https://plainsec.com/stories/f99c661a-3cd6-49c7-bf6e-044312ba6835/cisco-secure-email-gateway-flaw-can-spread-in-clusters PlainSec en 2026-10-16T04:37:15Z Cisco Secure Email Gateway flaw can spread in clusters https://plainsec.com/it/stories/f99c661a-3cd6-49c7-bf6e-044312ba6835/cisco-secure-email-gateway-flaw-can-spread-in-clusters PlainSec it 2026-10-16T04:37:15Z Un filtro mail compromesso può aprire l’intero cluster https://plainsec.com/stories/daf279db-2e44-4b79-a479-f807f73b904a/silent-lynx-turns-winrar-into-startup-persistence PlainSec en 2026-10-16T04:37:15Z Silent Lynx turns WinRAR into startup persistence https://plainsec.com/it/stories/daf279db-2e44-4b79-a479-f807f73b904a/silent-lynx-turns-winrar-into-startup-persistence PlainSec it 2026-10-16T04:37:15Z Silent Lynx trasforma WinRAR in accesso persistente https://plainsec.com/stories/f0790967-9b05-47bc-819e-cff1b2ba4808/langflow-flaw-lets-any-account-run-server-commands PlainSec en 2026-10-15T08:35:46Z Langflow flaw lets any account run server commands https://plainsec.com/it/stories/f0790967-9b05-47bc-819e-cff1b2ba4808/langflow-flaw-lets-any-account-run-server-commands PlainSec it 2026-10-15T08:35:46Z Langflow, un account autenticato basta per eseguire comandi sul server https://plainsec.com/stories/70cd8f32-ec76-4094-b77e-7fe116cee79e/fortimanager-compromise-exposed-managed-firewalls PlainSec en 2026-10-16T06:57:24Z FortiManager compromise exposed managed firewalls https://plainsec.com/it/stories/70cd8f32-ec76-4094-b77e-7fe116cee79e/fortimanager-compromise-exposed-managed-firewalls PlainSec it 2026-10-16T06:57:24Z FortiManager trasforma 500 FortiGate in un unico varco https://plainsec.com/stories/d55e900a-3f21-4873-ac43-d8f73f7a2ea5/adtech-redirects-targeted-ads-into-spyware-infrastructure PlainSec en 2026-10-15T18:41:51Z Adtech routes spyware onto managed phones https://plainsec.com/it/stories/d55e900a-3f21-4873-ac43-d8f73f7a2ea5/adtech-redirects-targeted-ads-into-spyware-infrastructure PlainSec it 2026-10-15T18:41:51Z Gli annunci targetizzati diventano un canale per spyware invisibile https://plainsec.com/stories/c74d1eaa-755b-4a52-8d56-deb068869a76/microsoft-seizes-phishing-market-behind-1b-messages PlainSec en 2026-10-14T18:11:15Z Microsoft expands Yam Store takedown across cloud accounts https://plainsec.com/it/stories/c74d1eaa-755b-4a52-8d56-deb068869a76/microsoft-seizes-phishing-market-behind-1b-messages PlainSec it 2026-10-14T18:11:15Z La frode passa dagli account cloud, non dai domini https://plainsec.com/stories/3c92ddb0-8610-4acb-8a5b-8b6e79de2355/atlassian-file-read-flaw-hits-internet-facing-servers PlainSec en 2026-10-16T04:37:15Z Atlassian file read flaw hits internet-facing servers https://plainsec.com/it/stories/3c92ddb0-8610-4acb-8a5b-8b6e79de2355/atlassian-file-read-flaw-hits-internet-facing-servers PlainSec it 2026-10-16T04:37:15Z Un file letto senza login basta a esporre Atlassian https://plainsec.com/stories/319d0298-b73d-4c67-8de8-41ed859acbff/unit-42-finds-ai-written-espionage-on-linux-hosts PlainSec en 2026-10-16T02:42:16Z Unit 42 finds