https://plainsec.com/stories/bbafd99e-63a2-4d5d-94ff-af2fd4fbe62f/rank-math-pro-backdoor-outlives-the-plugin PlainSec en 2026-10-19T18:28:57Z Rank Math PRO backdoor outlives the plugin https://plainsec.com/it/stories/bbafd99e-63a2-4d5d-94ff-af2fd4fbe62f/rank-math-pro-backdoor-outlives-the-plugin PlainSec it 2026-10-19T18:28:57Z La backdoor di Rank Math PRO sopravvive all’aggiornamento https://plainsec.com/stories/4ee8d223-ab43-4efb-979f-cc29f91945d9/plex-exploit-chain-drops-miners-and-proxy-software PlainSec en 2026-10-19T16:54:50Z Plex exploit chain drops miners and proxy software https://plainsec.com/it/stories/4ee8d223-ab43-4efb-979f-cc29f91945d9/plex-exploit-chain-drops-miners-and-proxy-software PlainSec it 2026-10-19T16:54:50Z Un server Plex diventa miniera e proxy residenziale https://plainsec.com/stories/65d4bcb1-4a3b-49a9-a41e-db8d6537c31c/opencode-console-breach-puts-linked-model-keys-at-risk PlainSec en 2026-10-19T18:28:57Z OpenCode Console breach puts linked model keys at risk https://plainsec.com/it/stories/65d4bcb1-4a3b-49a9-a41e-db8d6537c31c/opencode-console-breach-puts-linked-model-keys-at-risk PlainSec it 2026-10-19T18:28:57Z OpenCode: un accesso alla Console può esporre chiavi di tre provider https://plainsec.com/stories/639edd39-5163-4782-8fe6-cadbdfd48107/unc7017-turned-aomei-backupper-updates-into-malware-delivery PlainSec en 2026-10-19T22:54:56Z UNC7017 turned AOMEI Backupper updates into malware delivery https://plainsec.com/it/stories/639edd39-5163-4782-8fe6-cadbdfd48107/unc7017-turned-aomei-backupper-updates-into-malware-delivery PlainSec it 2026-10-19T22:54:56Z Il canale fidato di AOMEI Backupper ha distribuito malware https://plainsec.com/stories/655972a6-c4a2-4ec1-99a0-583940d86960/ghostaction-shifts-from-blocked-workflows-to-github-account-theft PlainSec en 2026-10-19T16:54:50Z GhostAction shifts from blocked workflows to GitHub account theft https://plainsec.com/it/stories/655972a6-c4a2-4ec1-99a0-583940d86960/ghostaction-shifts-from-blocked-workflows-to-github-account-theft PlainSec it 2026-10-19T16:54:50Z GitHub blocca il workflow, GhostAction punta agli account dei maintainer https://plainsec.com/stories/a55cdb40-0688-40ec-9526-625a4335a922/pegasus-targeting-reaches-serbian-rector-and-prosecutor PlainSec en 2026-10-19T20:34:35Z Pegasus targeting reaches Serbian rector and suspected prosecutor https://plainsec.com/it/stories/a55cdb40-0688-40ec-9526-625a4335a922/pegasus-targeting-reaches-serbian-rector-and-prosecutor PlainSec it 2026-10-19T20:34:35Z Lo spyware in Serbia raggiunge i vertici dell’università e della procura https://plainsec.com/stories/5396aa45-98eb-48d8-9681-224100f0c4d4/siemens-software-center-flaw-hides-behind-signed-launcher PlainSec en 2026-10-19T20:34:35Z Siemens Software Center flaw hides behind signed launcher https://plainsec.com/it/stories/5396aa45-98eb-48d8-9681-224100f0c4d4/siemens-software-center-flaw-hides-behind-signed-launcher PlainSec it 2026-10-19T20:34:35Z La firma valida non basta contro ClickFix su Siemens Software Center https://plainsec.com/stories/42d975ce-cceb-4d07-ba11-5d35de334834/drupal-field-ui-flaw-can-reopen-through-modules PlainSec en 2026-10-19T08:28:07Z Drupal RCE paths depend on modules around core https://plainsec.com/it/stories/42d975ce-cceb-4d07-ba11-5d35de334834/drupal-field-ui-flaw-can-reopen-through-modules PlainSec it 2026-10-19T08:28:07Z Drupal: la patch del core non chiude ogni via alla RCE https://plainsec.com/stories/44114131-f6f4-4828-98fb-db70cb6920dc/f5-risolte-vulnerabilit-nei-prodotti-nginx PlainSec en 2026-10-19T16:54:50Z F5 patches three NGINX flaws enabling code execution https://plainsec.com/it/stories/44114131-f6f4-4828-98fb-db70cb6920dc/f5-risolte-vulnerabilit-nei-prodotti-nginx PlainSec it 2026-10-19T16:54:50Z Le patch NGINX di F5 coprono anche le installazioni open source https://plainsec.com/stories/83295002-efc7-49e3-9915-ec90de65e453/apex-npm-tools-pair-malware-with-ai-traffic-hijacking PlainSec en 2026-10-19T15:29:37Z Apex npm tools pair malware with AI traffic hijacking https://plainsec.com/it/stories/83295002-efc7-49e3-9915-ec90de65e453/apex-npm-tools-pair-malware-with-ai-traffic-hijacking PlainSec it 2026-10-19T15:29:37Z Il tool IA di Apex devia le richieste e falsifica gli audit https://plainsec.com/stories/10d85c52-3f64-4048-bb14-332f2ee35fbe/siteguard-flaw-gives-attackers-root-access-to-waf-servers PlainSec en 2026-10-18T18:57:38Z SiteGuard flaw gives attackers root access to WAF servers https://plainsec.com/it/stories/10d85c52-3f64-4048-bb14-332f2ee35fbe/siteguard-flaw-gives-attackers-root-access-to-waf-servers PlainSec it 2026-10-18T18:57:38Z Statistiche attive di default aprono SiteGuard ai comandi root