https://plainsec.com/stories/37ef9eb2-fc92-4fb5-bacb-341deb9fa1fa/cling-uses-stun-traffic-to-hide-router-exploits PlainSec en 2026-10-05T14:52:30Z ClingSTUN Switched From Discovery to Active Exploitation https://plainsec.com/it/stories/37ef9eb2-fc92-4fb5-bacb-341deb9fa1fa/cling-uses-stun-traffic-to-hide-router-exploits PlainSec it 2026-10-05T14:52:30Z ClingSTUN si allarga e nasconde il C2 nel traffico STUN https://plainsec.com/stories/8c424ac7-5508-47a0-acee-f5703abee3a0/hfs-cookie-flaw-opens-a-remote-code-execution-path PlainSec en 2026-10-06T15:53:55Z HFS Cookie Flaw Opens a Remote Code Execution Path https://plainsec.com/it/stories/8c424ac7-5508-47a0-acee-f5703abee3a0/hfs-cookie-flaw-opens-a-remote-code-execution-path PlainSec it 2026-10-06T15:53:55Z HFS trasforma un cookie bug in esecuzione remota https://plainsec.com/stories/6f6df11c-7fda-49ad-9042-d48c9a3c12b5/nikkei-mailbox-hijack-reached-journalistic-sources PlainSec en 2026-10-06T10:46:34Z Nikkei Mailbox Hijack Reached Journalistic Sources https://plainsec.com/it/stories/6f6df11c-7fda-49ad-9042-d48c9a3c12b5/nikkei-mailbox-hijack-reached-journalistic-sources PlainSec it 2026-10-06T10:46:34Z La mailbox di Nikkei diventa una piattaforma di phishing https://plainsec.com/stories/c3f4a1d8-c2e7-491c-8801-3d62b8628f91/langflow-exploitation-turns-ai-builders-into-secret-vaults PlainSec en 2026-10-06T12:45:09Z Langflow Exploitation Turns AI Builders Into Secret Vaults https://plainsec.com/it/stories/c3f4a1d8-c2e7-491c-8801-3d62b8628f91/langflow-exploitation-turns-ai-builders-into-secret-vaults PlainSec it 2026-10-06T12:45:09Z Langflow trasforma un bug in furto di credenziali https://plainsec.com/stories/1ef39c14-d4ae-4a5c-8a98-cd1f14353a68/clickfix-uses-browser-cache-to-evade-run-limits PlainSec en 2026-10-06T08:30:07Z ClickFix Uses Browser Cache to Evade Run Limits https://plainsec.com/it/stories/1ef39c14-d4ae-4a5c-8a98-cd1f14353a68/clickfix-uses-browser-cache-to-evade-run-limits PlainSec it 2026-10-06T08:30:07Z ClickFix usa la cache del browser per aggirare Run https://plainsec.com/stories/fc69f824-6c1c-4467-8d88-1ea68084d0e1/blinder-tunnel-hides-iranian-intrusions-in-github PlainSec en 2026-10-06T15:53:55Z Blinder Tunnel Hides Iranian Intrusions in GitHub https://plainsec.com/it/stories/fc69f824-6c1c-4467-8d88-1ea68084d0e1/blinder-tunnel-hides-iranian-intrusions-in-github PlainSec it 2026-10-06T15:53:55Z Blinder Tunnel nasconde il C2 in GitHub https://plainsec.com/stories/d8d656f2-2fec-4735-87b9-fde3161a093b/malfex-malware-still-slips-past-npm-cleanup PlainSec en 2026-10-06T15:53:55Z MALFEX Malware Still Slips Past npm Cleanup https://plainsec.com/it/stories/d8d656f2-2fec-4735-87b9-fde3161a093b/malfex-malware-still-slips-past-npm-cleanup PlainSec it 2026-10-06T15:53:55Z MALFEX resta dentro npm nonostante le rimozioni https://plainsec.com/stories/8c531b9f-56f7-41e9-b259-abea4bdcabab/datadog-spots-bedrock-checks-in-stolen-aws-keys PlainSec en 2026-10-06T15:53:55Z Datadog Spots Bedrock Checks in Stolen AWS Keys https://plainsec.com/it/stories/8c531b9f-56f7-41e9-b259-abea4bdcabab/datadog-spots-bedrock-checks-in-stolen-aws-keys PlainSec it 2026-10-06T15:53:55Z Le AWS key rubate valgono di più se aprono Bedrock https://plainsec.com/stories/31a29641-2103-41aa-9a18-6663d000954e/shinyhunters-claim-peoplesoft-zero-day-broke-fbi-defenses PlainSec en 2026-10-06T04:33:37Z ShinyHunters Claim PeopleSoft Zero-Day Broke FBI Defenses https://plainsec.com/it/stories/31a29641-2103-41aa-9a18-6663d000954e/shinyhunters-claim-peoplesoft-zero-day-broke-fbi-defenses PlainSec it 2026-10-06T04:33:37Z PeopleSoft esposto in rete amplia la portata del zero-day https://plainsec.com/stories/5e215a00-a347-41a6-ade2-c2d941817fd1/dtu-breach-puts-identity-layer-in-the-blast-radius