https://plainsec.com/stories/bbafd99e-63a2-4d5d-94ff-af2fd4fbe62f/rank-math-pro-backdoor-outlives-the-plugin PlainSec en 2026-10-19T18:28:57Z Rank Math PRO backdoor outlives the plugin https://plainsec.com/it/stories/bbafd99e-63a2-4d5d-94ff-af2fd4fbe62f/rank-math-pro-backdoor-outlives-the-plugin PlainSec it 2026-10-19T18:28:57Z La backdoor di Rank Math PRO sopravvive all’aggiornamento https://plainsec.com/stories/5396aa45-98eb-48d8-9681-224100f0c4d4/siemens-software-center-flaw-hides-behind-signed-launcher PlainSec en 2026-10-19T20:34:35Z Siemens signed launcher hides a trojanized installer https://plainsec.com/it/stories/5396aa45-98eb-48d8-9681-224100f0c4d4/siemens-software-center-flaw-hides-behind-signed-launcher PlainSec it 2026-10-19T20:34:35Z La firma Siemens autentica il programma, non l’installer https://plainsec.com/stories/4ee8d223-ab43-4efb-979f-cc29f91945d9/plex-exploit-chain-drops-miners-and-proxy-software PlainSec en 2026-10-19T16:54:50Z Plex exploit chain drops miners and proxy software https://plainsec.com/it/stories/4ee8d223-ab43-4efb-979f-cc29f91945d9/plex-exploit-chain-drops-miners-and-proxy-software PlainSec it 2026-10-19T16:54:50Z Un server Plex diventa miniera e proxy residenziale https://plainsec.com/stories/376834fa-5c6a-4b80-bd49-7943a101176e/ovhcloud-cli-archives-served-secret-stealing-malware-for-94-minutes PlainSec en 2026-10-20T12:27:46Z OVHcloud CLI archives served secret-stealing malware for 94 minutes https://plainsec.com/it/stories/376834fa-5c6a-4b80-bd49-7943a101176e/ovhcloud-cli-archives-served-secret-stealing-malware-for-94-minutes PlainSec it 2026-10-20T12:27:46Z Il checksum ufficiale ha convalidato malware nei rilasci OVHcloud https://plainsec.com/stories/04c6e390-322b-455a-a5ee-e9dcab65c184/apt28-steals-credentials-and-tunnels-into-naval-shipbuilder PlainSec en 2026-10-20T14:59:53Z APT28 steals credentials and tunnels into naval shipbuilder https://plainsec.com/it/stories/04c6e390-322b-455a-a5ee-e9dcab65c184/apt28-steals-credentials-and-tunnels-into-naval-shipbuilder PlainSec it 2026-10-20T14:59:53Z Credenziali rubate e tunnel persistente: APT28 torna nel cantiere navale https://plainsec.com/stories/c44cf8db-1276-416e-987a-38126afa1f91/aomei-update-servers-fed-shinyroad-to-checking-hosts PlainSec en 2026-10-20T19:05:58Z AOMEI update tampering leaves infected clients uncounted https://plainsec.com/it/stories/c44cf8db-1276-416e-987a-38126afa1f91/aomei-update-servers-fed-shinyroad-to-checking-hosts PlainSec it 2026-10-20T19:05:58Z La pulizia dei server AOMEI non rivela chi ha ricevuto malware https://plainsec.com/stories/df9e258a-52ad-41a8-b4eb-cd25ed57dc2d/cairn-s-exposed-dashboards-became-footholds-for-website-attacks PlainSec en 2026-10-20T19:05:58Z Cairn’s exposed dashboards became footholds for website attacks https://plainsec.com/it/stories/df9e258a-52ad-41a8-b4eb-cd25ed57dc2d/cairn-s-exposed-dashboards-became-footholds-for-website-attacks PlainSec it 2026-10-20T19:05:58Z I pannelli di Cairn diventano basi operative per intrusioni persistenti https://plainsec.com/stories/80be33a9-60fa-4918-ad1b-e23a257e33b1/dhs-exclusion-reaches-existing-deepseek-deployments PlainSec en 2026-10-20T02:34:50Z DHS ban reaches DeepSeek hidden in agency AI gateways https://plainsec.com/it/stories/80be33a9-60fa-4918-ad1b-e23a257e33b1/dhs-exclusion-reaches-existing-deepseek-deployments PlainSec it 2026-10-20T02:34:50Z Il divieto DeepSeek arriva anche ai servizi costruiti da terzi https://plainsec.com/stories/a55cdb40-0688-40ec-9526-625a4335a922/pegasus-targeting-reaches-serbian-rector-and-prosecutor PlainSec en 2026-10-19T20:34:35Z Pegasus targeting reaches Serbian rector and suspected prosecutor https://plainsec.com/it/stories/a55cdb40-0688-40ec-9526-625a4335a922/pegasus-targeting-reaches-serbian-rector-and-prosecutor PlainSec it 2026-10-19T20:34:35Z Lo spyware in Serbia raggiunge i vertici dell’università e della procura https://plainsec.com/stories/65d4bcb1-4a3b-49a9-a41e-db8d6537c31c/opencode-console-breach-puts-linked-model-keys-at-risk PlainSec en 2026-10-19T18:28:57Z OpenCode Console breach puts linked model keys at risk https://plainsec.com/it/stories/65d4bcb1-4a3b-49a9-a41e-db8d6537c31c/opencode-console-breach-puts-linked-model-keys-at-risk PlainSec it 2026-10-19T18:28:57Z OpenCode: un accesso alla Console può esporre chiavi di tre provider