https://plainsec.com/stories/ad240b27-b0f2-4593-8291-b4bf0b413bdf/php-for-windows-rebuild-masks-its-brotli-security-fix PlainSec en 2026-10-29T11:15:27Z PHP for Windows rebuild masks its Brotli security fix https://plainsec.com/it/stories/ad240b27-b0f2-4593-8291-b4bf0b413bdf/php-for-windows-rebuild-masks-its-brotli-security-fix PlainSec it 2026-10-29T11:15:27Z La patch di PHP per Windows si nasconde nel suffisso -1 https://plainsec.com/stories/fafd984a-27b7-4aa2-a6f5-0d5e39af9558/cisco-firewall-update-includes-two-exploited-fmc-access-flaws PlainSec en 2026-10-28T15:05:58Z Cisco VPN flaw reboots firewalls as Volt Typhoon targets control planes https://plainsec.com/it/stories/fafd984a-27b7-4aa2-a6f5-0d5e39af9558/cisco-firewall-update-includes-two-exploited-fmc-access-flaws PlainSec it 2026-10-28T15:05:58Z La patch alle VPN non chiude l’esposizione dei controller https://plainsec.com/stories/c50ad65a-f7a6-4892-9c7b-04460469df69/php2shell-chain-rooted-firewalls-and-exposed-managed-fleets PlainSec en 2026-10-28T20:26:36Z PHP2Shell chain carried firewall access into Active Directory https://plainsec.com/it/stories/c50ad65a-f7a6-4892-9c7b-04460469df69/php2shell-chain-rooted-firewalls-and-exposed-managed-fleets PlainSec it 2026-10-28T20:26:36Z Un firewall Palo Alto diventa ponte verso Active Directory https://plainsec.com/stories/025e2e18-4a26-4bad-bafd-7aacc7a44efe/binance-incident-puts-stablecoin-issuers-in-the-response-path PlainSec en 2026-10-30T03:47:57Z Binance incident puts stablecoin issuers in the response path https://plainsec.com/it/stories/025e2e18-4a26-4bad-bafd-7aacc7a44efe/binance-incident-puts-stablecoin-issuers-in-the-response-path PlainSec it 2026-10-30T03:47:57Z Il congelamento dei fondi sospetti supera i confini di Binance https://plainsec.com/stories/5cd41826-e1ed-4964-85a1-d365ae6476b2/dhs-leak-maps-staff-tied-to-sensitive-work PlainSec en 2026-10-28T22:42:03Z DHS leak maps undercover work and application access https://plainsec.com/it/stories/5cd41826-e1ed-4964-85a1-d365ae6476b2/dhs-leak-maps-staff-tied-to-sensitive-work PlainSec it 2026-10-28T22:42:03Z I dati DHS diventano una mappa di ruoli e accessi sensibili https://plainsec.com/stories/2ff70744-3941-4df7-9234-a4a63325c8c2/ghostwriter-attack-brings-destructive-cyber-operations-to-ukrainian-industry PlainSec en 2026-10-28T19:32:29Z FrostyNeighbor’s wiper strike joins sustained Belarus-linked activity https://plainsec.com/it/stories/2ff70744-3941-4df7-9234-a4a63325c8c2/ghostwriter-attack-brings-destructive-cyber-operations-to-ukrainian-industry PlainSec it 2026-10-28T19:32:29Z Il wiper non esaurisce le operazioni legate alla Bielorussia https://plainsec.com/stories/5bd22fe6-4839-4426-b516-f3a28bacace3/drupal-commerce-core-authorization-flaw-is-actively-exploited PlainSec en 2026-10-30T10:11:17Z Drupal Commerce Core authorization flaw is actively exploited https://plainsec.com/it/stories/5bd22fe6-4839-4426-b516-f3a28bacace3/drupal-commerce-core-authorization-flaw-is-actively-exploited PlainSec it 2026-10-30T10:11:17Z Lo sfruttamento attivo apre le funzioni di vendita di Drupal