https://plainsec.com/stories/eea03b09-7a84-4f6d-a0e1-0fe41bce520c/gitlab-code-execution-flaw-reaches-back-to-version-7-0 PlainSec en 2026-10-22T21:06:12Z GitLab code-execution flaw reaches back to version 7.0 https://plainsec.com/it/stories/eea03b09-7a84-4f6d-a0e1-0fe41bce520c/gitlab-code-execution-flaw-reaches-back-to-version-7-0 PlainSec it 2026-10-22T21:06:12Z Versioni GitLab dalla 7.0 esposte a codice remoto senza account https://plainsec.com/stories/ad20577c-d4c8-4127-bd49-0d1ec26fc59b/arista-velocloud-zero-day-puts-orchestration-host-at-risk PlainSec en 2026-10-22T21:06:12Z Arista VeloCloud flaw grants low-privilege users operator access https://plainsec.com/it/stories/ad20577c-d4c8-4127-bd49-0d1ec26fc59b/arista-velocloud-zero-day-puts-orchestration-host-at-risk PlainSec it 2026-10-22T21:06:12Z Il ruolo minimo basta a esporre il piano di gestione SD-WAN https://plainsec.com/stories/d2028bc8-219b-4029-b0d2-06a6c5364d1d/stolen-microsoft-365-tokens-opened-accounts-across-79-organizations PlainSec en 2026-10-23T13:04:34Z Stolen Microsoft 365 tokens opened accounts across 79 organizations https://plainsec.com/it/stories/d2028bc8-219b-4029-b0d2-06a6c5364d1d/stolen-microsoft-365-tokens-opened-accounts-across-79-organizations PlainSec it 2026-10-23T13:04:34Z La MFA superata non impedisce il riuso dei token rubati https://plainsec.com/stories/ebf131a6-02c1-4854-9659-2b9592a6c9b0/danfoss-refrigeration-attacks-spoiled-food-across-700-stores PlainSec en 2026-10-23T02:56:43Z Danfoss refrigeration attacks spoiled food across 700 stores https://plainsec.com/it/stories/ebf131a6-02c1-4854-9659-2b9592a6c9b0/danfoss-refrigeration-attacks-spoiled-food-across-700-stores PlainSec it 2026-10-23T02:56:43Z Il sabotaggio dei frigoriferi ha colpito oltre 700 negozi https://plainsec.com/stories/597c603e-8b13-41a1-ab0c-bf69407e62a0/litellm-mehrere-schwachstellen PlainSec en 2026-10-21T19:44:10Z LiteLLM malware steals credentials beyond the gateway https://plainsec.com/it/stories/597c603e-8b13-41a1-ab0c-bf69407e62a0/litellm-mehrere-schwachstellen PlainSec it 2026-10-21T19:44:10Z LiteLLM compromesso espone credenziali anche nei runner CI https://plainsec.com/stories/8a423f7a-81cb-44fc-a223-68f007677eca/railway-secrets-expose-services-beyond-the-platform PlainSec en 2026-10-22T18:36:43Z Railway secrets linked to drained cryptocurrency wallets https://plainsec.com/it/stories/8a423f7a-81cb-44fc-a223-68f007677eca/railway-secrets-expose-services-beyond-the-platform PlainSec it 2026-10-22T18:36:43Z Wallet di criptovalute svuotati dopo l’esposizione su Railway https://plainsec.com/stories/a9592a2b-1fac-46b4-a12d-5eb6066e657b/uac-0099s-foothold-preceded-sandworms-grain-firm-data-wipe PlainSec en 2026-10-23T13:04:34Z UAC-0099's July foothold preceded Sandworm's September wipe https://plainsec.com/it/stories/a9592a2b-1fac-46b4-a12d-5eb6066e657b/uac-0099s-foothold-preceded-sandworms-grain-firm-data-wipe PlainSec it 2026-10-23T13:04:34Z Due mesi di accesso aprono la strada al wipe di Sandworm https://plainsec.com/stories/5763eb5e-9448-4d2e-9cd6-a83893230573/tor-relay-hijacking-exposed-ssh-passwords-through-fake-host-keys PlainSec en 2026-10-22T14:58:20Z Tor relay hijacking exposed SSH passwords through fake host keys https://plainsec.com/it/stories/5763eb5e-9448-4d2e-9cd6-a83893230573/tor-relay-hijacking-exposed-ssh-passwords-through-fake-host-keys PlainSec it 2026-10-22T14:58:20Z Rimossi i relay Tor, gli host compromessi possono restare infetti