https://plainsec.com/stories/4db320b2-1df3-4480-a62b-d156dd677384/uat-6275-mixes-lures-with-public-exploits PlainSec en 2026-10-14T18:11:15Z UAT-6275 mixes lures with public exploits https://plainsec.com/it/stories/4db320b2-1df3-4480-a62b-d156dd677384/uat-6275-mixes-lures-with-public-exploits PlainSec it 2026-10-14T18:11:15Z La campagna UAT-6275 allarga il bersaglio a FortiWeb e Windows esposti https://plainsec.com/stories/05eb277b-fdb7-401c-a924-131e2dc7f467/pan-os-authenticated-remote-code-execution-rce-in-the-management-interface PlainSec en 2026-10-15T14:33:33Z CISA puts firewall, mail, and backup flaws on clock https://plainsec.com/it/stories/05eb277b-fdb7-401c-a924-131e2dc7f467/pan-os-authenticated-remote-code-execution-rce-in-the-management-interface PlainSec it 2026-10-15T14:33:33Z Tre infrastrutture critiche finiscono sotto patch entro lunedì https://plainsec.com/stories/f0790967-9b05-47bc-819e-cff1b2ba4808/langflow-flaw-lets-any-account-run-server-commands PlainSec en 2026-10-15T08:35:46Z Langflow flaw lets any account run server commands https://plainsec.com/it/stories/f0790967-9b05-47bc-819e-cff1b2ba4808/langflow-flaw-lets-any-account-run-server-commands PlainSec it 2026-10-15T08:35:46Z Langflow, un account autenticato basta per eseguire comandi sul server https://plainsec.com/stories/79df5cfb-b970-453c-860a-7d7eb03f6063/danfoss-controllers-let-attackers-spoil-supermarket-stock PlainSec en 2026-10-14T18:11:15Z Danfoss controllers turned refrigeration into a remote switch https://plainsec.com/it/stories/79df5cfb-b970-453c-860a-7d7eb03f6063/danfoss-controllers-let-attackers-spoil-supermarket-stock PlainSec it 2026-10-14T18:11:15Z La flotta frigorifera diventa un interruttore fisico remoto https://plainsec.com/stories/83c8dead-30de-430c-9482-54b2464b8c84/doj-raids-laptop-farms-feeding-north-korean-it-fraud PlainSec en 2026-10-14T03:39:22Z DOJ raids expose North Korean laptop farms https://plainsec.com/it/stories/83c8dead-30de-430c-9482-54b2464b8c84/doj-raids-laptop-farms-feeding-north-korean-it-fraud PlainSec it 2026-10-14T03:39:22Z L'offensiva contro i laptop farm cambia il caso DPRK https://plainsec.com/stories/a0cb4493-8929-4251-93f8-c7d18d971a4c/windows-update-elevation-of-privilege-vulnerability PlainSec en 2026-10-14T04:39:43Z Microsoft Patch Tuesday flags exploited Shell zero-day https://plainsec.com/it/stories/a0cb4493-8929-4251-93f8-c7d18d971a4c/windows-update-elevation-of-privilege-vulnerability PlainSec it 2026-10-14T04:39:43Z Il Patch Tuesday record ha un zero-day già sfruttato https://plainsec.com/stories/43937a50-a955-469b-9466-103ef945e2e6/collabora-built-in-code-flaw-plants-web-shells PlainSec en 2026-10-14T23:13:08Z Collabora built-in CODE flaw plants web shells https://plainsec.com/it/stories/43937a50-a955-469b-9466-103ef945e2e6/collabora-built-in-code-flaw-plants-web-shells PlainSec it 2026-10-14T23:13:08Z Lo stop del server locale apre la porta alla web shell https://plainsec.com/stories/2464a0b3-8fea-4b24-8cd2-a56d1392c5c8/chrome-exploit-chain-shrank-to-six-days PlainSec en 2026-10-14T18:11:15Z Chrome exploit chain shrank to six days https://plainsec.com/it/stories/2464a0b3-8fea-4b24-8cd2-a56d1392c5c8/chrome-exploit-chain-shrank-to-six-days PlainSec it 