https://plainsec.com/stories/ad147c54-3082-47b0-b538-27fcb4d2004b/vapor-panda-scales-espionage-by-seeking-falcon-gaps PlainSec en 2026-10-30T03:47:57Z VAPOR PANDA scales espionage by seeking Falcon gaps https://plainsec.com/it/stories/ad147c54-3082-47b0-b538-27fcb4d2004b/vapor-panda-scales-espionage-by-seeking-falcon-gaps PlainSec it 2026-10-30T03:47:57Z Le lacune nei sensori diventano criteri di selezione per lo spionaggio https://plainsec.com/stories/4d20c828-a4e4-4c18-bffb-7eea3786819c/amadeus-breach-exposes-reservation-records-across-two-airlines PlainSec en 2026-10-30T01:38:26Z Amadeus breach exposes 92,000 Japan Airlines customer records https://plainsec.com/it/stories/4d20c828-a4e4-4c18-bffb-7eea3786819c/amadeus-breach-exposes-reservation-records-across-two-airlines PlainSec it 2026-10-30T01:38:26Z La violazione di Amadeus espone 92.000 clienti JAL https://plainsec.com/stories/616c0352-bfd8-481c-8f50-99ec28a1323e/help-desk-impersonation-makes-remote-access-look-like-support PlainSec en 2026-10-30T10:11:17Z Fake help desks gain remote access through routine support https://plainsec.com/it/stories/616c0352-bfd8-481c-8f50-99ec28a1323e/help-desk-impersonation-makes-remote-access-look-like-support PlainSec it 2026-10-30T10:11:17Z Nomi e email bastano a trasformare l'assistenza in accesso remoto https://plainsec.com/stories/5ce6e876-3b76-4f0f-879f-91773372d6ec/warp-panda-used-vmware-esxi-flaw-to-hide-operations PlainSec en 2026-10-29T11:15:27Z Warp Panda used VMware ESXi flaw to hide operations https://plainsec.com/it/stories/5ce6e876-3b76-4f0f-879f-91773372d6ec/warp-panda-used-vmware-esxi-flaw-to-hide-operations PlainSec it 2026-10-29T11:15:27Z I log di ESXi possono tacere dopo una compromissione https://plainsec.com/stories/8b6f3036-9e02-493a-b014-09bf15666d7f/risolte-vulnerabilit-in-prodotti-teamviewer PlainSec en 2026-10-30T10:11:17Z TeamViewer flaw puts support technicians’ own machines at risk https://plainsec.com/it/stories/8b6f3036-9e02-493a-b014-09bf15666d7f/risolte-vulnerabilit-in-prodotti-teamviewer PlainSec it 2026-10-30T10:11:17Z La sessione remota può colpire il computer del tecnico https://plainsec.com/stories/acf14d8e-f555-4253-9003-e5936ba9fe44/so-net-breach-exposes-email-passwords-beyond-customer-records PlainSec en 2026-10-28T20:26:36Z So-net breach adds mailbox and bank-account exposure https://plainsec.com/it/stories/acf14d8e-f555-4253-9003-e5936ba9fe44/so-net-breach-exposes-email-passwords-beyond-customer-records PlainSec it 2026-10-28T20:26:36Z La violazione So-net espone 54.401 password email e dati bancari https://plainsec.com/stories/37bf569a-698b-43bd-8b57-9f2863a29b03/dell-powerprotect-data-domain-os-mehrere-schwachstellen PlainSec en 2026-10-30T10:11:17Z Dell Data Domain flaws expose backup appliances and managed systems https://plainsec.com/it/stories/37bf569a-698b-43bd-8b57-9f2863a29b03/dell-powerprotect-data-domain-os-mehrere-schwachstellen PlainSec it 2026-10-30T10:11:17Z Le falle Dell raggiungono appliance di backup e sistemi gestiti https://plainsec.com/stories/800a3f4d-28f4-494c-bd9a-c21a08ad95fe/nik-c2-joins-data-theft-with-screen-locking-ransomware PlainSec en 2026-10-29T11:15:27Z NIK C2 joins data theft