https://plainsec.com/stories/dd8bd376-1907-4786-8c76-38952ce33667/gitlab-path-traversal-puts-servers-at-risk PlainSec en 2026-09-25T19:04:26Z GitLab Flaw Hits KEV Under Active Exploitation https://plainsec.com/it/stories/dd8bd376-1907-4786-8c76-38952ce33667/gitlab-path-traversal-puts-servers-at-risk PlainSec it 2026-09-25T19:04:26Z GitLab passa da advisory a emergenza operativa https://plainsec.com/stories/459db3dc-8d6e-4eb3-a699-f7f7a4415247/roundcube-flaw-turns-mail-logins-into-server-control PlainSec en 2026-09-25T04:21:14Z Roundcube SQL Injection Hits Before Login https://plainsec.com/it/stories/459db3dc-8d6e-4eb3-a699-f7f7a4415247/roundcube-flaw-turns-mail-logins-into-server-control PlainSec it 2026-09-25T04:21:14Z Roundcube passa da abuso di account a compromissione pre-login https://plainsec.com/stories/6ebf0af2-8590-4227-b593-3d4adfe6397a/cisa-flags-teamcity-as-a-ransomware-entry-point PlainSec en 2026-09-25T04:21:14Z CISA Flags TeamCity as a Ransomware Entry Point https://plainsec.com/it/stories/6ebf0af2-8590-4227-b593-3d4adfe6397a/cisa-flags-teamcity-as-a-ransomware-entry-point PlainSec it 2026-09-25T04:21:14Z TeamCity diventa un varco per i ransomware https://plainsec.com/stories/a685b742-5382-4a31-8481-c1a451495095/openai-agent-climbed-past-medicare-portal-controls PlainSec en 2026-09-25T04:21:14Z OpenAI Agent Crossed Portal Boundaries in Australia https://plainsec.com/it/stories/a685b742-5382-4a31-8481-c1a451495095/openai-agent-climbed-past-medicare-portal-controls PlainSec it 2026-09-25T04:21:14Z L’agente di OpenAI ha oltrepassato il confine dei dati pubblici https://plainsec.com/stories/6b6348ca-ba20-472e-a045-0f023ed6324e/bitget-wallet-theft-exposes-custody-risk PlainSec en 2026-09-25T12:33:52Z Bitget’s Backend Became the Thief https://plainsec.com/it/stories/6b6348ca-ba20-472e-a045-0f023ed6324e/bitget-wallet-theft-exposes-custody-risk PlainSec it 2026-09-25T12:33:52Z Bitget, il backend che approva i prelievi è stato tradito https://plainsec.com/stories/53596929-d845-44e4-be3c-643c2b7baf1d/fake-payroll-apps-hand-over-the-machine PlainSec en 2026-09-25T19:04:26Z Fake Payroll Apps Hand Over the Machine https://plainsec.com/it/stories/53596929-d845-44e4-be3c-643c2b7baf1d/fake-payroll-apps-hand-over-the-machine PlainSec it 2026-09-25T19:04:26Z Un falso desktop per paghe apre la strada alla diversione degli stipendi https://plainsec.com/stories/7f25fb45-0c0c-4854-ada0-cff21e458c5e/gemini-test-escaped-into-real-company-systems PlainSec en 2026-09-25T04:21:14Z Gemini Test Escaped Into Real Company Systems https://plainsec.com/it/stories/7f25fb45-0c0c-4854-ada0-cff21e458c5e/gemini-test-escaped-into-real-company-systems PlainSec it 2026-09-25T04:21:14Z Gemini esce dal test e tocca sistemi reali https://plainsec.com/stories/4b18fa0e-f2f7-4c55-9aee-160a24ea2465/proofpoint-finds-teamfiltration-on-forgotten-microsoft-365-accounts PlainSec en 2026-09-25T04:21:14Z Proofpoint Finds TeamFiltration on Forgotten Microsoft 365 Accounts https://plainsec.com/it/stories/4b18fa0e-f2f7-4c55-9aee-160a24ea2465/proofpoint-finds-teamfiltration-on-forgotten-microsoft-365-accounts PlainSec it 2026-09-25T04:21:14Z Account di servizio dimenticati aprono Microsoft 365 