2026-10-14T18:11:15Z Chrome cade in sei giorni sotto una catena AI https://plainsec.com/stories/3761c6f3-c833-418b-9048-7e4119969911/d-link-dir-868l-hnap-cgi-cgibin-system-os-command-injection PlainSec en 2026-10-15T10:52:33Z D-Link DIR-868L PoC leaves EOL routers exposed https://plainsec.com/it/stories/3761c6f3-c833-418b-9048-7e4119969911/d-link-dir-868l-hnap-cgi-cgibin-system-os-command-injection PlainSec it 2026-10-15T10:52:33Z PoC pubblico rende irrecuperabili i DIR-868L esposti https://plainsec.com/stories/8d381e1f-cb9d-4d04-aa47-434c7fc28895/ad-networks-become-a-zero-click-spyware-channel PlainSec en 2026-10-15T14:33:33Z Ad networks become a zero-click spyware channel https://plainsec.com/it/stories/8d381e1f-cb9d-4d04-aa47-434c7fc28895/ad-networks-become-a-zero-click-spyware-channel PlainSec it 2026-10-15T14:33:33Z Gli annunci online diventano un canale per lo spyware zero-click https://plainsec.com/stories/e284e64c-7891-4919-a376-13096e3d5296/ghostaction-turns-github-actions-into-a-secret-trap PlainSec en 2026-10-15T10:52:33Z GhostAction turns GitHub Actions into a secret trap https://plainsec.com/it/stories/e284e64c-7891-4919-a376-13096e3d5296/ghostaction-turns-github-actions-into-a-secret-trap PlainSec it 2026-10-15T10:52:33Z 30.000 repo GitHub sotto attacco via GitHub Actions https://plainsec.com/stories/c74d1eaa-755b-4a52-8d56-deb068869a76/microsoft-seizes-phishing-market-behind-1b-messages PlainSec en 2026-10-14T18:11:15Z Microsoft expands Yam Store takedown across cloud accounts https://plainsec.com/it/stories/c74d1eaa-755b-4a52-8d56-deb068869a76/microsoft-seizes-phishing-market-behind-1b-messages PlainSec it 2026-10-14T18:11:15Z La frode passa dagli account cloud, non dai domini https://plainsec.com/stories/aa8e91c0-fe67-4925-836d-bc9bc3e34087/n0n-leak-site-points-to-shared-port-access PlainSec en 2026-10-15T17:09:19Z n0n leak site points to shared port access https://plainsec.com/it/stories/aa8e91c0-fe67-4925-836d-bc9bc3e34087/n0n-leak-site-points-to-shared-port-access PlainSec it 2026-10-15T17:09:19Z Un punto d’ingresso comune può esporre 38 operatori portuali https://plainsec.com/stories/c0e7c5d2-b920-47c5-ac4c-abe0798acd16/hirudo-swaps-bank-apps-for-patched-copies PlainSec en 2026-10-14T14:57:19Z Hirudo swaps bank apps for patched copies https://plainsec.com/it/stories/c0e7c5d2-b920-47c5-ac4c-abe0798acd16/hirudo-swaps-bank-apps-for-patched-copies PlainSec it 2026-10-14T14:57:19Z Hirudo trasforma la banca in un’app complice https://plainsec.com/stories/cf59ed9d-4a13-407e-8bd1-ca3bcc919534/anthropic-tests-ai-worm-behavior-on-cheap-android-boxes PlainSec en 2026-10-14T03:39:22Z Anthropic shows cheap Android boxes can host AI models https://plainsec.com/it/stories/cf59ed9d-4a13-407e-8bd1-ca3bcc919534/anthropic-tests-ai-worm-behavior-on-cheap-android-boxes PlainSec it 2026-10-14T03:39:22Z I botnet AI diventano plausibili sui box Android da 55 dollari https://plainsec.com/stories/f0b225f7-8121-44d3-bc36-0e5628a66b74/booz-allen-test-shows-ai-can-outrun-ot-defenses PlainSec en 2026-10-14T23:04:57Z Booz Allen test shows AI can outrun OT defenses https://plainsec.com/it/stories/f0b225f7-8121-44d3-bc36-0e5628a66b74/booz-allen-test-shows-ai-can-outrun-ot-defenses PlainSec it 