https://plainsec.com/stories/db2b3896-f892-4652-9756-74c76c16f25a/nikkei-s-third-breach-disclosure-exposes-1-83-million-records PlainSec en 2026-10-20T14:59:53Z Nikkei’s compromised logins expose 1.83 million records https://plainsec.com/it/stories/db2b3896-f892-4652-9756-74c76c16f25a/nikkei-s-third-breach-disclosure-exposes-1-83-million-records PlainSec it 2026-10-20T14:59:53Z Credenziali già sottratte aprono a Nikkei l’accesso a 1,83 milioni di record https://plainsec.com/stories/1f2f7284-f921-420d-8401-9c0f40b645b9/microsoft-says-agent-permissions-can-turn-risky-mid-task PlainSec en 2026-10-20T12:27:46Z Microsoft Project Perception security update https://plainsec.com/it/stories/1f2f7284-f921-420d-8401-9c0f40b645b9/microsoft-says-agent-permissions-can-turn-risky-mid-task PlainSec it 2026-10-20T12:27:46Z Le automazioni diventano dipendenze prima che qualcuno le governi https://plainsec.com/stories/38eebb3f-ede1-4fa0-b526-c688f263e61e/go-rebuilds-can-strand-services-behind-blocked-ca-keys PlainSec en 2026-10-20T14:59:53Z Go rebuilds can strand services behind blocked CA keys https://plainsec.com/it/stories/38eebb3f-ede1-4fa0-b526-c688f263e61e/go-rebuilds-can-strand-services-behind-blocked-ca-keys PlainSec it 2026-10-20T14:59:53Z Ricompilare con Go può interrompere connessioni TLS https://plainsec.com/stories/ab76d5c7-b538-4a76-99fc-e83cd4773d1a/fortisiem-poc-turns-file-overwrite-into-code-execution PlainSec en 2026-10-20T19:05:58Z FortiSIEM PoC turns file overwrite into code execution https://plainsec.com/it/stories/ab76d5c7-b538-4a76-99fc-e83cd4773d1a/fortisiem-poc-turns-file-overwrite-into-code-execution PlainSec it 2026-10-20T19:05:58Z Una routine di FortiSIEM può trasformare una scrittura in RCE https://plainsec.com/stories/655972a6-c4a2-4ec1-99a0-583940d86960/ghostaction-shifts-from-blocked-workflows-to-github-account-theft PlainSec en 2026-10-19T16:54:50Z GhostAction shifts from blocked workflows to GitHub account theft https://plainsec.com/it/stories/655972a6-c4a2-4ec1-99a0-583940d86960/ghostaction-shifts-from-blocked-workflows-to-github-account-theft PlainSec it 2026-10-19T16:54:50Z GitHub blocca il workflow, GhostAction punta agli account dei maintainer https://plainsec.com/stories/83295002-efc7-49e3-9915-ec90de65e453/apex-npm-tools-pair-malware-with-ai-traffic-hijacking PlainSec en 2026-10-19T15:29:37Z Apex npm tools pair malware with AI traffic hijacking https://plainsec.com/it/stories/83295002-efc7-49e3-9915-ec90de65e453/apex-npm-tools-pair-malware-with-ai-traffic-hijacking PlainSec it 2026-10-19T15:29:37Z Il tool IA di Apex devia le richieste e falsifica gli audit https://plainsec.com/stories/cd2a3a5b-2a72-4846-ad91-9beb61e69554/openai-insider-case-ties-executive-room-searches-to-saudi-recruiting PlainSec en 2026-10-20T14:59:53Z OpenAI insider case adds Saudi recruitment claims https://plainsec.com/it/stories/cd2a3a5b-2a72-4846-ad91-9beb61e69554/openai-insider-case-ties-executive-room-searches-to-saudi-recruiting PlainSec it 2026-10-20T14:59:53Z Lo spionaggio in OpenAI unisce accesso fisico e reclutamento saudita https://plainsec.com/stories/e90ad5a7-5b65-44ed-beb6-84a69a35581a/bullhorn-outage-cuts-access-to-staffing-platform PlainSec en 2026-10-20T14:59:53Z Bullhorn outage cuts access to staffing platform https://plainsec.com/it/stories/e90ad5a7-5b65-44ed-beb6-84a69a35581a/bullhorn-outage-cuts-access-to-staffing-platform PlainSec it 2026-10-20T14:59:53Z Un attacco informatico lascia offline la piattaforma Bullhorn https://plainsec.com/stories/8c9a5e36-8a85-493d-9d61-75aba18d7b4b/apt28-s-hookedge-campaign-targeted-defense-networks-for-intelligence PlainSec en 2026-10-20T11:47:16Z APT28’s Hookedge campaign targeted defense networks for intelligence https://plainsec.com/it/stories/8c9a5e36-8a85-493d-9d61-75aba18d7b4b/apt28-s-hookedge-campaign-targeted-defense-networks-for-intelligence PlainSec it 2026-10-20T11:47:16Z Due mesi di attività APT28 contro difesa e polizia europee https://plainsec.com/stories/42d975ce-cceb-4d07-ba11-5d35de334834/drupal-field-ui-flaw-can-reopen-through-modules PlainSec en 2026-10-19T08:28:07Z Drupal RCE paths depend on modules around core https://plainsec.com/it/stories/42d975ce-cceb-4d07-ba11-5d35de334834/drupal-field-ui-flaw-can-reopen-through-modules PlainSec it 2026-10-19T08:28:07Z Drupal: la patch del core non chiude ogni via alla RCE