https://plainsec.com/stories/bb7a3201-07b7-4aae-ab88-b2bf36fc6252/remcontrol-uses-iptv-ads-to-reach-android-users PlainSec en 2026-09-25T04:21:14Z RemControl Uses Fake TVTap to Disarm Android Safety Checks https://plainsec.com/it/stories/bb7a3201-07b7-4aae-ab88-b2bf36fc6252/remcontrol-uses-iptv-ads-to-reach-android-users PlainSec it 2026-09-25T04:21:14Z Play Protect viene aggirato dal falso TVTap di RemControl https://plainsec.com/stories/58e87901-8cec-4476-9466-a8e839e0dfc3/rapid7-finds-zimbra-can-rewrite-collaboration-trust PlainSec en 2026-09-25T08:21:20Z Rapid7 Finds Zimbra Can Rewrite Collaboration Trust https://plainsec.com/it/stories/58e87901-8cec-4476-9466-a8e839e0dfc3/rapid7-finds-zimbra-can-rewrite-collaboration-trust PlainSec it 2026-09-25T08:21:20Z Zimbra trasforma la casella in una fabbrica di falsi https://plainsec.com/stories/9982227b-5bb6-44f4-928e-914b2ba3ee04/carbonato-turns-exposed-docker-daemons-into-botnet-hosts PlainSec en 2026-09-25T04:21:14Z Carbonato Turns Exposed Docker Daemons into Botnet Hosts https://plainsec.com/it/stories/9982227b-5bb6-44f4-928e-914b2ba3ee04/carbonato-turns-exposed-docker-daemons-into-botnet-hosts PlainSec it 2026-09-25T04:21:14Z Docker esposti trasformati in controllo remoto per botnet https://plainsec.com/stories/35ab93e1-9a0f-4c2d-8500-d4822c5a58b3/storm-3168-used-azure-identities-to-wreck-tenants PlainSec en 2026-09-25T19:04:26Z Storm-3168 Used Azure Identities to Wreck Tenants https://plainsec.com/it/stories/35ab93e1-9a0f-4c2d-8500-d4822c5a58b3/storm-3168-used-azure-identities-to-wreck-tenants PlainSec it 2026-09-25T19:04:26Z Azure: due service principal compromessi aprono la strada alla distruzione https://plainsec.com/stories/7e26529a-fe3e-46d2-b804-e007573e55ac/rydox-guilty-plea-confirms-a-disrupted-market PlainSec en 2026-09-25T15:50:02Z Rydox Plea Confirms a Real Marketplace Takedown https://plainsec.com/it/stories/7e26529a-fe3e-46d2-b804-e007573e55ac/rydox-guilty-plea-confirms-a-disrupted-market PlainSec it 2026-09-25T15:50:02Z Rydox finisce in aula: il sequestro chiude il market https://plainsec.com/stories/004970be-ebe8-4f70-97ad-b875568247f3/solarwinds-fixes-two-unauthenticated-rce-flaws PlainSec en 2026-09-25T06:25:37Z SolarWinds Fixes Two Unauthenticated RCE Flaws https://plainsec.com/it/stories/004970be-ebe8-4f70-97ad-b875568247f3/solarwinds-fixes-two-unauthenticated-rce-flaws PlainSec it 2026-09-25T06:25:37Z SolarWinds corregge due RCE, ma non ovunque conta allo stesso modo https://plainsec.com/stories/3316d19a-f376-4966-bb55-3e0207e11f8b/recorded-future-sees-russia-blending-cyber-and-physical-pressure PlainSec en 2026-09-25T10:34:37Z Recorded Future Sees Russia Blending Cyber and Physical Pressure https://plainsec.com/it/stories/3316d19a-f376-4966-bb55-3e0207e11f8b/recorded-future-sees-russia-blending-cyber-and-physical-pressure PlainSec it 2026-09-25T10:34:37Z La guerra ibrida russa si sposta su cyber, droni e disinformazione https://plainsec.com/stories/00c76ee4-6c5f-4b41-a349-510b1ac7644e/doj-says-oxygen-forensics-hid-russian-control PlainSec en 2026-09-25T04:21:14Z DOJ Says Oxygen Forensics Hid Russian Control https://plainsec.com/it/stories/00c76ee4-6c5f-4b41-a349-510b1ac7644e/doj-says-oxygen-forensics-hid-russian-control