2026-10-14T23:04:57Z L’AI chiude la catena d’attacco OT in pochi minuti https://plainsec.com/stories/d4401b01-6dc0-445a-bc2c-a64c94db3051/juniper-junos-advisory-ties-bugs-to-routing-control PlainSec en 2026-10-15T17:09:19Z Juniper Junos advisory ties bugs to routing control https://plainsec.com/it/stories/d4401b01-6dc0-445a-bc2c-a64c94db3051/juniper-junos-advisory-ties-bugs-to-routing-control PlainSec it 2026-10-15T17:09:19Z Juniper espone il piano di controllo dei router https://plainsec.com/stories/ed55a27a-8404-40fa-9862-1b04630de572/refrigeration-controller-attack-widens-across-french-supermarkets PlainSec en 2026-10-15T17:09:19Z Refrigeration controller attack widens across French supermarkets https://plainsec.com/it/stories/ed55a27a-8404-40fa-9862-1b04630de572/refrigeration-controller-attack-widens-across-french-supermarkets PlainSec it 2026-10-15T17:09:19Z La falla colpisce una flotta più ampia dei soli controller Danfoss https://plainsec.com/stories/b543d94f-36cd-4113-93f3-cbfc83ad7d7b/semperis-survey-flags-ransomware-threats-beyond-data-theft PlainSec en 2026-10-14T06:54:10Z Semperis survey flags ransomware threats beyond data theft https://plainsec.com/it/stories/b543d94f-36cd-4113-93f3-cbfc83ad7d7b/semperis-survey-flags-ransomware-threats-beyond-data-theft PlainSec it 2026-10-14T06:54:10Z Il ransomware diventa una minaccia per la sicurezza fisica https://plainsec.com/stories/952d6d0e-112f-4dc8-8f76-5ed02b854d51/adobe-ships-a-broad-patch-wave-across-10-products PlainSec en 2026-10-14T18:11:15Z Adobe ships a broad patch wave across 10 products https://plainsec.com/it/stories/952d6d0e-112f-4dc8-8f76-5ed02b854d51/adobe-ships-a-broad-patch-wave-across-10-products PlainSec it 2026-10-14T18:11:15Z Adobe corregge 140 falle, molte nel componente condiviso https://plainsec.com/stories/3bcd9bdd-0974-48f7-a3c0-46cb5e98ba98/romulus-turns-clickfix-into-reusable-malware-infrastructure PlainSec en 2026-10-14T18:11:15Z ROMULUS turns ClickFix into reusable malware infrastructure https://plainsec.com/it/stories/3bcd9bdd-0974-48f7-a3c0-46cb5e98ba98/romulus-turns-clickfix-into-reusable-malware-infrastructure PlainSec it 2026-10-14T18:11:15Z ClickFix diventa infrastruttura riusabile per più malware https://plainsec.com/stories/9ab08efc-2b90-4a6c-b3b0-52ec69464c2e/uk-legal-aid-breach-reaches-back-to-1978 PlainSec en 2026-10-15T13:11:18Z UK legal aid breach reaches back to 1978 https://plainsec.com/it/stories/9ab08efc-2b90-4a6c-b3b0-52ec69464c2e/uk-legal-aid-breach-reaches-back-to-1978 PlainSec it 2026-10-15T13:11:18Z Archivi legali rubati, l’esposizione dura decenni https://plainsec.com/stories/ab0b8ffd-87fb-4969-83fe-99619dc4287f/wiz-says-scanner-output-needs-runtime-context PlainSec en 2026-10-15T01:03:05Z Wiz says scanner output needs runtime context https://plainsec.com/it/stories/ab0b8ffd-87fb-4969-83fe-99619dc4287f/wiz-says-scanner-output-needs-runtime-context PlainSec it 2026-10-15T01:03:05Z Scanner AppSec pieni di rumore, non di priorità https://plainsec.com/stories/0edc4375-b48c-4755-a60d-ece2744ec2ab/mps-officers-used-auror-without-privacy-checks PlainSec en 2026-10-15T08:35:46Z MPS officers used Auror without privacy checks https://plainsec.com/it/stories/0edc4375-b48c-4755-a60d-ece2744ec2ab/mps-officers-used-auror-without-privacy-checks