https://plainsec.com/stories/4db320b2-1df3-4480-a62b-d156dd677384/uat-6275-mixes-lures-with-public-exploits PlainSec en 2026-10-14T18:11:15Z UAT-6275 mixes lures with public exploits https://plainsec.com/it/stories/4db320b2-1df3-4480-a62b-d156dd677384/uat-6275-mixes-lures-with-public-exploits PlainSec it 2026-10-14T18:11:15Z La campagna UAT-6275 allarga il bersaglio a FortiWeb e Windows esposti https://plainsec.com/stories/2111ebad-7dee-44db-80ab-289fd2a8487b/ivanti-connect-secure-flaw-is-already-being-exploited PlainSec en 2026-10-14T18:11:15Z Ivanti Connect Secure flaw is already being exploited https://plainsec.com/it/stories/2111ebad-7dee-44db-80ab-289fd2a8487b/ivanti-connect-secure-flaw-is-already-being-exploited PlainSec it 2026-10-14T18:11:15Z Ivanti Connect Secure diventa la via d’ingresso per rubare credenziali https://plainsec.com/stories/79df5cfb-b970-453c-860a-7d7eb03f6063/danfoss-controllers-let-attackers-spoil-supermarket-stock PlainSec en 2026-10-14T18:11:15Z Danfoss controllers let attackers spoil supermarket stock https://plainsec.com/it/stories/79df5cfb-b970-453c-860a-7d7eb03f6063/danfoss-controllers-let-attackers-spoil-supermarket-stock PlainSec it 2026-10-14T18:11:15Z Un controller remoto basta a rovinare stock su scala nazionale https://plainsec.com/stories/a0cb4493-8929-4251-93f8-c7d18d971a4c/windows-update-elevation-of-privilege-vulnerability PlainSec en 2026-10-14T04:39:43Z Microsoft Patch Tuesday flags exploited Shell zero-day https://plainsec.com/it/stories/a0cb4493-8929-4251-93f8-c7d18d971a4c/windows-update-elevation-of-privilege-vulnerability PlainSec it 2026-10-14T04:39:43Z Il Patch Tuesday record ha un zero-day già sfruttato https://plainsec.com/stories/83c8dead-30de-430c-9482-54b2464b8c84/doj-raids-laptop-farms-feeding-north-korean-it-fraud PlainSec en 2026-10-14T03:39:22Z DOJ arrests confirm North Korean laptop farms https://plainsec.com/it/stories/83c8dead-30de-430c-9482-54b2464b8c84/doj-raids-laptop-farms-feeding-north-korean-it-fraud PlainSec it 2026-10-14T03:39:22Z I laptop aziendali usati come accesso coverto duraturo https://plainsec.com/stories/61ab3901-111c-4fc9-85c1-e96bfe06eb43/tfg-london-outage-hits-orders-and-revenue PlainSec en 2026-10-13T17:06:16Z TFG London incident stayed inside a subset of brands https://plainsec.com/it/stories/61ab3901-111c-4fc9-85c1-e96bfe06eb43/tfg-london-outage-hits-orders-and-revenue PlainSec it 2026-10-13T17:06:16Z Incidente contenuto in TFG London, negozi aperti https://plainsec.com/stories/43937a50-a955-469b-9466-103ef945e2e6/collabora-built-in-code-flaw-plants-web-shells PlainSec en 2026-10-14T23:13:08Z Collabora built-in CODE flaw plants web shells https://plainsec.com/it/stories/43937a50-a955-469b-9466-103ef945e2e6/collabora-built-in-code-flaw-plants-web-shells PlainSec it 2026-10-14T23:13:08Z Lo stop del server locale apre la porta alla web shell https://plainsec.com/stories/11084b7c-2be6-4cd9-82a1-c386c65bd1d8/m-ltiples-vulnerabilidades-en-nonstop-servers-de-hpe PlainSec en 2026-10-13T16:05:28Z HPE NonStop fix for XDR Streams needs a coldload https://plainsec.com/it/stories/11084b7c-2be6-4cd9-82a1-c386c65bd1d8/m-ltiples-vulnerabilidades-en-nonstop-servers-de-hpe