https://plainsec.com/stories/f628e752-9af0-4d15-acec-c2c8f7cbcc59/ai-agents-execute-intrusions-while-decoys-mislead-them PlainSec en 2026-10-23T21:56:17Z Ransomware affiliates use AI to coordinate edge intrusions https://plainsec.com/it/stories/f628e752-9af0-4d15-acec-c2c8f7cbcc59/ai-agents-execute-intrusions-while-decoys-mislead-them PlainSec it 2026-10-23T21:56:17Z L’AI coordina gli affiliati ransomware, ma ogni passaggio resta approvato https://plainsec.com/stories/eea03b09-7a84-4f6d-a0e1-0fe41bce520c/gitlab-code-execution-flaw-reaches-back-to-version-7-0 PlainSec en 2026-10-22T21:06:12Z Ruby regex bugs expose applications beyond GitLab https://plainsec.com/it/stories/eea03b09-7a84-4f6d-a0e1-0fe41bce520c/gitlab-code-execution-flaw-reaches-back-to-version-7-0 PlainSec it 2026-10-22T21:06:12Z Il rischio delle regex Ruby supera i confini di GitLab https://plainsec.com/stories/ad20577c-d4c8-4127-bd49-0d1ec26fc59b/arista-velocloud-zero-day-puts-orchestration-host-at-risk PlainSec en 2026-10-22T21:06:12Z Arista VeloCloud flaw grants low-privilege users operator access https://plainsec.com/it/stories/ad20577c-d4c8-4127-bd49-0d1ec26fc59b/arista-velocloud-zero-day-puts-orchestration-host-at-risk PlainSec it 2026-10-22T21:06:12Z Il ruolo minimo basta a esporre il piano di gestione SD-WAN https://plainsec.com/stories/61d4f6f7-fbd9-469d-82b7-d41b6e2610ff/connectwise-backup-breach-opened-a-route-into-microsoft-365 PlainSec en 2026-10-22T21:06:12Z ConnectWise backup breach opened a route into Microsoft 365 https://plainsec.com/it/stories/61d4f6f7-fbd9-469d-82b7-d41b6e2610ff/connectwise-backup-breach-opened-a-route-into-microsoft-365 PlainSec it 2026-10-22T21:06:12Z Il backup diventa una porta diretta ai tenant Microsoft 365 https://plainsec.com/stories/12279f01-ae38-4702-9055-f8a749f4ec55/time4popcorn-updater-put-millions-at-risk-of-elevated-code-execution PlainSec en 2026-10-23T22:51:23Z Time4Popcorn updater put millions at risk of elevated code execution https://plainsec.com/it/stories/12279f01-ae38-4702-9055-f8a749f4ec55/time4popcorn-updater-put-millions-at-risk-of-elevated-code-execution PlainSec it 2026-10-23T22:51:23Z Milioni di computer a rischio per un updater senza manutenzione https://plainsec.com/stories/1654cb82-7eb8-4b6d-99d0-e608d260b381/k0t-used-edge-devices-to-persist-and-steal-data PlainSec en 2026-10-23T18:04:47Z k0t used edge devices to persist and steal data https://plainsec.com/it/stories/1654cb82-7eb8-4b6d-99d0-e608d260b381/k0t-used-edge-devices-to-persist-and-steal-data PlainSec it 2026-10-23T18:04:47Z Oltre 70.000 credenziali esposte: k0t mantiene accessi persistenti https://plainsec.com/stories/40a59361-3bf7-453b-8718-93193543c67b/french-supermarket-refrigeration-attacks-spoiled-food-and-disrupted-stores PlainSec en 2026-10-24T04:51:42Z French supermarket refrigeration attacks spoiled food and disrupted stores https://plainsec.com/it/stories/40a59361-3bf7-453b-8718-93193543c67b/french-supermarket-refrigeration-attacks-spoiled-food-and-disrupted-stores PlainSec it 2026-10-24T04:51:42Z I controller frigoriferi compromessi rovinano le scorte dei supermercati https://plainsec.com/stories/d2028bc8-219b-4029-b0d2-06a6c5364d1d/stolen-microsoft-365-tokens-opened-accounts-across-79-organizations PlainSec en 2026-10-23T13:04:34Z Stolen Microsoft 365 tokens opened accounts across 79 organizations https://plainsec.com/it/stories/d2028bc8-219b-4029-b0d2-06a6c5364d1d/stolen-microsoft-365-tokens-opened-accounts-across-79-organizations PlainSec it 2026-10-23T13:04:34Z La MFA