PlainSec it 2026-10-15T08:35:46Z Una piattaforma esterna ha aggirato i controlli della Met Police https://plainsec.com/stories/8e1319b3-de96-4c97-88c3-ad55a28963a2/openai-case-spotlights-room-level-insider-surveillance PlainSec en 2026-10-14T03:39:22Z OpenAI case spotlights room-level insider surveillance https://plainsec.com/it/stories/8e1319b3-de96-4c97-88c3-ad55a28963a2/openai-case-spotlights-room-level-insider-surveillance PlainSec it 2026-10-14T03:39:22Z Un dispositivo nascosto porta l’insider threat nella sala riunioni https://plainsec.com/stories/84fc39e0-e491-4d58-ac23-145516d978b7/cross-site-scripting-xss-vulnerability-in-sap-netweaver-application-server-abap-applications-based-on-sap-gui-for-html PlainSec en 2026-10-14T18:11:15Z SAP patch day exposes credential and boundary flaws https://plainsec.com/it/stories/84fc39e0-e491-4d58-ac23-145516d978b7/cross-site-scripting-xss-vulnerability-in-sap-netweaver-application-server-abap-applications-based-on-sap-gui-for-html PlainSec it 2026-10-14T18:11:15Z Quattro falle SAP aprono la porta ai client credentials https://plainsec.com/stories/c87b9505-3a33-44f0-9ed2-15fe44d75bc0/reflectiz-ai-agent-proves-otp-login-bypass PlainSec en 2026-10-14T14:57:19Z Reflectiz AI agent proves OTP login bypass https://plainsec.com/it/stories/c87b9505-3a33-44f0-9ed2-15fe44d75bc0/reflectiz-ai-agent-proves-otp-login-bypass PlainSec it 2026-10-14T14:57:19Z Un agente AI completa un bypass OTP su un sito live https://plainsec.com/stories/db5365a2-cbd1-4c42-b7c5-8357b1747874/picus-says-agentic-pentests-miss-exposed-services PlainSec en 2026-10-15T01:03:05Z Picus says agentic pentests miss exposed services https://plainsec.com/it/stories/db5365a2-cbd1-4c42-b7c5-8357b1747874/picus-says-agentic-pentests-miss-exposed-services PlainSec it 2026-10-15T01:03:05Z L’agentic pentesting accelera, ma lascia buchi di copertura https://plainsec.com/stories/320da9a7-163f-4c08-aa94-84bc9136ebbd/kimsuky-hides-wartime-espionage-in-ordinary-outreach PlainSec en 2026-10-14T03:39:22Z Kimsuky hides wartime espionage in ordinary outreach https://plainsec.com/it/stories/320da9a7-163f-4c08-aa94-84bc9136ebbd/kimsuky-hides-wartime-espionage-in-ordinary-outreach PlainSec it 2026-10-14T03:39:22Z Kimsuky usa inviti plausibili per cercare intelligence sulla guerra https://plainsec.com/stories/9dd8775c-c752-4408-99b0-6138cf6dd53d/curl-upload-flaw-can-let-servers-corrupt-clients PlainSec en 2026-10-14T19:31:57Z curl upload flaw can let servers corrupt clients https://plainsec.com/it/stories/9dd8775c-c752-4408-99b0-6138cf6dd53d/curl-upload-flaw-can-let-servers-corrupt-clients PlainSec it 2026-10-14T19:31:57Z Un upload HTTP/2 può trasformare curl in un punto di esecuzione https://plainsec.com/stories/91976c02-941c-439f-8b8a-fe4380c120d5/package-managers-leave-repository-tampering-too-much-trust PlainSec en 2026-10-14T14:57:19Z Package managers leave repository tampering too much trust https://plainsec.com/it/stories/91976c02-941c-439f-8b8a-fe4380c120d5/package-managers-leave-repository-tampering-too-much-trust PlainSec it 2026-10-14T14:57:19Z I package manager non bloccano la manomissione a monte