PlainSec it 2026-09-25T04:21:14Z La fiducia nel vendor cade quando l’owner è nascosto https://plainsec.com/stories/d8541b5e-cc98-4380-a046-b13389151ac9/hugging-face-study-shows-agents-chain-access-into-lateral-movement PlainSec en 2026-09-25T12:33:52Z Gemini Test Shows Prompts Don’t Stop Actions https://plainsec.com/it/stories/d8541b5e-cc98-4380-a046-b13389151ac9/hugging-face-study-shows-agents-chain-access-into-lateral-movement PlainSec it 2026-09-25T12:33:52Z I prompt non bastano quando l’agente può agire https://plainsec.com/stories/6721938a-41a4-4c5c-96fc-0e4c5bf0b126/macsync-swaps-scripts-for-native-macos-binaries PlainSec en 2026-09-25T04:21:14Z MacSync Swaps Scripts for Native macOS Binaries https://plainsec.com/it/stories/6721938a-41a4-4c5c-96fc-0e4c5bf0b126/macsync-swaps-scripts-for-native-macos-binaries PlainSec it 2026-09-25T04:21:14Z MacSync cambia pelle e sfugge ai controlli statici https://plainsec.com/stories/d710f008-35b8-4b54-984b-66bc27ba98be/cisa-flags-certification-barriers-in-election-patching PlainSec en 2026-09-25T16:30:54Z CISA Flags Certification Barriers in Election Patching https://plainsec.com/it/stories/d710f008-35b8-4b54-984b-66bc27ba98be/cisa-flags-certification-barriers-in-election-patching PlainSec it 2026-09-25T16:30:54Z Piano CISA: la certificazione rallenta le patch https://plainsec.com/stories/610d68c8-9e3f-42c1-a326-0d309ef5034f/pamstealer-moves-payload-decryption-off-the-mac PlainSec en 2026-09-25T16:30:54Z PamStealer Moves Payload Decryption Off the Mac https://plainsec.com/it/stories/610d68c8-9e3f-42c1-a326-0d309ef5034f/pamstealer-moves-payload-decryption-off-the-mac PlainSec it 2026-09-25T16:30:54Z PamStealer sposta la chiave del payload sul server https://plainsec.com/stories/503d0afc-feaf-4828-8f7f-8994ef575405/storm-2570-repeats-its-trail-across-ransomware-brands PlainSec en 2026-09-25T04:21:14Z Storm-2570 Repeats Its Trail Across Ransomware Brands https://plainsec.com/it/stories/503d0afc-feaf-4828-8f7f-8994ef575405/storm-2570-repeats-its-trail-across-ransomware-brands PlainSec it 2026-09-25T04:21:14Z Storm-2570 tradisce il brand, non il proprio metodo https://plainsec.com/stories/c5ac9382-9c99-4687-9728-c399cb4073f1/salesforce-agentforce-flaws-turn-leads-into-attackers PlainSec en 2026-09-25T04:21:14Z Salesforce Agentforce Flaws Turn Leads Into Attackers https://plainsec.com/it/stories/c5ac9382-9c99-4687-9728-c399cb4073f1/salesforce-agentforce-flaws-turn-leads-into-attackers PlainSec it 2026-09-25T04:21:14Z Un lead pubblico diventa il canale di controllo di Agentforce https://plainsec.com/stories/838a0020-bfa0-44d9-87fb-42d123c72546/wordpress-comment-bug-could-escalate-to-server-control PlainSec en 2026-09-25T04:21:14Z WordPress Exploits Move From PoC to Takeover https://plainsec.com/it/stories/838a0020-bfa0-44d9-87fb-42d123c72546/wordpress-comment-bug-could-escalate-to-server-control PlainSec it 2026-09-25T04:21:14Z WordPress passa da bug a takeover sui siti esposti https://plainsec.com/stories/c002965e-c424-4d48-adc5-688589839426/n0n-threatens-the-backups-ransomware-depends-on PlainSec en 2026-09-25T04:21:14Z n0n Threatens the Backups Ransomware Depends On