superata non impedisce il riuso dei token rubati https://plainsec.com/stories/a9592a2b-1fac-46b4-a12d-5eb6066e657b/uac-0099s-foothold-preceded-sandworms-grain-firm-data-wipe PlainSec en 2026-10-23T13:04:34Z UAC-0099's July foothold preceded Sandworm's September wipe https://plainsec.com/it/stories/a9592a2b-1fac-46b4-a12d-5eb6066e657b/uac-0099s-foothold-preceded-sandworms-grain-firm-data-wipe PlainSec it 2026-10-23T13:04:34Z Due mesi di accesso aprono la strada al wipe di Sandworm https://plainsec.com/stories/3caacd99-9526-499c-ae7f-68f53de35ace/symantecs-captured-agent-design-routes-attacks-through-hijacked-ai PlainSec en 2026-10-23T21:56:17Z Symantec's captured agent design routes attacks through hijacked AI https://plainsec.com/it/stories/3caacd99-9526-499c-ae7f-68f53de35ace/symantecs-captured-agent-design-routes-attacks-through-hijacked-ai PlainSec it 2026-10-23T21:56:17Z Un modello AI dirottato può coordinare attacchi senza eseguirli https://plainsec.com/stories/450df4c6-0b4e-4505-b304-400938d60c60/quest-quanum-breach-leaves-patient-records-in-question PlainSec en 2026-10-23T18:04:47Z Quest Quanum breach disrupts lab orders as exposure stays unknown https://plainsec.com/it/stories/450df4c6-0b4e-4505-b304-400938d60c60/quest-quanum-breach-leaves-patient-records-in-question PlainSec it 2026-10-23T18:04:47Z L’accesso a Quanum sposta gli ordini clinici sulla carta https://plainsec.com/stories/dabf72a0-9c4c-4442-852a-0fbf8ae74f52/node-js-risolte-molteplici-vulnerabilit PlainSec en 2026-10-23T13:04:34Z Node.js Brotli flaw reaches code execution on official build https://plainsec.com/it/stories/dabf72a0-9c4c-4442-852a-0fbf8ae74f52/node-js-risolte-molteplici-vulnerabilit PlainSec it 2026-10-23T13:04:34Z Una build ufficiale di Node.js cede al Brotli, ma non sempre https://plainsec.com/stories/9ba03a12-02da-4c38-bd95-d72c524ead9e/trimble-cityworks-flaw-opens-iis-servers-to-attackers PlainSec en 2026-10-23T22:51:23Z Trimble Cityworks flaw opens IIS servers to attackers https://plainsec.com/it/stories/9ba03a12-02da-4c38-bd95-d72c524ead9e/trimble-cityworks-flaw-opens-iis-servers-to-attackers PlainSec it 2026-10-23T22:51:23Z La falla di Cityworks può aprire la rete dai server IIS https://plainsec.com/stories/de19484a-744c-45fe-a125-0adfbb350fe7/google-patched-application-integration-service-account-impersonation-flaw PlainSec en 2026-10-24T08:48:52Z Google patched Application Integration service-account impersonation flaw https://plainsec.com/it/stories/de19484a-744c-45fe-a125-0adfbb350fe7/google-patched-application-integration-service-account-impersonation-flaw PlainSec it 2026-10-24T08:48:52Z La falla di Application Integration era già corretta alla pubblicazione https://plainsec.com/stories/39c932b3-8916-4c97-8506-e4d5cce5341f/uk-cable-rules-pair-tougher-penalties-with-operator-duties PlainSec en 2026-10-24T04:51:42Z UK cable proposal adds resilience duties to harsher penalties https://plainsec.com/it/stories/39c932b3-8916-4c97-8506-e4d5cce5341f/uk-cable-rules-pair-tougher-penalties-with-operator-duties PlainSec it 2026-10-24T04:51:42Z Il Regno Unito affianca alle pene obblighi sui cavi sottomarini https://plainsec.com/stories/fa1bb4ea-8297-483c-a904-f135a069566f/atlassian-s-176-vulnerability-entries-represent-75-unique-flaws PlainSec en 2026-10-24T08:48:52Z Atlassian’s 176 vulnerability entries represent 75 unique flaws https://plainsec.com/it/stories/fa1bb4ea-8297-483c-a904-f135a069566f/atlassian-s-176-vulnerability-entries-represent-75-unique-flaws PlainSec it 2026-10-24T08:48:52Z 