PlainSec it 2026-10-13T16:05:28Z Il coldload allunga l’esposizione sul bug critico di HPE NonStop https://plainsec.com/stories/2464a0b3-8fea-4b24-8cd2-a56d1392c5c8/chrome-exploit-chain-shrank-to-six-days PlainSec en 2026-10-14T18:11:15Z Chrome exploit chain shrank to six days https://plainsec.com/it/stories/2464a0b3-8fea-4b24-8cd2-a56d1392c5c8/chrome-exploit-chain-shrank-to-six-days PlainSec it 2026-10-14T18:11:15Z Chrome cade in sei giorni sotto una catena AI https://plainsec.com/stories/320da9a7-163f-4c08-aa94-84bc9136ebbd/kimsuky-hides-wartime-espionage-in-ordinary-outreach PlainSec en 2026-10-14T03:39:22Z Kimsuky hides wartime espionage in ordinary outreach https://plainsec.com/it/stories/320da9a7-163f-4c08-aa94-84bc9136ebbd/kimsuky-hides-wartime-espionage-in-ordinary-outreach PlainSec it 2026-10-14T03:39:22Z Kimsuky usa inviti plausibili per cercare intelligence sulla guerra https://plainsec.com/stories/3bcd9bdd-0974-48f7-a3c0-46cb5e98ba98/romulus-turns-clickfix-into-reusable-malware-infrastructure PlainSec en 2026-10-14T18:11:15Z ROMULUS turns ClickFix into reusable malware infrastructure https://plainsec.com/it/stories/3bcd9bdd-0974-48f7-a3c0-46cb5e98ba98/romulus-turns-clickfix-into-reusable-malware-infrastructure PlainSec it 2026-10-14T18:11:15Z ClickFix diventa infrastruttura riusabile per più malware https://plainsec.com/stories/305c20d2-c94a-4635-a119-57996153ee33/npm-trusted-publishing-trusted-the-wrong-identity PlainSec en 2026-10-13T13:44:15Z npm Trusted Publishing trusted the wrong identity https://plainsec.com/it/stories/305c20d2-c94a-4635-a119-57996153ee33/npm-trusted-publishing-trusted-the-wrong-identity PlainSec it 2026-10-13T13:44:15Z Un nome GitHub reclamato bastava a prendere npm https://plainsec.com/stories/cf59ed9d-4a13-407e-8bd1-ca3bcc919534/anthropic-tests-ai-worm-behavior-on-cheap-android-boxes PlainSec en 2026-10-14T03:39:22Z Anthropic shows cheap Android boxes can host AI models https://plainsec.com/it/stories/cf59ed9d-4a13-407e-8bd1-ca3bcc919534/anthropic-tests-ai-worm-behavior-on-cheap-android-boxes PlainSec it 2026-10-14T03:39:22Z I botnet AI diventano plausibili sui box Android da 55 dollari https://plainsec.com/stories/c0e7c5d2-b920-47c5-ac4c-abe0798acd16/hirudo-swaps-bank-apps-for-patched-copies PlainSec en 2026-10-14T14:57:19Z Hirudo swaps bank apps for patched copies https://plainsec.com/it/stories/c0e7c5d2-b920-47c5-ac4c-abe0798acd16/hirudo-swaps-bank-apps-for-patched-copies PlainSec it 2026-10-14T14:57:19Z Hirudo trasforma la banca in un’app complice https://plainsec.com/stories/c74d1eaa-755b-4a52-8d56-deb068869a76/microsoft-seizes-phishing-market-behind-1b-messages PlainSec en 2026-10-14T18:11:15Z Microsoft disrupts phishing marketplace built on cloud tenants https://plainsec.com/it/stories/c74d1eaa-755b-4a52-8d56-deb068869a76/microsoft-seizes-phishing-market-behind-1b-messages PlainSec it 2026-10-14T18:11:15Z Cloud account rubati, non solo domini: così si scala il phishing https://plainsec.com/stories/f0b225f7-8121-44d3-bc36-0e5628a66b74/booz-allen-test-shows-ai-can-outrun-ot-defenses PlainSec en 2026-10-14T23:04:57Z Booz Allen test shows AI can outrun