AI-written espionage on Linux hosts https://plainsec.com/it/stories/319d0298-b73d-4c67-8de8-41ed859acbff/unit-42-finds-ai-written-espionage-on-linux-hosts PlainSec it 2026-10-16T02:42:16Z Linux governativi colpiti da malware scritto anche dall’AI https://plainsec.com/stories/9ab08efc-2b90-4a6c-b3b0-52ec69464c2e/uk-legal-aid-breach-reaches-back-to-1978 PlainSec en 2026-10-15T13:11:18Z UK legal aid breach reaches back to 1978 https://plainsec.com/it/stories/9ab08efc-2b90-4a6c-b3b0-52ec69464c2e/uk-legal-aid-breach-reaches-back-to-1978 PlainSec it 2026-10-15T13:11:18Z Archivi legali rubati, l’esposizione dura decenni https://plainsec.com/stories/aa8e91c0-fe67-4925-836d-bc9bc3e34087/n0n-leak-site-points-to-shared-port-access PlainSec en 2026-10-15T17:09:19Z n0n leak site points to shared port access https://plainsec.com/it/stories/aa8e91c0-fe67-4925-836d-bc9bc3e34087/n0n-leak-site-points-to-shared-port-access PlainSec it 2026-10-15T17:09:19Z Un punto d’ingresso comune può esporre 38 operatori portuali https://plainsec.com/stories/d4401b01-6dc0-445a-bc2c-a64c94db3051/juniper-junos-advisory-ties-bugs-to-routing-control PlainSec en 2026-10-15T17:09:19Z Juniper Junos advisory ties bugs to routing control https://plainsec.com/it/stories/d4401b01-6dc0-445a-bc2c-a64c94db3051/juniper-junos-advisory-ties-bugs-to-routing-control PlainSec it 2026-10-15T17:09:19Z Juniper espone il piano di controllo dei router https://plainsec.com/stories/43937a50-a955-469b-9466-103ef945e2e6/collabora-built-in-code-flaw-plants-web-shells PlainSec en 2026-10-14T23:13:08Z Collabora built-in CODE flaw plants web shells https://plainsec.com/it/stories/43937a50-a955-469b-9466-103ef945e2e6/collabora-built-in-code-flaw-plants-web-shells PlainSec it 2026-10-14T23:13:08Z Lo stop del server locale apre la porta alla web shell https://plainsec.com/stories/47a15365-09b0-46c8-8f41-36026102f862/spip-odt2spip-lets-redacteurs-reach-code-execution PlainSec en 2026-10-16T04:37:15Z SPIP odt2spip lets redacteurs reach code execution https://plainsec.com/it/stories/47a15365-09b0-46c8-8f41-36026102f862/spip-odt2spip-lets-redacteurs-reach-code-execution PlainSec it 2026-10-16T04:37:15Z Un upload può diventare codice sul server SPIP https://plainsec.com/stories/ed55a27a-8404-40fa-9862-1b04630de572/refrigeration-controller-attack-widens-across-french-supermarkets PlainSec en 2026-10-15T17:09:19Z Refrigeration controller attack widens across French supermarkets https://plainsec.com/it/stories/ed55a27a-8404-40fa-9862-1b04630de572/refrigeration-controller-attack-widens-across-french-supermarkets PlainSec it 2026-10-15T17:09:19Z La falla colpisce una flotta più ampia dei soli controller Danfoss https://plainsec.com/stories/8d83f201-2ee9-4c1b-8fed-0c4a73aa6bc7/beyondtrust-appliance-bug-turned-support-into-a-foothold PlainSec en 2026-10-16T04:37:15Z BeyondTrust appliance bug turned support into a foothold https://plainsec.com/it/stories/8d83f201-2ee9-4c1b-8fed-0c4a73aa6bc7/beyondtrust-appliance-bug-turned-support-into-a-foothold PlainSec it 2026-10-16T04:37:15Z Un remote-support trusted