176 voci, ma 75 CVE distinte nel bollettino Atlassian https://plainsec.com/stories/115495d1-d449-4b62-8568-64ffc62aa8c9/aokigahara-steals-ai-sessions-alongside-developer-credentials PlainSec en 2026-10-24T04:51:42Z Aokigahara steals AI sessions alongside developer credentials https://plainsec.com/it/stories/115495d1-d449-4b62-8568-64ffc62aa8c9/aokigahara-steals-ai-sessions-alongside-developer-credentials PlainSec it 2026-10-24T04:51:42Z Un solo infostealer raccoglie sessioni AI e credenziali cloud https://plainsec.com/stories/ebf131a6-02c1-4854-9659-2b9592a6c9b0/danfoss-refrigeration-attacks-spoiled-food-across-700-stores PlainSec en 2026-10-23T02:56:43Z Danfoss refrigeration attacks spoiled food across 700 stores https://plainsec.com/it/stories/ebf131a6-02c1-4854-9659-2b9592a6c9b0/danfoss-refrigeration-attacks-spoiled-food-across-700-stores PlainSec it 2026-10-23T02:56:43Z Il sabotaggio dei frigoriferi ha colpito oltre 700 negozi https://plainsec.com/stories/8a423f7a-81cb-44fc-a223-68f007677eca/railway-secrets-expose-services-beyond-the-platform PlainSec en 2026-10-22T18:36:43Z Railway secrets linked to drained cryptocurrency wallets https://plainsec.com/it/stories/8a423f7a-81cb-44fc-a223-68f007677eca/railway-secrets-expose-services-beyond-the-platform PlainSec it 2026-10-22T18:36:43Z Wallet di criptovalute svuotati dopo l’esposizione su Railway https://plainsec.com/stories/5e4f6920-9432-49c1-968c-6b7a76cd7e38/zimbra-pocs-can-miss-command-injection-in-swatchdog PlainSec en 2026-10-23T18:04:47Z Zimbra PoCs can miss command injection in Swatchdog https://plainsec.com/it/stories/5e4f6920-9432-49c1-968c-6b7a76cd7e38/zimbra-pocs-can-miss-command-injection-in-swatchdog PlainSec it 2026-10-23T18:04:47Z Un PoC fallito può lasciare Zimbra esposto https://plainsec.com/stories/09e7033b-30c4-43b4-8d5a-ad4012d11635/prince-of-persia-resumes-theft-on-us-shared-hosting PlainSec en 2026-10-23T10:37:22Z Prince of Persia resumes theft on US shared hosting https://plainsec.com/it/stories/09e7033b-30c4-43b4-8d5a-ad4012d11635/prince-of-persia-resumes-theft-on-us-shared-hosting PlainSec it 2026-10-23T10:37:22Z Il C&C di Prince of Persia si nasconde tra siti legittimi https://plainsec.com/stories/5ad9b4ab-e064-4a58-bc12-1f4113bff256/kiloview-e3-ndi-encoder PlainSec en 2026-10-23T06:55:32Z Kiloview E3 flaws pair unauthenticated changes with root execution https://plainsec.com/it/stories/5ad9b4ab-e064-4a58-bc12-1f4113bff256/kiloview-e3-ndi-encoder PlainSec it 2026-10-23T06:55:32Z Il login non basta a proteggere gli encoder Kiloview E3 https://plainsec.com/stories/01a00d70-6982-4491-9bdb-a8f7f638299c/cisco-security-advisory-cisco-unified-communications-products-security-hardening-release-october-2026 PlainSec en 2026-10-23T13:04:34Z Cisco and HPE patch flaws across network products https://plainsec.com/it/stories/01a00d70-6982-4491-9bdb-a8f7f638299c/cisco-security-advisory-cisco-unified-communications-products-security-hardening-release-october-2026 PlainSec it 2026-10-23T13:04:34Z Cisco e HPE correggono 76 falle, ma il perimetro resta incerto https://plainsec.com/stories/998b9e2b-29d5-45f8-9888-ea287dd03897/capcom-breach-exposes-email-details-from-11-7-million-accounts PlainSec en 2026-10-23T10:37:22Z Capcom breach exposes email details from 11.7 million accounts https://plainsec.com/it/stories/998b9e2b-29d5-45f8-9888-ea287dd03897/capcom-breach-exposes-email-details-from-11-7-million-accounts PlainSec it 2026-10-23T10:37:22Z 11,7 milioni di account CAPCOM ID alimentano il rischio di phishing mirato