with screen-locking ransomware https://plainsec.com/it/stories/800a3f4d-28f4-494c-bd9a-c21a08ad95fe/nik-c2-joins-data-theft-with-screen-locking-ransomware PlainSec it 2026-10-29T11:15:27Z Il furto di dati può sfociare nello stesso impianto in ransomware https://plainsec.com/stories/977bc623-aaa6-458b-8b53-886324fda943/linux-tcp-flaw-puts-mptcp-servers-on-a-path-to-root PlainSec en 2026-10-29T21:27:05Z Linux TCP flaw puts MPTCP servers on a path to root https://plainsec.com/it/stories/977bc623-aaa6-458b-8b53-886324fda943/linux-tcp-flaw-puts-mptcp-servers-on-a-path-to-root PlainSec it 2026-10-29T21:27:05Z Root sui server Linux: l’esposizione dipende dai listener MPTCP https://plainsec.com/stories/641e92b7-b845-4311-b1fe-3f6f46733b6e/chrome-extensions-hijack-searches-for-referral-payments PlainSec en 2026-10-29T04:49:49Z Chrome extensions hijack searches for referral revenue https://plainsec.com/it/stories/641e92b7-b845-4311-b1fe-3f6f46733b6e/chrome-extensions-hijack-searches-for-referral-payments PlainSec it 2026-10-29T04:49:49Z Le ricerche su Chrome diventano una fonte di ricavi per le estensioni https://plainsec.com/stories/8d882f2f-4cce-436a-9c77-a5f6aa5198f4/cisa-confirms-active-exploitation-of-brotli-decoder-flaw PlainSec en 2026-10-28T16:55:58Z CISA confirms active exploitation of Brotli decoder flaw https://plainsec.com/it/stories/8d882f2f-4cce-436a-9c77-a5f6aa5198f4/cisa-confirms-active-exploitation-of-brotli-decoder-flaw PlainSec it 2026-10-28T16:55:58Z Brotli espone servizi web anche quando la libreria è nascosta nelle dipendenze https://plainsec.com/stories/f37306e2-8d14-4d17-bb92-b65b5ff92766/fbi-seizure-leaves-virtualine-s-hosting-reach-uncertain PlainSec en 2026-10-29T02:35:36Z Virtualine’s shell-company plan shadows wider FBI seizure https://plainsec.com/it/stories/f37306e2-8d14-4d17-bb92-b65b5ff92766/fbi-seizure-leaves-virtualine-s-hosting-reach-uncertain PlainSec it 2026-10-29T02:35:36Z Il sequestro di Virtualine interrompe un servizio, non prova la chiusura https://plainsec.com/stories/017a90dd-52b3-4253-9e27-43f6234ead88/unsloth-flaw-lets-model-configs-run-python-past-safety-setting PlainSec en 2026-10-29T06:25:34Z Unsloth flaw lets model configs run Python past safety setting https://plainsec.com/it/stories/017a90dd-52b3-4253-9e27-43f6234ead88/unsloth-flaw-lets-model-configs-run-python-past-safety-setting PlainSec it 2026-10-29T06:25:34Z La protezione di Unsloth non ferma il codice ostile https://plainsec.com/stories/3bda9f82-c89e-41b5-9ba6-e7632dcea53f/tailscale-ssh-flaw-lets-authorized-devices-reach-root PlainSec en 2026-10-28T13:36:11Z Tailscale SSH flaw lets authorized devices reach root https://plainsec.com/it/stories/3bda9f82-c89e-41b5-9ba6-e7632dcea53f/tailscale-ssh-flaw-lets-authorized-devices-reach-root PlainSec it 2026-10-28T13:36:11Z Un dispositivo autorizzato può aprire la strada a root sui server https://plainsec.com/stories/d29eec37-e594-4a77-8057-fbe6c633f394/moldova-takes-more-than-80-public-services-offline PlainSec en 2026-10-28T20:26:36Z Moldova attack reached beyond public services into government data