https://plainsec.com/it/stories/c002965e-c424-4d48-adc5-688589839426/n0n-threatens-the-backups-ransomware-depends-on PlainSec it 2026-09-25T04:21:14Z n0n alza la posta: minaccia i backup per fermare il ripristino https://plainsec.com/stories/fdd54f60-eba9-48de-a9bd-4210e6184c9a/cisa-and-fbi-warn-on-ics-integrator-access PlainSec en 2026-09-25T04:21:14Z CISA and FBI Warn on ICS Integrator Access https://plainsec.com/it/stories/fdd54f60-eba9-48de-a9bd-4210e6184c9a/cisa-and-fbi-warn-on-ics-integrator-access PlainSec it 2026-09-25T04:21:14Z Gli integrator diventano il punto debole dell’OT https://plainsec.com/stories/611d372a-fbba-4564-9681-d83955a9abba/clickfix-moves-malware-into-trusted-shells PlainSec en 2026-09-25T10:34:37Z ClickFix Moves Malware Into Trusted Shells https://plainsec.com/it/stories/611d372a-fbba-4564-9681-d83955a9abba/clickfix-moves-malware-into-trusted-shells PlainSec it 2026-09-25T10:34:37Z ClickFix sposta l’esecuzione fuori dal browser https://plainsec.com/stories/c78f139b-0eb3-453a-a3a9-9fe9e641280b/senators-push-voluntary-telecom-cyber-standards PlainSec en 2026-09-25T04:21:14Z Warner and Cruz Revive Telecom Security Push https://plainsec.com/it/stories/c78f139b-0eb3-453a-a3a9-9fe9e641280b/senators-push-voluntary-telecom-cyber-standards PlainSec it 2026-09-25T04:21:14Z Dopo Salt Typhoon, il settore telecom resta su base volontaria https://plainsec.com/stories/bfb286ce-f8ac-4bc2-9314-5f58fef033c9/gitlab-issue-email-token-exposes-code-and-ci PlainSec en 2026-09-25T08:21:20Z GitLab Issue Email Token Exposes Code and CI https://plainsec.com/it/stories/bfb286ce-f8ac-4bc2-9314-5f58fef033c9/gitlab-issue-email-token-exposes-code-and-ci PlainSec it 2026-09-25T08:21:20Z La mail di GitLab diventa una credenziale riutilizzabile https://plainsec.com/stories/a2287a2a-3f4a-438c-8e72-ea2209b03d63/kyiv-strikes-took-down-shared-isp-redundancy PlainSec en 2026-09-25T04:21:14Z Kyiv Strikes Took Down Shared ISP Redundancy https://plainsec.com/it/stories/a2287a2a-3f4a-438c-8e72-ea2209b03d63/kyiv-strikes-took-down-shared-isp-redundancy PlainSec it 2026-09-25T04:21:14Z Raid su Kyiv: cade la ridondanza di più ISP https://plainsec.com/stories/59ec8056-fac0-4257-a120-55a2553e1c7f/tu-graz-finds-cross-os-file-event-side-channel PlainSec en 2026-09-25T04:21:14Z TU Graz Finds Cross-OS File-Event Side Channel https://plainsec.com/it/stories/59ec8056-fac0-4257-a120-55a2553e1c7f/tu-graz-finds-cross-os-file-event-side-channel PlainSec it 2026-09-25T04:21:14Z Un side channel vecchio di decenni tradisce le attività utente https://plainsec.com/stories/3b6f1e5b-7f9e-4149-b30f-2020c7323551/wiz-s-ai-scans-find-public-exposures-first PlainSec en 2026-09-25T06:25:37Z Wiz’s AI Scans Find Public Exposures First https://plainsec.com/it/stories/3b6f1e5b-7f9e-4149-b30f-2020c7323551/wiz-s-ai-scans-find-public-exposures-first PlainSec it 2026-09-25T06:25:37Z L’AI trova prima le esposizioni nei servizi critici https://plainsec.com/stories/6fdec92d-7e76-4754-874a-86f173764989/shinyhunters-claims-fbi-portal-led-to-govcloud-data-theft PlainSec en 2026-09-24T04:21:17Z ShinyHunters Claim FBIjobs Records Theft via PeopleSoft https://plainsec.com/it/stories/6fdec92d-7e76-4754-874a-86f173764989/shinyhunters-claims-fbi-portal-led-to-govcloud-data-theft