di .NET non raggiungono da sole app e container https://plainsec.com/stories/9b1a2822-7df6-408a-a9a1-b24ea9a744b4/netscaler-zero-days-put-edge-traffic-control-at-stake PlainSec en 2026-10-27T13:01:01Z NetScaler zero-days put edge traffic control at stake https://plainsec.com/it/stories/9b1a2822-7df6-408a-a9a1-b24ea9a744b4/netscaler-zero-days-put-edge-traffic-control-at-stake PlainSec it 2026-10-27T13:01:01Z NetScaler compromesso può ridisegnare le comunicazioni della rete https://plainsec.com/stories/a94c4ce2-880a-4810-94ad-ba925c6f45ac/lazarus-abuses-south-korean-security-software-to-deliver-malware PlainSec en 2026-10-27T13:01:01Z Lazarus abuses South Korean security software to deliver malware https://plainsec.com/it/stories/a94c4ce2-880a-4810-94ad-ba925c6f45ac/lazarus-abuses-south-korean-security-software-to-deliver-malware PlainSec it 2026-10-27T13:01:01Z Il software finanziario fidato diventa un varco per Lazarus https://plainsec.com/stories/2ae0c33f-7e71-46f0-9b41-c85c815e4037/php2shell-draws-millions-of-attempts-but-no-success-observed PlainSec en 2026-10-27T13:01:01Z PHP2Shell draws millions of attempts, but no success observed https://plainsec.com/it/stories/2ae0c33f-7e71-46f0-9b41-c85c815e4037/php2shell-draws-millions-of-attempts-but-no-success-observed PlainSec it 2026-10-27T13:01:01Z Milioni di tentativi contro PHP, nessun exploit riuscito https://plainsec.com/stories/d1486d9f-959b-4070-be2e-12ef3129e1f3/apples-october-update-closes-exploited-coregraphics-flaw-on-ios-18 PlainSec en 2026-10-27T02:26:42Z Apple's October update closes exploited CoreGraphics flaw on iOS 18 https://plainsec.com/it/stories/d1486d9f-959b-4070-be2e-12ef3129e1f3/apples-october-update-closes-exploited-coregraphics-flaw-on-ios-18 PlainSec it 2026-10-27T02:26:42Z iOS 18 riceve un mese dopo la patch per una falla sfruttata https://plainsec.com/stories/34f68489-2a8d-474e-8cc7-34c4109dd063/openai-compaction-flaw-moved-reasoning-between-models PlainSec en 2026-10-27T11:31:47Z OpenAI compaction flaw moved reasoning between models https://plainsec.com/it/stories/34f68489-2a8d-474e-8cc7-34c4109dd063/openai-compaction-flaw-moved-reasoning-between-models PlainSec it 2026-10-27T11:31:47Z La compattazione del contesto può trasportare ragionamento proprietario tra modelli