https://plainsec.com/stories/3072cd2d-e0f1-485d-a3b4-c758d2ebfea3/ivanti-connect-secure-chain-reaches-root-without-an-account PlainSec en 2026-10-31T10:22:40Z Ivanti Connect Secure chain reaches root without an account https://plainsec.com/it/stories/3072cd2d-e0f1-485d-a3b4-c758d2ebfea3/ivanti-connect-secure-chain-reaches-root-without-an-account PlainSec it 2026-10-31T10:22:40Z La catena Ivanti porta a root senza credenziali https://plainsec.com/stories/9597d075-a1c7-41b6-8651-5899797f1754/claude-code-extension-update-leaves-host-backdoors-behind PlainSec en 2026-10-30T13:22:11Z Claude Code extension update leaves host backdoors behind https://plainsec.com/it/stories/9597d075-a1c7-41b6-8651-5899797f1754/claude-code-extension-update-leaves-host-backdoors-behind PlainSec it 2026-10-30T13:22:11Z L’aggiornamento non cancella la backdoor lasciata da Claude Code https://plainsec.com/stories/ad147c54-3082-47b0-b538-27fcb4d2004b/vapor-panda-scales-espionage-by-seeking-falcon-gaps PlainSec en 2026-10-30T03:47:57Z Vapor Panda scales espionage with nine confirmed footholds https://plainsec.com/it/stories/ad147c54-3082-47b0-b538-27fcb4d2004b/vapor-panda-scales-espionage-by-seeking-falcon-gaps PlainSec it 2026-10-30T03:47:57Z Nove intrusioni confermate portano Vapor Panda oltre il targeting https://plainsec.com/stories/c2133d0a-dc19-4bab-94cc-1a9aa1dfcbf2/wordpress-update-race-draws-18-500-attack-requests PlainSec en 2026-10-30T14:27:23Z WordPress update race draws 18,500 attack requests https://plainsec.com/it/stories/c2133d0a-dc19-4bab-94cc-1a9aa1dfcbf2/wordpress-update-race-draws-18-500-attack-requests PlainSec it 2026-10-30T14:27:23Z Oltre 18.500 richieste inseguono la finestra di aggiornamento di WordPress https://plainsec.com/stories/8b6f3036-9e02-493a-b014-09bf15666d7f/risolte-vulnerabilit-in-prodotti-teamviewer PlainSec en 2026-10-30T10:11:17Z TeamViewer flaw puts support technicians’ own machines at risk https://plainsec.com/it/stories/8b6f3036-9e02-493a-b014-09bf15666d7f/risolte-vulnerabilit-in-prodotti-teamviewer PlainSec it 2026-10-30T10:11:17Z La sessione remota può colpire il computer del tecnico https://plainsec.com/stories/5bd22fe6-4839-4426-b516-f3a28bacace3/drupal-commerce-core-authorization-flaw-is-actively-exploited PlainSec en 2026-10-30T10:11:17Z Drupal Commerce Core authorization flaw is actively exploited https://plainsec.com/it/stories/5bd22fe6-4839-4426-b516-f3a28bacace3/drupal-commerce-core-authorization-flaw-is-actively-exploited PlainSec it 2026-10-30T10:11:17Z Lo sfruttamento attivo apre le funzioni di vendita di Drupal https://plainsec.com/stories/0453f768-1083-4f08-868d-2971064314f8/anthropic-model-links-platform-flaws-into-working-exploits PlainSec en 2026-10-30T20:26:10Z Claude built a Linux exploit for zero-click remote root https://plainsec.com/it/stories/0453f768-1083-4f08-868d-2971064314f8/anthropic-model-links-platform-flaws-into-working-exploits PlainSec it 2026-10-30T20:26:10Z In 53 minuti Claude porta una falla Linux a root remoto https://plainsec.com/stories/616c0352-bfd8-481c-8f50-99ec28a1323e/help-desk-impersonation-makes-remote-access-look-like-support PlainSec en 2026-10-30T10:11:17Z Fake help desks gain remote access through routine support https://plainsec.com/it/stories/616c0352-bfd8-481c-8f50-99ec28a1323e/help-desk-impersonation-makes-remote-access-look-like-support PlainSec it 2026-10-30T10:11:17Z Nomi e email bastano a trasformare l'assistenza in accesso remoto https://plainsec.com/stories/025e2e18-4a26-4bad-bafd-7aacc7a44efe/binance-incident-puts-stablecoin-issuers-in-the-response-path PlainSec en 2026-10-30T03:47:57Z