PlainSec it 2026-09-24T04:21:17Z Da sito sfigurato a fuga di dati sugli agenti https://plainsec.com/stories/c9efafa4-81d5-42f4-a7e2-e9d940882951/mikrotik-routeros-chain-enabled-unauthenticated-takeover PlainSec en 2026-09-24T04:21:17Z MikroTik RouterOS Chain Enabled Unauthenticated Takeover https://plainsec.com/it/stories/c9efafa4-81d5-42f4-a7e2-e9d940882951/mikrotik-routeros-chain-enabled-unauthenticated-takeover PlainSec it 2026-09-24T04:21:17Z MikroTik svela troppo tardi il takeover di RouterOS https://plainsec.com/stories/2644287b-bc32-417f-be60-0ab25397ea89/microsoft-cuts-off-eviltokens-bec-service PlainSec en 2026-09-24T04:21:17Z Microsoft Seizes EvilTokens as AI Drives BEC Fraud https://plainsec.com/it/stories/2644287b-bc32-417f-be60-0ab25397ea89/microsoft-cuts-off-eviltokens-bec-service PlainSec it 2026-09-24T04:21:17Z EvilTokens passa da phishing a caso di polizia https://plainsec.com/stories/9f59836d-f965-4731-bd85-4568b61f6718/d-link-s-unpatched-router-bug-leaves-permanent-exposure PlainSec en 2026-09-24T04:21:17Z D-Link DAP-1360’s RCE Leaves No Patch Path https://plainsec.com/it/stories/9f59836d-f965-4731-bd85-4568b61f6718/d-link-s-unpatched-router-bug-leaves-permanent-exposure PlainSec it 2026-09-24T04:21:17Z Un PoC pubblico rende permanente l’esposizione dei D-Link DAP-1360 https://plainsec.com/stories/0d27bee4-e88e-4840-b561-95fa2c4495b1/closedquorum-outsources-malware-decisions-to-llms PlainSec en 2026-09-24T04:21:17Z CLOSEDQUORUM Moves Malware Decisions Into LLMs https://plainsec.com/it/stories/0d27bee4-e88e-4840-b561-95fa2c4495b1/closedquorum-outsources-malware-decisions-to-llms PlainSec it 2026-09-24T04:21:17Z CLOSEDQUORUM sposta nel malware le decisioni post-compromissione https://plainsec.com/stories/18d60fc4-4955-4999-9cd9-df29beca1b72/ai-tests-cross-into-real-world-authority PlainSec en 2026-09-24T06:26:38Z AI Tests Cross Into Real-World Authority https://plainsec.com/it/stories/18d60fc4-4955-4999-9cd9-df29beca1b72/ai-tests-cross-into-real-world-authority PlainSec it 2026-09-24T06:26:38Z Quando l'assistente prende iniziativa, il rischio cambia https://plainsec.com/stories/8d031dd6-45a3-47e5-9472-b1d4fbb2d413/memtensor-packages-steal-developer-secrets-on-install PlainSec en 2026-09-24T04:21:17Z MemTensor Packages Steal Developer Secrets on Install https://plainsec.com/it/stories/8d031dd6-45a3-47e5-9472-b1d4fbb2d413/memtensor-packages-steal-developer-secrets-on-install PlainSec it 2026-09-24T04:21:17Z MemTensor trasforma i pacchetti in un furto di credenziali https://plainsec.com/stories/ebeb4dfe-d2bc-4a65-9df4-01bcc377d721/hpe-ale-advisory-bundles-ten-management-flaws PlainSec en 2026-09-24T04:21:17Z HPE ALE Advisory Bundles Ten Management Flaws https://plainsec.com/it/stories/ebeb4dfe-d2bc-4a65-9df4-01bcc377d721/hpe-ale-advisory-bundles-ten-management-flaws PlainSec it 2026-09-24T04:21:17Z Un solo upgrade chiude dieci falle in HPE ALE https://plainsec.com/stories/ed6571c2-df37-480b-959a-52f0fba8b29c/depthfirst-exploit-puts-ubuntu-containers-on-alert PlainSec en 2026-09-24T13:28:39Z DepthFirst Exploit Puts Ubuntu Containers on Alert https://plainsec.com/it/stories/ed6571c2-df37-480b-959a-52f0fba8b29c/depthfirst-exploit-puts-ubuntu-containers-on-alert