https://plainsec.com/stories/17e5e7f4-d678-4f29-8007-4bf82249f349/linux-vhost-flaw-crosses-from-local-root-to-guest-escape PlainSec en 2026-10-14T10:54:56Z Linux vhost flaw crosses from local root to guest escape https://plainsec.com/it/stories/17e5e7f4-d678-4f29-8007-4bf82249f349/linux-vhost-flaw-crosses-from-local-root-to-guest-escape PlainSec it 2026-10-14T10:54:56Z Vghost apre una via dal guest al host Linux https://plainsec.com/stories/79554ed2-9a03-4dab-b050-bde59a08cbca/cve-2026-104935-ivanti-connect-secure PlainSec en 2026-10-14T00:00:33Z Cisco Secure Email Gateway flaw is being exploited https://plainsec.com/it/stories/79554ed2-9a03-4dab-b050-bde59a08cbca/cve-2026-104935-ivanti-connect-secure PlainSec it 2026-10-14T00:00:33Z Cisco Secure Email Gateway diventa un varco verso il cluster https://plainsec.com/stories/4dacfb7b-6b91-4a04-bf02-47e02c2aa787/microsoft-smartscreen-enclave-flaw-breaks-windows-trust PlainSec en 2026-10-14T12:26:54Z Microsoft SmartScreen enclave flaw breaks Windows trust https://plainsec.com/it/stories/4dacfb7b-6b91-4a04-bf02-47e02c2aa787/microsoft-smartscreen-enclave-flaw-breaks-windows-trust PlainSec it 2026-10-14T12:26:54Z Il perimetro protetto di SmartScreen cede da dentro https://plainsec.com/stories/a2b1b8bc-1a71-414c-800e-8f661148e547/joint-disruption-week-hit-west-african-scam-hubs PlainSec en 2026-10-14T03:39:22Z Joint Disruption Week hit West African scam hubs https://plainsec.com/it/stories/a2b1b8bc-1a71-414c-800e-8f661148e547/joint-disruption-week-hit-west-african-scam-hubs PlainSec it 2026-10-14T03:39:22Z Raid e takedown svelano l'industria delle truffe in Africa occidentale https://plainsec.com/stories/e3a68936-e234-4c8f-a378-de524b5940fc/third-party-vpn-control-left-a-bank-exposed-for-months PlainSec en 2026-10-14T06:02:12Z Third-party VPN control left a bank exposed for months https://plainsec.com/it/stories/e3a68936-e234-4c8f-a378-de524b5940fc/third-party-vpn-control-left-a-bank-exposed-for-months PlainSec it 2026-10-14T06:02:12Z Un gateway VPN di terzi ha tenuto aperta la banca per mesi https://plainsec.com/stories/9c84721a-4294-4639-8669-54e9b4c035d8/ftc-moves-to-stop-sextortion-help-fraud PlainSec en 2026-10-14T03:39:22Z FTC moves to stop sextortion-help fraud https://plainsec.com/it/stories/9c84721a-4294-4639-8669-54e9b4c035d8/ftc-moves-to-stop-sextortion-help-fraud PlainSec it 2026-10-14T03:39:22Z Truffavano i clienti già sotto ricatto sessuale https://plainsec.com/stories/d04d1c62-f20b-476c-b889-920fbb2672c4/microsoft-bundles-october-fixes-into-one-windows-10-rollup PlainSec en 2026-10-14T06:02:12Z Microsoft bundles October fixes into one Windows 10 rollup https://plainsec.com/it/stories/d04d1c62-f20b-476c-b889-920fbb2672c4/microsoft-bundles-october-fixes-into-one-windows-10-rollup PlainSec it 2026-10-14T06:02:12Z Microsoft compatta ottobre in un solo update per Windows 10 https://plainsec.com/stories/0942302e-b395-4285-b35a-93f591feaf59/mitigation-bypass-in-the-networking-http-component PlainSec en 2026-10-14T04:39:43Z Mozilla patch bundle spans Firefox and Thunderbird tracks https://plainsec.com/it/stories/0942302e-b395-4285-b35a-93f591feaf59/mitigation-bypass-in-the-networking-http-component PlainSec it 2026-10-14T04:39:43Z Mozilla chiude 30 falle su Firefox e Thunderbird