OT defenses https://plainsec.com/it/stories/f0b225f7-8121-44d3-bc36-0e5628a66b74/booz-allen-test-shows-ai-can-outrun-ot-defenses PlainSec it 2026-10-14T23:04:57Z L’AI chiude la catena d’attacco OT in pochi minuti https://plainsec.com/stories/8e1319b3-de96-4c97-88c3-ad55a28963a2/openai-case-spotlights-room-level-insider-surveillance PlainSec en 2026-10-14T03:39:22Z OpenAI case spotlights room-level insider surveillance https://plainsec.com/it/stories/8e1319b3-de96-4c97-88c3-ad55a28963a2/openai-case-spotlights-room-level-insider-surveillance PlainSec it 2026-10-14T03:39:22Z Un dispositivo nascosto porta l’insider threat nella sala riunioni https://plainsec.com/stories/b763d02e-2c7c-45d4-af34-7fc87fac42dc/uk-government-expands-frontier-ai-security-scanning PlainSec en 2026-10-13T17:06:16Z UK government expands frontier AI security scanning https://plainsec.com/it/stories/b763d02e-2c7c-45d4-af34-7fc87fac42dc/uk-government-expands-frontier-ai-security-scanning PlainSec it 2026-10-13T17:06:16Z L’AI entra nella difesa, e diventa un rischio da gestire https://plainsec.com/stories/84fc39e0-e491-4d58-ac23-145516d978b7/cross-site-scripting-xss-vulnerability-in-sap-netweaver-application-server-abap-applications-based-on-sap-gui-for-html PlainSec en 2026-10-14T18:11:15Z SAP patch day exposes credential and boundary flaws https://plainsec.com/it/stories/84fc39e0-e491-4d58-ac23-145516d978b7/cross-site-scripting-xss-vulnerability-in-sap-netweaver-application-server-abap-applications-based-on-sap-gui-for-html PlainSec it 2026-10-14T18:11:15Z Quattro falle SAP aprono la porta ai client credentials https://plainsec.com/stories/c87b9505-3a33-44f0-9ed2-15fe44d75bc0/reflectiz-ai-agent-proves-otp-login-bypass PlainSec en 2026-10-14T14:57:19Z Reflectiz AI agent proves OTP login bypass https://plainsec.com/it/stories/c87b9505-3a33-44f0-9ed2-15fe44d75bc0/reflectiz-ai-agent-proves-otp-login-bypass PlainSec it 2026-10-14T14:57:19Z Un agente AI completa un bypass OTP su un sito live https://plainsec.com/stories/9dd8775c-c752-4408-99b0-6138cf6dd53d/curl-upload-flaw-can-let-servers-corrupt-clients PlainSec en 2026-10-14T19:31:57Z curl upload flaw can let servers corrupt clients https://plainsec.com/it/stories/9dd8775c-c752-4408-99b0-6138cf6dd53d/curl-upload-flaw-can-let-servers-corrupt-clients PlainSec it 2026-10-14T19:31:57Z Un upload HTTP/2 può trasformare curl in un punto di esecuzione https://plainsec.com/stories/b543d94f-36cd-4113-93f3-cbfc83ad7d7b/semperis-survey-flags-ransomware-threats-beyond-data-theft PlainSec en 2026-10-14T06:54:10Z Semperis survey flags ransomware threats beyond data theft https://plainsec.com/it/stories/b543d94f-36cd-4113-93f3-cbfc83ad7d7b/semperis-survey-flags-ransomware-threats-beyond-data-theft PlainSec it 2026-10-14T06:54:10Z Il ransomware diventa una minaccia per la sicurezza fisica https://plainsec.com/stories/952d6d0e-112f-4dc8-8f76-5ed02b854d51/adobe-ships-a-broad-patch-wave-across-10-products PlainSec en 2026-10-14T18:11:15Z Adobe ships a broad patch wave across 10 products https://plainsec.com/it/stories/952d6d0e-112f-4dc8-8f76-5ed02b854d51/adobe-ships-a-broad-patch-wave-across-10-products PlainSec it 