https://plainsec.com/it/stories/d29eec37-e594-4a77-8057-fbe6c633f394/moldova-takes-more-than-80-public-services-offline PlainSec it 2026-10-28T20:26:36Z I servizi moldavi aperti al pubblico hanno esposto dati collegati https://plainsec.com/stories/6edf9ce3-4732-4fa7-a4a9-65cf3a3fdff6/watchguard-fireware-flaws-expose-privileged-cluster-controls PlainSec en 2026-10-29T23:45:10Z WatchGuard Fireware flaws expose privileged cluster controls https://plainsec.com/it/stories/6edf9ce3-4732-4fa7-a4a9-65cf3a3fdff6/watchguard-fireware-flaws-expose-privileged-cluster-controls PlainSec it 2026-10-29T23:45:10Z Un FireCluster può accettare azioni amministrative senza autenticazione https://plainsec.com/stories/f62bf214-929f-40a2-9721-3244ceb92cc8/php2shell-attacks-give-exposed-pan-os-consoles-code-execution PlainSec en 2026-10-29T06:25:34Z PHP2Shell attacks give exposed PAN-OS consoles code execution https://plainsec.com/it/stories/f62bf214-929f-40a2-9721-3244ceb92cc8/php2shell-attacks-give-exposed-pan-os-consoles-code-execution PlainSec it 2026-10-29T06:25:34Z Una console firewall esposta può aprire la strada fino ad Active Directory https://plainsec.com/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec en 2026-10-29T15:20:44Z Scanner used 32 AI identities to probe credential files https://plainsec.com/it/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec it 2026-10-29T15:20:44Z I nomi degli agenti AI diventano una porta da testare https://plainsec.com/stories/35695561-ca0c-4e5d-b555-bbf8bee2e7a2/engie-partner-marketing-breach-exposes-customer-contract-data PlainSec en 2026-10-28T20:26:36Z Engie partner breach exposes identifiers that aid impersonation https://plainsec.com/it/stories/35695561-ca0c-4e5d-b555-bbf8bee2e7a2/engie-partner-marketing-breach-exposes-customer-contract-data PlainSec it 2026-10-28T20:26:36Z I dati Engie possono dare credibilità alle richieste fraudolente https://plainsec.com/stories/e5cf7e87-8075-4d07-aef8-cc16cdf69a6d/stryzhak-sentence-leaves-ransomware-ties-unresolved PlainSec en 2026-10-28T15:05:58Z Stryzhak sentence leaves ransomware networks unresolved https://plainsec.com/it/stories/e5cf7e87-8075-4d07-aef8-cc16cdf69a6d/stryzhak-sentence-leaves-ransomware-ties-unresolved PlainSec it 2026-10-28T15:05:58Z Una condanna chiude il caso di un affiliato, non la rete https://plainsec.com/stories/e2787d1e-1fcf-45e2-86f8-659c2911dea7/adobe-fixes-nine-critical-flaws-across-campaign-classic-and-connect PlainSec en 2026-10-28T15:05:58Z Adobe fixes nine critical flaws across Campaign Classic and Connect https://plainsec.com/it/stories/e2787d1e-1fcf-45e2-86f8-659c2911dea7/adobe-fixes-nine-critical-flaws-across-campaign-classic-and-connect PlainSec it 2026-10-28T15:05:58Z Nove falle critiche, due percorsi di aggiornamento Adobe https://plainsec.com/stories/0b214f96-1a98-474f-bcd8-e83f16d18c0b/public-exploit-puts-d-link-dir-505-backdoor-in-reach PlainSec en 2026-10-29T12:32:35Z Public exploit puts D-Link DIR-505 backdoor in reach https://plainsec.com/it/stories/0b214f96-1a98-474f-bcd8-e83f16d18c0b/public-exploit-puts-d-link-dir-505-backdoor-in-reach PlainSec it 2026-10-29T12:32:35Z Una backdoor remota nel D-Link DIR-505, senza rimedio indicato