diventa il punto d’appoggio dell’attaccante https://plainsec.com/stories/3f08ea9d-bc08-4eda-bcd8-312060bf8919/pwnescape-breaks-linux-vm-isolation-at-the-host-layer PlainSec en 2026-10-16T02:42:16Z PwnEscape breaks Linux VM isolation at the host layer https://plainsec.com/it/stories/3f08ea9d-bc08-4eda-bcd8-312060bf8919/pwnescape-breaks-linux-vm-isolation-at-the-host-layer PlainSec it 2026-10-16T02:42:16Z La sandbox condivisa cede sotto una falla del kernel Linux https://plainsec.com/stories/518b0dba-cc2c-45f4-8e51-a7bb66f1a90e/xoscar-deserialization-flaw-opens-xinference-clusters PlainSec en 2026-10-16T02:42:16Z Xoscar deserialization flaw opens Xinference clusters https://plainsec.com/it/stories/518b0dba-cc2c-45f4-8e51-a7bb66f1a90e/xoscar-deserialization-flaw-opens-xinference-clusters PlainSec it 2026-10-16T02:42:16Z Un port aperto in Xoscar basta a prendere il controllo del cluster https://plainsec.com/stories/c0e7c5d2-b920-47c5-ac4c-abe0798acd16/hirudo-swaps-bank-apps-for-patched-copies PlainSec en 2026-10-14T14:57:19Z Hirudo swaps bank apps for patched copies https://plainsec.com/it/stories/c0e7c5d2-b920-47c5-ac4c-abe0798acd16/hirudo-swaps-bank-apps-for-patched-copies PlainSec it 2026-10-14T14:57:19Z Hirudo trasforma la banca in un’app complice https://plainsec.com/stories/4db320b2-1df3-4480-a62b-d156dd677384/uat-6275-mixes-lures-with-public-exploits PlainSec en 2026-10-14T18:11:15Z UAT-6275 mixes lures with public exploits https://plainsec.com/it/stories/4db320b2-1df3-4480-a62b-d156dd677384/uat-6275-mixes-lures-with-public-exploits PlainSec it 2026-10-14T18:11:15Z La campagna UAT-6275 allarga il bersaglio a FortiWeb e Windows esposti https://plainsec.com/stories/79df5cfb-b970-453c-860a-7d7eb03f6063/danfoss-controllers-let-attackers-spoil-supermarket-stock PlainSec en 2026-10-14T18:11:15Z Danfoss controllers turned refrigeration into a remote switch https://plainsec.com/it/stories/79df5cfb-b970-453c-860a-7d7eb03f6063/danfoss-controllers-let-attackers-spoil-supermarket-stock PlainSec it 2026-10-14T18:11:15Z La flotta frigorifera diventa un interruttore fisico remoto https://plainsec.com/stories/2464a0b3-8fea-4b24-8cd2-a56d1392c5c8/chrome-exploit-chain-shrank-to-six-days PlainSec en 2026-10-14T18:11:15Z Chrome exploit chain shrank to six days https://plainsec.com/it/stories/2464a0b3-8fea-4b24-8cd2-a56d1392c5c8/chrome-exploit-chain-shrank-to-six-days PlainSec it 2026-10-14T18:11:15Z Chrome cade in sei giorni sotto una catena AI https://plainsec.com/stories/8d381e1f-cb9d-4d04-aa47-434c7fc28895/ad-networks-become-a-zero-click-spyware-channel PlainSec en 2026-10-15T14:33:33Z Ad networks become a zero-click spyware channel https://plainsec.com/it/stories/8d381e1f-cb9d-4d04-aa47-434c7fc28895/ad-networks-become-a-zero-click-spyware-channel PlainSec it 2026-10-15T14:33:33Z Gli annunci online diventano un canale per lo spyware zero-click https://plainsec.com/stories/f0b225f7-8121-44d3-bc36-0e5628a66b74/booz-allen-test-shows-ai-can-outrun-ot-defenses PlainSec en 2026-10-14T23:04:57Z Booz Allen test shows AI can outrun OT defenses