PlainSec it 2026-09-24T13:28:39Z Un socket locale basta a prendere il controllo dell’host https://plainsec.com/stories/bf2eb57e-beb3-43e1-bd36-a27f1684f654/ofcom-tests-pornhub-s-apple-based-age-gate PlainSec en 2026-09-24T04:21:17Z Ofcom Tests Pornhub’s Apple-Based Age Gate https://plainsec.com/it/stories/bf2eb57e-beb3-43e1-bd36-a27f1684f654/ofcom-tests-pornhub-s-apple-based-age-gate PlainSec it 2026-09-24T04:21:17Z Ofcom mette alla prova la verifica dell'età di Pornhub https://plainsec.com/stories/f5126866-7c06-4014-935c-d38de8242f07/adobe-campaign-classic-fixed-pre-auth-critical-flaws PlainSec en 2026-09-24T15:17:58Z Adobe Campaign Classic Fixed Pre-Auth Critical Flaws https://plainsec.com/it/stories/f5126866-7c06-4014-935c-d38de8242f07/adobe-campaign-classic-fixed-pre-auth-critical-flaws PlainSec it 2026-09-24T15:17:58Z Campaign Classic esposto prima del login https://plainsec.com/stories/6c64c095-4a90-4e84-970d-55638bb798f8/relay-networks-hide-ai-abuse-at-scale PlainSec en 2026-09-24T04:21:17Z Relay Networks Hide AI Abuse at Scale https://plainsec.com/it/stories/6c64c095-4a90-4e84-970d-55638bb798f8/relay-networks-hide-ai-abuse-at-scale PlainSec it 2026-09-24T04:21:17Z Una rete di relay maschera l’accesso cinese ai modelli frontier https://plainsec.com/stories/a2e55ace-5a90-4764-80af-9e328c219a53/hashicorp-registry-abuse-extends-the-graphalgo-campaign PlainSec en 2026-09-24T04:21:17Z HashiCorp Registry Abuse Extends the Graphalgo Campaign https://plainsec.com/it/stories/a2e55ace-5a90-4764-80af-9e328c219a53/hashicorp-registry-abuse-extends-the-graphalgo-campaign PlainSec it 2026-09-24T04:21:17Z I registri fidati diventano il canale del malware https://plainsec.com/stories/61d67478-5e9d-4209-8694-60a1421f7bb4/elsevier-redirect-hijack-reached-three-portals PlainSec en 2026-09-24T04:21:17Z Elsevier Redirect Hijack Reached Three Portals https://plainsec.com/it/stories/61d67478-5e9d-4209-8694-60a1421f7bb4/elsevier-redirect-hijack-reached-three-portals PlainSec it 2026-09-24T04:21:17Z Tre portali Elsevier dirottati verso LAPSUS$ https://plainsec.com/stories/315c2269-e469-40d3-a941-a33eb07482bf/dark-sourcery-poisons-ai-search-results PlainSec en 2026-09-24T04:21:17Z Dark Sourcery Poisons AI Search Results https://plainsec.com/it/stories/315c2269-e469-40d3-a941-a33eb07482bf/dark-sourcery-poisons-ai-search-results PlainSec it 2026-09-24T04:21:17Z Gli assistenti AI diventano un canale di phishing https://plainsec.com/stories/86edda1b-3554-4850-b215-be09326760f2/ryuk-member-gets-two-year-prison-term PlainSec en 2026-09-24T10:23:45Z Ryuk Operator Sentenced After Ukraine Extradition https://plainsec.com/it/stories/86edda1b-3554-4850-b215-be09326760f2/ryuk-member-gets-two-year-prison-term PlainSec it 2026-09-24T10:23:45Z Un operatore Ryuk estradato finisce in carcere per due anni https://plainsec.com/stories/97fc793c-c632-4862-ab01-db3922876539/firefox-add-on-hid-cookie-theft-until-v1-4 PlainSec en 2026-09-24T04:21:17Z Firefox Add-on Hid Cookie Theft Until v1.4 https://plainsec.com/it/stories/97fc793c-c632-4862-ab01-db3922876539/firefox-add-on-hid-cookie-theft-until-v1-4 PlainSec it 2026-09-24T04:21:17Z Una estensione pulita diventa un dirottatore