Binance breach widens beyond a laptop entry https://plainsec.com/it/stories/025e2e18-4a26-4bad-bafd-7aacc7a44efe/binance-incident-puts-stablecoin-issuers-in-the-response-path PlainSec it 2026-10-30T03:47:57Z Binance scopre più varchi: il furto supera il perimetro del laptop https://plainsec.com/stories/662de111-1bc1-424c-b8fa-e45fdbf1919a/cisco-vpn-flaw-can-restart-firewalls-during-active-exploitation PlainSec en 2026-10-31T04:21:14Z Cisco VPN flaw can restart firewalls during active exploitation https://plainsec.com/it/stories/662de111-1bc1-424c-b8fa-e45fdbf1919a/cisco-vpn-flaw-can-restart-firewalls-during-active-exploitation PlainSec it 2026-10-31T04:21:14Z Una richiesta remota può fermare i firewall Cisco esposti https://plainsec.com/stories/ec5d2744-145c-4048-89ac-d19aef32e555/cursor-marketplace-listed-claude-code-2-1-313-without-registry-traces PlainSec en 2026-10-31T00:22:11Z Cursor auto-updates could spread a trojanized Claude Code extension https://plainsec.com/it/stories/ec5d2744-145c-4048-89ac-d19aef32e555/cursor-marketplace-listed-claude-code-2-1-313-without-registry-traces PlainSec it 2026-10-31T00:22:11Z L’auto-aggiornamento di Cursor porta Claude Code malevolo agli sviluppatori https://plainsec.com/stories/45cba266-4b91-493c-bf2e-0dfa2d9a447c/cisa-flags-patched-gitlab-flaw-as-actively-exploited PlainSec en 2026-10-30T16:27:47Z CISA flags patched GitLab flaw as actively exploited https://plainsec.com/it/stories/45cba266-4b91-493c-bf2e-0dfa2d9a447c/cisa-flags-patched-gitlab-flaw-as-actively-exploited PlainSec it 2026-10-30T16:27:47Z GitLab: la falla di gravità massima è già sfruttata https://plainsec.com/stories/d105a4ff-5e12-45d9-be96-5f0088667221/polymarket-s-third-party-breach-put-user-wallets-at-risk PlainSec en 2026-10-30T13:22:11Z DebugBear snippet let attackers trade through Polymarket sessions https://plainsec.com/it/stories/d105a4ff-5e12-45d9-be96-5f0088667221/polymarket-s-third-party-breach-put-user-wallets-at-risk PlainSec it 2026-10-30T13:22:11Z Una sessione Polymarket aperta è bastata a spostare i fondi https://plainsec.com/stories/4c195a91-10fe-47a8-8fbc-94f2c3504ce6/chainalysis-breach-exposes-customer-identities-and-roles PlainSec en 2026-10-31T14:21:39Z Chainalysis breach exposes customer identities and roles https://plainsec.com/it/stories/4c195a91-10fe-47a8-8fbc-94f2c3504ce6/chainalysis-breach-exposes-customer-identities-and-roles PlainSec it 2026-10-31T14:21:39Z Nomi e ruoli esposti rendono credibili le impersonazioni mirate https://plainsec.com/stories/6eb2375a-4e04-4609-ba9c-751d42e08602/aggiornamenti-di-sicurezza-per-prodotti-juniper-networks PlainSec en 2026-10-30T16:27:47Z Juniper fixes 18 Session Smart flaws, including root command execution https://plainsec.com/it/stories/6eb2375a-4e04-4609-ba9c-751d42e08602/aggiornamenti-di-sicurezza-per-prodotti-juniper-networks PlainSec it 2026-10-30T16:27:47Z Diciotto falle Juniper toccano anche la gestione della rete https://plainsec.com/stories/68476ce3-27d4-4676-b949-2b53660dc01f/netamloader-uses-trusted-files-to-target-custom-windows-10 PlainSec en 2026-10-30T13:22:11Z NetamLoader uses trusted files to target custom Windows 10 https://plainsec.com/it/stories/68476ce3-27d4-4676-b949-2b53660dc01f/netamloader-uses-trusted-files-to-target-custom-windows-10 PlainSec it 2026-10-30T13:22:11Z Componenti firmati come copertura per NetamLoader su Windows 10 governativo https://plainsec.com/stories/9d21b4b2-9963-4a65-ba88-8d59410cbb1a/teams-impersonation-split-into-two-paths-to-privileged-access PlainSec en 2026-10-30T20:26:10Z Teams impersonation split into two paths to privileged access