https://plainsec.com/it/stories/f0b225f7-8121-44d3-bc36-0e5628a66b74/booz-allen-test-shows-ai-can-outrun-ot-defenses PlainSec it 2026-10-14T23:04:57Z L’AI chiude la catena d’attacco OT in pochi minuti https://plainsec.com/stories/05eb277b-fdb7-401c-a924-131e2dc7f467/pan-os-authenticated-remote-code-execution-rce-in-the-management-interface PlainSec en 2026-10-15T14:33:33Z CISA fast-tracks exploited flaws in Palo Alto, Cisco, Ahsay https://plainsec.com/it/stories/05eb277b-fdb7-401c-a924-131e2dc7f467/pan-os-authenticated-remote-code-execution-rce-in-the-management-interface PlainSec it 2026-10-15T14:33:33Z CISA impone due giorni per chiudere tre falle critiche https://plainsec.com/stories/3761c6f3-c833-418b-9048-7e4119969911/d-link-dir-868l-hnap-cgi-cgibin-system-os-command-injection PlainSec en 2026-10-15T10:52:33Z D-Link DIR-868L PoC leaves EOL routers exposed https://plainsec.com/it/stories/3761c6f3-c833-418b-9048-7e4119969911/d-link-dir-868l-hnap-cgi-cgibin-system-os-command-injection PlainSec it 2026-10-15T10:52:33Z PoC pubblico rende irrecuperabili i DIR-868L esposti https://plainsec.com/stories/e284e64c-7891-4919-a376-13096e3d5296/ghostaction-turns-github-actions-into-a-secret-trap PlainSec en 2026-10-15T10:52:33Z GhostAction turns GitHub Actions into a secret trap https://plainsec.com/it/stories/e284e64c-7891-4919-a376-13096e3d5296/ghostaction-turns-github-actions-into-a-secret-trap PlainSec it 2026-10-15T10:52:33Z 30.000 repo GitHub sotto attacco via GitHub Actions https://plainsec.com/stories/952d6d0e-112f-4dc8-8f76-5ed02b854d51/adobe-ships-a-broad-patch-wave-across-10-products PlainSec en 2026-10-14T18:11:15Z Adobe ships a broad patch wave across 10 products https://plainsec.com/it/stories/952d6d0e-112f-4dc8-8f76-5ed02b854d51/adobe-ships-a-broad-patch-wave-across-10-products PlainSec it 2026-10-14T18:11:15Z Adobe corregge 140 falle, molte nel componente condiviso https://plainsec.com/stories/3bcd9bdd-0974-48f7-a3c0-46cb5e98ba98/romulus-turns-clickfix-into-reusable-malware-infrastructure PlainSec en 2026-10-14T18:11:15Z ROMULUS turns ClickFix into reusable malware infrastructure https://plainsec.com/it/stories/3bcd9bdd-0974-48f7-a3c0-46cb5e98ba98/romulus-turns-clickfix-into-reusable-malware-infrastructure PlainSec it 2026-10-14T18:11:15Z ClickFix diventa infrastruttura riusabile per più malware https://plainsec.com/stories/ab0b8ffd-87fb-4969-83fe-99619dc4287f/wiz-says-scanner-output-needs-runtime-context PlainSec en 2026-10-15T01:03:05Z Wiz says scanner output needs runtime context https://plainsec.com/it/stories/ab0b8ffd-87fb-4969-83fe-99619dc4287f/wiz-says-scanner-output-needs-runtime-context PlainSec it 2026-10-15T01:03:05Z Scanner AppSec pieni di rumore, non di priorità https://plainsec.com/stories/0edc4375-b48c-4755-a60d-ece2744ec2ab/mps-officers-used-auror-without-privacy-checks PlainSec en 2026-10-15T08:35:46Z MPS officers used Auror without privacy checks https://plainsec.com/it/stories/0edc4375-b48c-4755-a60d-ece2744ec2ab/mps-officers-used-auror-without-privacy-checks PlainSec it 2026-10-15T08:35:46Z Una piattaforma