PlainSec en 2026-10-05T12:58:53Z DTU Breach Puts Identity Layer in the Blast Radius https://plainsec.com/it/stories/5e215a00-a347-41a6-ade2-c2d941817fd1/dtu-breach-puts-identity-layer-in-the-blast-radius PlainSec it 2026-10-05T12:58:53Z Un IAM universitario apre la porta ai sistemi collegati https://plainsec.com/stories/fb764d3b-f098-4bb6-a352-b639743c7a85/exchange-authorization-flaw-opens-admin-paths PlainSec en 2026-10-05T14:52:30Z Microsoft’s Exchange Fix Reaches Servers and Online https://plainsec.com/it/stories/fb764d3b-f098-4bb6-a352-b639743c7a85/exchange-authorization-flaw-opens-admin-paths PlainSec it 2026-10-05T14:52:30Z Un account autenticato può leggere altre caselle in Exchange https://plainsec.com/stories/16a0ce1e-8904-4ba5-ad3f-7ac05acf7679/cve-2026-21589-atlassian-bitbucket PlainSec en 2026-10-06T08:30:07Z Atlassian File-Access Bug Reaches Server Secrets https://plainsec.com/it/stories/16a0ce1e-8904-4ba5-ad3f-7ac05acf7679/cve-2026-21589-atlassian-bitbucket PlainSec it 2026-10-06T08:30:07Z Atlassian avverte: Jira Data Center espone file sul server https://plainsec.com/stories/eab710d4-576c-4c0c-9f66-6a3b5fe60c54/wikimedia-says-openai-agents-strained-wikipedia-operations PlainSec en 2026-10-06T15:53:55Z Wikimedia Links OpenAI Agents to Wikipedia Outage https://plainsec.com/it/stories/eab710d4-576c-4c0c-9f66-6a3b5fe60c54/wikimedia-says-openai-agents-strained-wikipedia-operations PlainSec it 2026-10-06T15:53:55Z OpenAI agents mettono sotto stress Wikipedia https://plainsec.com/stories/ab4951de-f526-43a5-be8e-1f11c17e2588/risolte-vulnerabilit-nei-chipset-mediatek PlainSec en 2026-10-06T12:45:09Z MediaTek Bulletin Pushes Risk to OEM Rollouts https://plainsec.com/it/stories/ab4951de-f526-43a5-be8e-1f11c17e2588/risolte-vulnerabilit-nei-chipset-mediatek PlainSec it 2026-10-06T12:45:09Z La patch MediaTek vale solo quando arriva sugli OEM https://plainsec.com/stories/5efe9ff0-419a-480a-b002-5ec2db841896/hpe-ilo-7-bypass-exposes-remote-management PlainSec en 2026-10-06T12:45:09Z HPE iLO 7 Bypass Exposes Remote Management https://plainsec.com/it/stories/5efe9ff0-419a-480a-b002-5ec2db841896/hpe-ilo-7-bypass-exposes-remote-management PlainSec it 2026-10-06T12:45:09Z HPE iLO 7 accetta accessi senza credenziali https://plainsec.com/stories/8a41536b-98fb-4bd8-a929-28ce5015fb86/mcp-marketplaces-sell-trust-without-governance PlainSec en 2026-10-06T15:53:55Z MCP Marketplaces Sell Trust Without Governance https://plainsec.com/it/stories/8a41536b-98fb-4bd8-a929-28ce5015fb86/mcp-marketplaces-sell-trust-without-governance PlainSec it 2026-10-06T15:53:55Z La fiducia cieca nei server MCP apre una superficie d’attacco https://plainsec.com/stories/a004e676-c667-4434-aa81-bd459850fb58/rejetto-hfs-cookie-forgery-opens-remote-code-execution PlainSec en 2026-10-05T10:45:04Z Rejetto HFS Cookie Forgery Opens Remote Code Execution https://plainsec.com/it/stories/a004e676-c667-4434-aa81-bd459850fb58/rejetto-hfs-cookie-forgery-opens-remote-code-execution PlainSec it 2026-10-05T10:45:04Z Il cookie admin di HFS si può falsificare offline https://plainsec.com/stories/5cf6d875-a535-4074-9114-36d3f54a5bee/rapid7-finds-linux-backdoors-hiding-in-mail-traffic PlainSec en 2026-10-05T17:07:40Z Rapid7 Finds Linux Backdoors Hiding in Mail Traffic https://plainsec.com/it/stories/5cf6d875-a535-4074-9114-36d3f54a5bee/rapid7-finds-linux-backdoors-hiding-in-mail-traffic PlainSec it 2026-10-05T17:07:40Z Porta 25 trasformata in copertura per backdoor su appliance di rete https://plainsec.com/stories/5541bca6-8b4e-46c9-9fe3-addcee8f9de1/google-pauses-oss-bug-bounty-over-ai-noise PlainSec en 2026-10-05T14:52:30Z Google Freezes OSS VRP Product Reports