2026-10-14T18:11:15Z Adobe corregge 140 falle, molte nel componente condiviso https://plainsec.com/stories/91976c02-941c-439f-8b8a-fe4380c120d5/package-managers-leave-repository-tampering-too-much-trust PlainSec en 2026-10-14T14:57:19Z Package managers leave repository tampering too much trust https://plainsec.com/it/stories/91976c02-941c-439f-8b8a-fe4380c120d5/package-managers-leave-repository-tampering-too-much-trust PlainSec it 2026-10-14T14:57:19Z I package manager non bloccano la manomissione a monte https://plainsec.com/stories/bd45a422-2427-4052-bdcf-e774d5ead354/ivanti-fixes-seven-flaws-as-connect-secure-is-exploited PlainSec en 2026-10-14T14:57:19Z Ivanti fixes seven flaws as Connect Secure is exploited https://plainsec.com/it/stories/bd45a422-2427-4052-bdcf-e774d5ead354/ivanti-fixes-seven-flaws-as-connect-secure-is-exploited PlainSec it 2026-10-14T14:57:19Z Ivanti corregge sette flaw, uno è già sfruttato su Connect Secure https://plainsec.com/stories/1b12c54f-56ad-41f2-8952-39dc62e90846/bo-team-keeps-skynet-under-multi-day-ddos PlainSec en 2026-10-13T17:06:16Z BO Team keeps SkyNet under multi-day DDoS https://plainsec.com/it/stories/1b12c54f-56ad-41f2-8952-39dc62e90846/bo-team-keeps-skynet-under-multi-day-ddos PlainSec it 2026-10-13T17:06:16Z SkyNet sotto DDoS prolungato, servizi degradati per giorni https://plainsec.com/stories/17e5e7f4-d678-4f29-8007-4bf82249f349/linux-vhost-flaw-crosses-from-local-root-to-guest-escape PlainSec en 2026-10-14T10:54:56Z Linux vhost flaw crosses from local root to guest escape https://plainsec.com/it/stories/17e5e7f4-d678-4f29-8007-4bf82249f349/linux-vhost-flaw-crosses-from-local-root-to-guest-escape PlainSec it 2026-10-14T10:54:56Z Vghost apre una via dal guest al host Linux https://plainsec.com/stories/79554ed2-9a03-4dab-b050-bde59a08cbca/cve-2026-104935-ivanti-connect-secure PlainSec en 2026-10-14T00:00:33Z Ivanti chain turns VPN access into credential theft https://plainsec.com/it/stories/79554ed2-9a03-4dab-b050-bde59a08cbca/cve-2026-104935-ivanti-connect-secure PlainSec it 2026-10-14T00:00:33Z Ivanti Connect Secure espone credenziali anche dopo la patch https://plainsec.com/stories/4dacfb7b-6b91-4a04-bf02-47e02c2aa787/microsoft-smartscreen-enclave-flaw-breaks-windows-trust PlainSec en 2026-10-14T12:26:54Z Microsoft SmartScreen enclave flaw breaks Windows trust https://plainsec.com/it/stories/4dacfb7b-6b91-4a04-bf02-47e02c2aa787/microsoft-smartscreen-enclave-flaw-breaks-windows-trust PlainSec it 2026-10-14T12:26:54Z Il perimetro protetto di SmartScreen cede da dentro https://plainsec.com/stories/a2b1b8bc-1a71-414c-800e-8f661148e547/joint-disruption-week-hit-west-african-scam-hubs PlainSec en 2026-10-14T03:39:22Z Joint Disruption Week hit West African scam hubs https://plainsec.com/it/stories/a2b1b8bc-1a71-414c-800e-8f661148e547/joint-disruption-week-hit-west-african-scam-hubs PlainSec it 2026-10-14T03:39:22Z Raid e takedown svelano l'industria delle truffe in Africa occidentale https://plainsec.com/stories/e3a68936-e234-4c8f-a378-de524b5940fc/third-party-vpn-control-left-a-bank-exposed-for-months PlainSec en 2026-10-14T06:02:12Z Third-party VPN control left a bank exposed for