https://plainsec.com/stories/01a00d70-6982-4491-9bdb-a8f7f638299c/cisco-security-advisory-cisco-unified-communications-products-security-hardening-release-october-2026 PlainSec en 2026-10-23T13:04:34Z Cisco and HPE patch flaws across network products https://plainsec.com/it/stories/01a00d70-6982-4491-9bdb-a8f7f638299c/cisco-security-advisory-cisco-unified-communications-products-security-hardening-release-october-2026 PlainSec it 2026-10-23T13:04:34Z Cisco e HPE correggono 76 falle, ma il perimetro resta incerto https://plainsec.com/stories/1f879f74-2667-4dc3-914b-eac5a01323fb/opencode-oauth-sign-in-exposed-windows-developers-to-code-execution PlainSec en 2026-10-22T14:58:20Z OpenCode OAuth sign-in exposed Windows developers to code execution https://plainsec.com/it/stories/1f879f74-2667-4dc3-914b-eac5a01323fb/opencode-oauth-sign-in-exposed-windows-developers-to-code-execution PlainSec it 2026-10-22T14:58:20Z Un MCP compromesso può eseguire codice senza allertare gli scanner https://plainsec.com/stories/6553d863-3791-45df-a3d4-26d928f53acc/apt41s-blackx-bootkit-keeps-baton-drop-in-play PlainSec en 2026-10-22T11:05:02Z APT41's BlackX bootkit keeps Baton Drop in play https://plainsec.com/it/stories/6553d863-3791-45df-a3d4-26d928f53acc/apt41s-blackx-bootkit-keeps-baton-drop-in-play PlainSec it 2026-10-22T11:05:02Z La bonifica del sistema operativo può lasciare intatto il bootkit UEFI https://plainsec.com/stories/8ee51990-80e6-4b80-bdee-e6d4b9f4130f/splunk-enterprise-and-soar-flaws-expose-data-and-bypass-controls PlainSec en 2026-10-22T11:05:02Z Splunk Enterprise and SOAR flaws expose data and bypass controls https://plainsec.com/it/stories/8ee51990-80e6-4b80-bdee-e6d4b9f4130f/splunk-enterprise-and-soar-flaws-expose-data-and-bypass-controls PlainSec it 2026-10-22T11:05:02Z Dati sensibili e controlli d’accesso a rischio su Splunk https://plainsec.com/stories/5ad9b4ab-e064-4a58-bc12-1f4113bff256/kiloview-e3-ndi-encoder PlainSec en 2026-10-23T06:55:32Z Kiloview E3 flaws pair unauthenticated changes with root execution https://plainsec.com/it/stories/5ad9b4ab-e064-4a58-bc12-1f4113bff256/kiloview-e3-ndi-encoder PlainSec it 2026-10-23T06:55:32Z Il login non basta a proteggere gli encoder Kiloview E3 https://plainsec.com/stories/dabf72a0-9c4c-4442-852a-0fbf8ae74f52/node-js-risolte-molteplici-vulnerabilit PlainSec en 2026-10-23T13:04:34Z Node.js Brotli flaw reaches code execution on official build https://plainsec.com/it/stories/dabf72a0-9c4c-4442-852a-0fbf8ae74f52/node-js-risolte-molteplici-vulnerabilit PlainSec it 2026-10-23T13:04:34Z Una build ufficiale di Node.js cede al Brotli, ma non sempre https://plainsec.com/stories/61d4f6f7-fbd9-469d-82b7-d41b6e2610ff/connectwise-backup-breach-opened-a-route-into-microsoft-365 PlainSec en 2026-10-22T21:06:12Z ConnectWise backup breach opened a route into Microsoft 365 https://plainsec.com/it/stories/61d4f6f7-fbd9-469d-82b7-d41b6e2610ff/connectwise-backup-breach-opened-a-route-into-microsoft-365 PlainSec it 2026-10-22T21:06:12Z Il backup diventa una porta diretta ai tenant Microsoft 365 https://plainsec.com/stories/998b9e2b-29d5-45f8-9888-ea287dd03897/capcom-breach-exposes-email-details-from-11-7-million-accounts PlainSec en 2026-10-23T10:37:22Z Capcom breach exposes email details from 11.7 million accounts https://plainsec.com/it/stories/998b9e2b-29d5-45f8-9888-ea287dd03897/capcom-breach-exposes-email-details-from-11-7-million-accounts PlainSec it 2026-10-23T10:37:22Z 11,7 milioni di account CAPCOM ID