esterna ha aggirato i controlli della Met Police https://plainsec.com/stories/84fc39e0-e491-4d58-ac23-145516d978b7/cross-site-scripting-xss-vulnerability-in-sap-netweaver-application-server-abap-applications-based-on-sap-gui-for-html PlainSec en 2026-10-14T18:11:15Z SAP patch day centers on a credential-stealing SDK flaw https://plainsec.com/it/stories/84fc39e0-e491-4d58-ac23-145516d978b7/cross-site-scripting-xss-vulnerability-in-sap-netweaver-application-server-abap-applications-based-on-sap-gui-for-html PlainSec it 2026-10-14T18:11:15Z Il bug del Cloud SDK espone credenziali tra tenant SAP https://plainsec.com/stories/c87b9505-3a33-44f0-9ed2-15fe44d75bc0/reflectiz-ai-agent-proves-otp-login-bypass PlainSec en 2026-10-14T14:57:19Z Reflectiz AI agent proves OTP login bypass https://plainsec.com/it/stories/c87b9505-3a33-44f0-9ed2-15fe44d75bc0/reflectiz-ai-agent-proves-otp-login-bypass PlainSec it 2026-10-14T14:57:19Z Un agente AI completa un bypass OTP su un sito live https://plainsec.com/stories/db5365a2-cbd1-4c42-b7c5-8357b1747874/picus-says-agentic-pentests-miss-exposed-services PlainSec en 2026-10-15T01:03:05Z Picus says agentic pentests miss exposed services https://plainsec.com/it/stories/db5365a2-cbd1-4c42-b7c5-8357b1747874/picus-says-agentic-pentests-miss-exposed-services PlainSec it 2026-10-15T01:03:05Z L’agentic pentesting accelera, ma lascia buchi di copertura https://plainsec.com/stories/9dd8775c-c752-4408-99b0-6138cf6dd53d/curl-upload-flaw-can-let-servers-corrupt-clients PlainSec en 2026-10-14T19:31:57Z curl upload flaw can let servers corrupt clients https://plainsec.com/it/stories/9dd8775c-c752-4408-99b0-6138cf6dd53d/curl-upload-flaw-can-let-servers-corrupt-clients PlainSec it 2026-10-14T19:31:57Z Un upload HTTP/2 può trasformare curl in un punto di esecuzione https://plainsec.com/stories/91976c02-941c-439f-8b8a-fe4380c120d5/package-managers-leave-repository-tampering-too-much-trust PlainSec en 2026-10-14T14:57:19Z Package managers leave repository tampering too much trust https://plainsec.com/it/stories/91976c02-941c-439f-8b8a-fe4380c120d5/package-managers-leave-repository-tampering-too-much-trust PlainSec it 2026-10-14T14:57:19Z I package manager non bloccano la manomissione a monte https://plainsec.com/stories/17e5e7f4-d678-4f29-8007-4bf82249f349/linux-vhost-flaw-crosses-from-local-root-to-guest-escape PlainSec en 2026-10-14T10:54:56Z Linux vhost flaw crosses from local root to guest escape https://plainsec.com/it/stories/17e5e7f4-d678-4f29-8007-4bf82249f349/linux-vhost-flaw-crosses-from-local-root-to-guest-escape PlainSec it 2026-10-14T10:54:56Z Vghost apre una via dal guest al host Linux https://plainsec.com/stories/4dacfb7b-6b91-4a04-bf02-47e02c2aa787/microsoft-smartscreen-enclave-flaw-breaks-windows-trust PlainSec en 2026-10-14T12:26:54Z Microsoft SmartScreen enclave flaw breaks Windows trust https://plainsec.com/it/stories/4dacfb7b-6b91-4a04-bf02-47e02c2aa787/microsoft-smartscreen-enclave-flaw-breaks-windows-trust PlainSec it 2026-10-14T12:26:54Z Il perimetro protetto di SmartScreen cede da dentro