Google https://plainsec.com/stories/c6def235-a1e5-4192-97af-af1e5f27f61b/defender-zero-day-can-freeze-antivirus-updates PlainSec en 2026-09-23T04:21:23Z BigDiskBuster Keeps Defender Stuck on Old Signatures https://plainsec.com/it/stories/c6def235-a1e5-4192-97af-af1e5f27f61b/defender-zero-day-can-freeze-antivirus-updates PlainSec it 2026-09-23T04:21:23Z Defender resta acceso, ma le firme si bloccano https://plainsec.com/stories/f6436e55-7650-4437-b9fd-9321d014c7b1/colorado-water-utilities-saw-quiet-ot-tampering PlainSec en 2026-09-23T04:21:23Z Colorado Water Utilities Saw Quiet OT Tampering https://plainsec.com/it/stories/f6436e55-7650-4437-b9fd-9321d014c7b1/colorado-water-utilities-saw-quiet-ot-tampering PlainSec it 2026-09-23T04:21:23Z In Colorado gli attaccanti cambiano i comandi senza spegnere l'impianto https://plainsec.com/stories/c1f83d39-ab19-4724-ab95-dd3ec18d20be/indexed-btree-hides-npm-malware-until-runtime PlainSec en 2026-09-23T04:21:23Z Indexed-btree Hid npm Malware in Runtime Code https://plainsec.com/it/stories/c1f83d39-ab19-4724-ab95-dd3ec18d20be/indexed-btree-hides-npm-malware-until-runtime PlainSec it 2026-09-23T04:21:23Z Indexed-btree aggira i controlli npm nel runtime https://plainsec.com/stories/5541ffe8-0a4c-473c-83b9-70a5e6f69131/crowdsec-leak-traced-to-stale-github-access PlainSec en 2026-09-23T04:21:23Z CrowdSec Leak Tied to Stale GitHub Token https://plainsec.com/it/stories/5541ffe8-0a4c-473c-83b9-70a5e6f69131/crowdsec-leak-traced-to-stale-github-access PlainSec it 2026-09-23T04:21:23Z Il leak passa da un token OAuth rimasto vivo https://plainsec.com/stories/30528af3-d6c9-43a1-9399-409964c7763f/forescout-shows-segmentation-often-hides-lateral-paths PlainSec en 2026-09-23T04:21:23Z Forescout Shows Segmentation Often Hides Lateral Paths https://plainsec.com/it/stories/30528af3-d6c9-43a1-9399-409964c7763f/forescout-shows-segmentation-often-hides-lateral-paths PlainSec it 2026-09-23T04:21:23Z La segmentazione nominale allarga la superficie d’attacco https://plainsec.com/stories/bc4b9a13-a28f-49dd-82b5-b4cec5028a16/bigcommerce-finds-app-breach-reaching-storefronts PlainSec en 2026-09-23T04:21:23Z BigCommerce Finds App Breach Reaching Storefronts https://plainsec.com/it/stories/bc4b9a13-a28f-49dd-82b5-b4cec5028a16/bigcommerce-finds-app-breach-reaching-storefronts PlainSec it 2026-09-23T04:21:23Z Un account terzo apre la porta a più storefront BigCommerce https://plainsec.com/stories/e84514f7-5a34-4f6d-a7fc-a3a8fe0b246f/ncc-group-sees-record-august-ransomware-volume PlainSec en 2026-09-24T02:21:17Z NCC Group Sees Record August Ransomware Volume https://plainsec.com/it/stories/e84514f7-5a34-4f6d-a7fc-a3a8fe0b246f/ncc-group-sees-record-august-ransomware-volume PlainSec it 2026-09-24T02:21:17Z Il ransomware tocca il picco e colpisce l'industria https://plainsec.com/stories/85b8929d-d7f4-4ebc-a87b-10bde7ee0060/siemens-edge-management-reset-flaw-enables-account-takeover PlainSec en 2026-09-23T06:33:49Z Siemens Edge Management Reset Flaw Enables Account Takeover https://plainsec.com/it/stories/85b8929d-d7f4-4ebc-a87b-10bde7ee0060/siemens-edge-management-reset-flaw-enables-account-takeover PlainSec it 2026-09-23T06:33:49Z Il reset password diventa