alimentano il rischio di phishing mirato https://plainsec.com/stories/09e7033b-30c4-43b4-8d5a-ad4012d11635/prince-of-persia-resumes-theft-on-us-shared-hosting PlainSec en 2026-10-23T10:37:22Z Prince of Persia resumes theft on US shared hosting https://plainsec.com/it/stories/09e7033b-30c4-43b4-8d5a-ad4012d11635/prince-of-persia-resumes-theft-on-us-shared-hosting PlainSec it 2026-10-23T10:37:22Z Il C&C di Prince of Persia si nasconde tra siti legittimi https://plainsec.com/stories/90f62ba1-ba31-4d93-844d-0b880f5fa302/openai-agents-weakened-monitoring-during-routine-coding-tasks PlainSec en 2026-10-22T02:51:06Z OpenAI agents weakened monitoring beyond their own sessions https://plainsec.com/it/stories/90f62ba1-ba31-4d93-844d-0b880f5fa302/openai-agents-weakened-monitoring-during-routine-coding-tasks PlainSec it 2026-10-22T02:51:06Z Il monitor resta sull’agente, ma può mancare sul software che lancia https://plainsec.com/stories/f2b4a5a2-aea0-4cdb-89e2-be7aa73249bc/bsi-flags-75-vulnerabilities-across-six-atlassian-products PlainSec en 2026-10-21T17:22:04Z Atlassian's bulletin spans 75 dependency flaws across products https://plainsec.com/it/stories/f2b4a5a2-aea0-4cdb-89e2-be7aa73249bc/bsi-flags-75-vulnerabilities-across-six-atlassian-products PlainSec it 2026-10-21T17:22:04Z Settantacinque CVE, ma il bollettino Atlassian non copre tutto https://plainsec.com/stories/a29aa9ac-a756-44fd-80ff-5579493b72ca/oracle-java-sandboxing-may-not-contain-critical-jsse-flaw PlainSec en 2026-10-22T11:05:02Z Oracle Java sandboxing may not contain critical JSSE flaw https://plainsec.com/it/stories/a29aa9ac-a756-44fd-80ff-5579493b72ca/oracle-java-sandboxing-may-not-contain-critical-jsse-flaw PlainSec it 2026-10-22T11:05:02Z La sandbox Java non garantisce isolamento dalla falla JSSE https://plainsec.com/stories/235cb5a7-402d-4e14-80c3-2a61837e23ee/stolen-updraftcentral-keys-backdoor-connected-wordpress-sites PlainSec en 2026-10-22T04:29:59Z Stolen UpdraftCentral keys backdoor connected WordPress sites https://plainsec.com/it/stories/235cb5a7-402d-4e14-80c3-2a61837e23ee/stolen-updraftcentral-keys-backdoor-connected-wordpress-sites PlainSec it 2026-10-22T04:29:59Z Le chiavi rubate danno accesso amministrativo ai siti WordPress https://plainsec.com/stories/155c05b8-0c6f-48dd-a10e-38ce2da40ee1/bluehammer-can-turn-windows-user-access-into-system PlainSec en 2026-10-21T19:44:10Z BlueHammer can turn Windows user access into SYSTEM https://plainsec.com/it/stories/155c05b8-0c6f-48dd-a10e-38ce2da40ee1/bluehammer-can-turn-windows-user-access-into-system PlainSec it 2026-10-21T19:44:10Z La versione vulnerabile non dice se BlueHammer sia sfruttabile https://plainsec.com/stories/c8515f70-0441-49c9-9e47-3fec2dfa7d90/signal-call-bug-can-leave-microphone-and-camera-active PlainSec en 2026-10-22T11:05:02Z Signal call bug can leave microphone and camera active https://plainsec.com/it/stories/c8515f70-0441-49c9-9e47-3fec2dfa7d90/signal-call-bug-can-leave-microphone-and-camera-active PlainSec it 2026-10-22T11:05:02Z Chiudere una chiamata Signal potrebbe non fermare microfono e videocamera https://plainsec.com/stories/f93b2bec-83cb-4f17-81de-fb9cb980514b/risolte-vulnerabilit-in-google-chrome PlainSec en 2026-10-21T21:00:53Z Chrome 156 closes 353 flaws across desktop browsers https://plainsec.com/it/stories/f93b2bec-83cb-4f17-81de-fb9cb980514b/risolte-vulnerabilit-in-google-chrome PlainSec it 2026-10-21T21:00:53Z Chrome 156 chiude 353 falle, senza sfruttamenti segnalati