months https://plainsec.com/it/stories/e3a68936-e234-4c8f-a378-de524b5940fc/third-party-vpn-control-left-a-bank-exposed-for-months PlainSec it 2026-10-14T06:02:12Z Un gateway VPN di terzi ha tenuto aperta la banca per mesi https://plainsec.com/stories/9c84721a-4294-4639-8669-54e9b4c035d8/ftc-moves-to-stop-sextortion-help-fraud PlainSec en 2026-10-14T03:39:22Z FTC moves to stop sextortion-help fraud https://plainsec.com/it/stories/9c84721a-4294-4639-8669-54e9b4c035d8/ftc-moves-to-stop-sextortion-help-fraud PlainSec it 2026-10-14T03:39:22Z Truffavano i clienti già sotto ricatto sessuale https://plainsec.com/stories/4bd6354c-f2c2-4c42-a97a-467005be7816/cisco-nx-api-overflow-threatens-nexus-management-planes PlainSec en 2026-10-13T16:05:28Z Cisco NX-API overflow threatens Nexus management planes https://plainsec.com/it/stories/4bd6354c-f2c2-4c42-a97a-467005be7816/cisco-nx-api-overflow-threatens-nexus-management-planes PlainSec it 2026-10-13T16:05:28Z NX-API di Cisco espone i dispositivi di gestione https://plainsec.com/stories/d04d1c62-f20b-476c-b889-920fbb2672c4/microsoft-bundles-october-fixes-into-one-windows-10-rollup PlainSec en 2026-10-14T06:02:12Z Microsoft bundles October fixes into one Windows 10 rollup https://plainsec.com/it/stories/d04d1c62-f20b-476c-b889-920fbb2672c4/microsoft-bundles-october-fixes-into-one-windows-10-rollup PlainSec it 2026-10-14T06:02:12Z Microsoft compatta ottobre in un solo update per Windows 10 https://plainsec.com/stories/0942302e-b395-4285-b35a-93f591feaf59/mitigation-bypass-in-the-networking-http-component PlainSec en 2026-10-14T04:39:43Z Mozilla patch bundle spans Firefox and Thunderbird tracks https://plainsec.com/it/stories/0942302e-b395-4285-b35a-93f591feaf59/mitigation-bypass-in-the-networking-http-component PlainSec it 2026-10-14T04:39:43Z Mozilla chiude 30 falle su Firefox e Thunderbird https://plainsec.com/stories/e19b980b-5e1c-4985-839d-e27912ab0e47/marklogic-patch-leaves-delegated-admins-too-much-power PlainSec en 2026-10-13T17:06:16Z MarkLogic patch leaves delegated admins too much power https://plainsec.com/it/stories/e19b980b-5e1c-4985-839d-e27912ab0e47/marklogic-patch-leaves-delegated-admins-too-much-power PlainSec it 2026-10-13T17:06:16Z I delegati di MarkLogic possono diventare admin persistenti https://plainsec.com/stories/0ec9a132-2f33-434e-8895-a455f9c99b40/vmware-pairs-monthly-patches-with-paid-guardrails PlainSec en 2026-10-13T13:44:15Z VMware pairs monthly patches with paid guardrails https://plainsec.com/it/stories/0ec9a132-2f33-434e-8895-a455f9c99b40/vmware-pairs-monthly-patches-with-paid-guardrails PlainSec it 2026-10-13T13:44:15Z VMware trasforma il ritmo delle patch in un prodotto a pagamento https://plainsec.com/stories/4d343d20-2199-4f41-92e0-fdbac5ab2bf6/metasploit-framework-web-service-rest-api-missing-authentication-on-credential-endpoints PlainSec en 2026-10-13T04:23:17Z Metasploit API bug exposed saved credentials https://plainsec.com/it/stories/4d343d20-2199-4f41-92e0-fdbac5ab2bf6/metasploit-framework-web-service-rest-api-missing-authentication-on-credential-endpoints PlainSec it 2026-10-13T04:23:17Z Metasploit espone l’intero credential store via API