https://plainsec.com/it/stories/5541bca6-8b4e-46c9-9fe3-addcee8f9de1/google-pauses-oss-bug-bounty-over-ai-noise PlainSec it 2026-10-05T14:52:30Z L’AI blocca il canale di disclosure di Google https://plainsec.com/stories/0b09ca51-64d9-4d64-8845-410016e53d15/action1-rmm-hides-inside-a-phishing-loader PlainSec en 2026-10-06T12:45:09Z Action1 RMM Hides Inside a Phishing Loader https://plainsec.com/it/stories/0b09ca51-64d9-4d64-8845-410016e53d15/action1-rmm-hides-inside-a-phishing-loader PlainSec it 2026-10-06T12:45:09Z Action1 usato come canale invisibile per il controllo remoto https://plainsec.com/stories/f6f21a14-651c-471d-84f8-3fc1fe27d023/tanker-boardings-exposed-maritime-ot-isolation-gaps PlainSec en 2026-10-05T08:28:23Z Tanker Boardings Exposed Maritime OT Isolation Gaps https://plainsec.com/it/stories/f6f21a14-651c-471d-84f8-3fc1fe27d023/tanker-boardings-exposed-maritime-ot-isolation-gaps PlainSec it 2026-10-05T08:28:23Z L’air gap navale cede davanti a vendor link e USB https://plainsec.com/stories/15eff06c-3f33-474d-9540-dbad91daf72d/atb-extortion-leak-shifts-focus-to-alleged-theft PlainSec en 2026-10-05T23:19:34Z ATB Extortion Leak Shifts Focus to Alleged Theft https://plainsec.com/it/stories/15eff06c-3f33-474d-9540-dbad91daf72d/atb-extortion-leak-shifts-focus-to-alleged-theft PlainSec it 2026-10-05T23:19:34Z Campione di dati pubblicato, la pressione sale su ATB https://plainsec.com/stories/78466b4e-77c8-4b51-8802-ee420832b967/cve-2026-79820-hpe-ilo PlainSec en 2026-10-06T04:33:37Z HPE iLO Auth Bypass Hits the Hardware Plane https://plainsec.com/it/stories/78466b4e-77c8-4b51-8802-ee420832b967/cve-2026-79820-hpe-ilo PlainSec it 2026-10-06T04:33:37Z iLO di HPE espone la console di gestione completa https://plainsec.com/stories/e9dc87ce-2b68-4e86-aa22-19ad356b131c/milk-dragon-moves-retail-phishing-into-marketplace-ads PlainSec en 2026-10-06T04:33:37Z Milk Dragon Moves Retail Phishing Into Marketplace Ads https://plainsec.com/it/stories/e9dc87ce-2b68-4e86-aa22-19ad356b131c/milk-dragon-moves-retail-phishing-into-marketplace-ads PlainSec it 2026-10-06T04:33:37Z Marketplace social usati per rubare carte e OTP https://plainsec.com/stories/6a5fead5-661a-403f-a755-a95f3537e4f0/belarusian-hackers-hid-in-a-russian-health-network PlainSec en 2026-10-06T06:26:17Z Belarusian Hackers Hid in a Russian Health Network https://plainsec.com/it/stories/6a5fead5-661a-403f-a755-a95f3537e4f0/belarusian-hackers-hid-in-a-russian-health-network PlainSec it 2026-10-06T06:26:17Z Una rete sanitaria-trampolino apre il fianco dei fornitori collegati https://plainsec.com/stories/5e66abde-4a45-4bec-9b0c-74c0d0a7af85/datadog-finds-kubernetes-rbac-defaults-still-linger PlainSec en 2026-10-05T18:21:40Z Datadog Finds Kubernetes RBAC Defaults Still Linger https://plainsec.com/it/stories/5e66abde-4a45-4bec-9b0c-74c0d0a7af85/datadog-finds-kubernetes-rbac-defaults-still-linger PlainSec it 2026-10-05T18:21:40Z I default di distro non cancellano i vecchi privilegi in Kubernetes https://plainsec.com/stories/61bf4362-b797-4bed-ae9d-46383821a2f9/doj-arrests-ploutus-developer-in-atm-jackpotting-ring PlainSec en 2026-10-05T17:07:40Z DOJ Arrests Ploutus Developer in ATM Jackpotting Ring https://plainsec.com/it/stories/61bf4362-b797-4bed-ae9d-46383821a2f9/doj-arrests-ploutus-developer-in-atm-jackpotting-ring PlainSec it 2026-10-05T17:07:40Z Arrestato il developer dietro una rete di ATM jackpotting https://plainsec.com/stories/16ae0cf8-ffda-4105-bce7-717b47527e53/watchguard-driver-bug-exposes-kernel-memory PlainSec en 2026-10-05T06:36:15Z WatchGuard Driver Bug Exposes Kernel Memory https://plainsec.com/it/stories/16ae0cf8-ffda-4105-bce7-717b47527e53/watchguard-driver-bug-exposes-kernel-memory PlainSec it 2026-10-05T06:36:15Z WatchGuard: un driver espone memoria del kernel