takeover su Siemens Industrial Edge Management https://plainsec.com/stories/2e432885-350d-402d-ad9e-3033ad0c6e0b/cisa-pushes-decoys-to-catch-living-off-the-land-intrusions PlainSec en 2026-09-23T15:22:47Z CISA Turns Decoys Into Practical Detection https://plainsec.com/it/stories/2e432885-350d-402d-ad9e-3033ad0c6e0b/cisa-pushes-decoys-to-catch-living-off-the-land-intrusions PlainSec it 2026-09-23T15:22:47Z CISA porta i decoy nella detection pratica https://plainsec.com/stories/59e55a76-749d-425d-8595-0ecd1b5204c2/siemens-kernel-flaw-spans-simatic-and-siplus-fleets PlainSec en 2026-09-23T08:22:03Z Siemens Kernel Flaw Spans SIMATIC and SIPLUS Fleets https://plainsec.com/it/stories/59e55a76-749d-425d-8595-0ecd1b5204c2/siemens-kernel-flaw-spans-simatic-and-siplus-fleets PlainSec it 2026-09-23T08:22:03Z Un solo difetto Linux mette in fila molti SIMATIC https://plainsec.com/stories/27666508-c040-4735-8b74-5f7336754dc5/openai-shortens-the-ai-parity-window PlainSec en 2026-09-23T04:21:23Z OpenAI Shortens the AI Parity Window https://plainsec.com/it/stories/27666508-c040-4735-8b74-5f7336754dc5/openai-shortens-the-ai-parity-window PlainSec it 2026-09-23T04:21:23Z Il vantaggio per i difensori ha una scadenza https://plainsec.com/stories/3cc553d0-88f6-49ad-bf86-a0c2f2275d15/macfinger-uses-legitimate-sites-to-target-macos PlainSec en 2026-09-23T04:21:23Z Macfinger Uses Legitimate Sites to Target macOS https://plainsec.com/it/stories/3cc553d0-88f6-49ad-bf86-a0c2f2275d15/macfinger-uses-legitimate-sites-to-target-macos PlainSec it 2026-09-23T04:21:23Z La verifica finta che colpisce solo macOS https://plainsec.com/stories/97992da5-1b69-47e5-9b7d-d754c81a04d8/gartner-says-deepfakes-are-hitting-recovery-flows PlainSec en 2026-09-23T08:22:03Z Gartner Says Deepfakes Are Hitting Recovery Flows https://plainsec.com/it/stories/97992da5-1b69-47e5-9b7d-d754c81a04d8/gartner-says-deepfakes-are-hitting-recovery-flows PlainSec it 2026-09-23T08:22:03Z I deepfake spostano il rischio su identità e recovery https://plainsec.com/stories/990b8b04-d97b-418f-a264-9dcf7570fbc1/sidecopy-shifts-espionage-lures-toward-indian-academia PlainSec en 2026-09-23T08:22:03Z SideCopy Shifts Espionage Lures Toward Indian Academia https://plainsec.com/it/stories/990b8b04-d97b-418f-a264-9dcf7570fbc1/sidecopy-shifts-espionage-lures-toward-indian-academia PlainSec it 2026-09-23T08:22:03Z SideCopy allarga la raccolta alle università indiane https://plainsec.com/stories/ed636c00-0190-43aa-87b2-f3ac14f45527/siemens-ois-file-upload-flaw-can-reach-root PlainSec en 2026-09-23T08:22:03Z Siemens OIS File Upload Flaw Can Reach Root https://plainsec.com/it/stories/ed636c00-0190-43aa-87b2-f3ac14f45527/siemens-ois-file-upload-flaw-can-reach-root PlainSec it 2026-09-23T08:22:03Z Siemens corregge un file upload che può dare root https://plainsec.com/stories/341d7d74-f3b1-4c4b-be19-46ae19182df0/akamai-sees-ai-crawlers-crossing-into-transactions PlainSec en 2026-09-23T04:21:23Z Akamai Sees AI Crawlers Crossing Into Transactions https://plainsec.com/it/stories/341d7d74-f3b1-4c4b-be19-46ae19182df0/akamai-sees-ai-crawlers-crossing-into-transactions PlainSec it 2026-09-23T04:21:23Z I crawler AI entrano nei login, non solo nelle pagine