https://plainsec.com/it/stories/9d21b4b2-9963-4a65-ba88-8d59410cbb1a/teams-impersonation-split-into-two-paths-to-privileged-access PlainSec it 2026-10-30T20:26:10Z Una sessione di assistenza può aprire l’accesso al dominio https://plainsec.com/stories/02bc2d65-9ae4-4ab1-8a32-70fa88457543/ap-twitter-hijack-triggered-a-136-billion-market-shock PlainSec en 2026-10-31T12:22:07Z AP account takeover carried Assad-linked campaign into markets https://plainsec.com/it/stories/02bc2d65-9ae4-4ab1-8a32-70fa88457543/ap-twitter-hijack-triggered-a-136-billion-market-shock PlainSec it 2026-10-31T12:22:07Z Il takeover dell’AP mosse i mercati in una campagna da 47 obiettivi https://plainsec.com/stories/746f90fc-7e21-4363-80cb-972a913bde41/trezor-warns-cryptobilis-buyers-of-phrase-stealing-implant PlainSec en 2026-10-30T18:30:43Z Trezor warns CryptoBilis buyers of phrase-stealing implant https://plainsec.com/it/stories/746f90fc-7e21-4363-80cb-972a913bde41/trezor-warns-cryptobilis-buyers-of-phrase-stealing-implant PlainSec it 2026-10-30T18:30:43Z Un Trezor apparentemente integro può esporre la frase di recupero https://plainsec.com/stories/e636935a-d2e8-4c51-a97f-12ba0b31fde9/cloudflare-patches-its-edge-as-emudhra-exposure-persists PlainSec en 2026-10-31T06:22:12Z Cloudflare patches its edge as eMudhra exposure persists https://plainsec.com/it/stories/e636935a-d2e8-4c51-a97f-12ba0b31fde9/cloudflare-patches-its-edge-as-emudhra-exposure-persists PlainSec it 2026-10-31T06:22:12Z Le chiavi eMudhra recuperate permettono di falsificare certificati https://plainsec.com/stories/4d20c828-a4e4-4c18-bffb-7eea3786819c/amadeus-breach-exposes-reservation-records-across-two-airlines PlainSec en 2026-10-30T01:38:26Z Amadeus breach exposes 92,000 Japan Airlines customer records https://plainsec.com/it/stories/4d20c828-a4e4-4c18-bffb-7eea3786819c/amadeus-breach-exposes-reservation-records-across-two-airlines PlainSec it 2026-10-30T01:38:26Z La violazione di Amadeus espone 92.000 clienti JAL https://plainsec.com/stories/37bf569a-698b-43bd-8b57-9f2863a29b03/dell-powerprotect-data-domain-os-mehrere-schwachstellen PlainSec en 2026-10-30T10:11:17Z Dell Data Domain flaws expose backup appliances and managed systems https://plainsec.com/it/stories/37bf569a-698b-43bd-8b57-9f2863a29b03/dell-powerprotect-data-domain-os-mehrere-schwachstellen PlainSec it 2026-10-30T10:11:17Z Le falle Dell raggiungono appliance di backup e sistemi gestiti https://plainsec.com/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec en 2026-10-29T15:20:44Z Scanner used 32 AI identities to probe credential files https://plainsec.com/it/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec it 2026-10-29T15:20:44Z I nomi degli agenti AI diventano una porta da testare https://plainsec.com/stories/f7c0f388-b463-44ac-8dc4-d259227688c2/linux-kernel-checksum-flaw-threatens-guest-isolation PlainSec en 2026-10-30T14:27:23Z Linux kernel checksum flaw threatens guest isolation https://plainsec.com/it/stories/f7c0f388-b463-44ac-8dc4-d259227688c2/linux-kernel-checksum-flaw-threatens-guest-isolation PlainSec it 2026-10-30T14:27:23Z Una VM non isola l’host dalle falle IPv4 del kernel Linux https://plainsec.com/stories/6edf9ce3-4732-4fa7-a4a9-65cf3a3fdff6/watchguard-fireware-flaws-expose-privileged-cluster-controls PlainSec en 2026-10-29T23:45:10Z WatchGuard Fireware flaws expose privileged cluster controls https://plainsec.com/it/stories/6edf9ce3-4732-4fa7-a4a9-65cf3a3fdff6/watchguard-fireware-flaws-expose-privileged-cluster-controls PlainSec it 2026-10-29T23:45:10Z Un FireCluster può accettare azioni amministrative senza autenticazione