https://plainsec.com/stories/fafd984a-27b7-4aa2-a6f5-0d5e39af9558/cisco-firewall-update-includes-two-exploited-fmc-access-flaws PlainSec en 2026-10-28T15:05:58Z Cisco firewall zero-day can reboot exposed VPNs https://plainsec.com/it/stories/fafd984a-27b7-4aa2-a6f5-0d5e39af9558/cisco-firewall-update-includes-two-exploited-fmc-access-flaws PlainSec it 2026-10-28T15:05:58Z La VPN Cisco può riavviare i firewall senza autenticazione https://plainsec.com/stories/f62bf214-929f-40a2-9721-3244ceb92cc8/php2shell-attacks-give-exposed-pan-os-consoles-code-execution PlainSec en 2026-10-29T06:25:34Z PHP2Shell attacks give exposed PAN-OS consoles code execution https://plainsec.com/it/stories/f62bf214-929f-40a2-9721-3244ceb92cc8/php2shell-attacks-give-exposed-pan-os-consoles-code-execution PlainSec it 2026-10-29T06:25:34Z Una console firewall esposta può aprire la strada fino ad Active Directory https://plainsec.com/stories/5cd41826-e1ed-4964-85a1-d365ae6476b2/dhs-leak-maps-staff-tied-to-sensitive-work PlainSec en 2026-10-28T22:42:03Z DHS leak maps undercover work and application access https://plainsec.com/it/stories/5cd41826-e1ed-4964-85a1-d365ae6476b2/dhs-leak-maps-staff-tied-to-sensitive-work PlainSec it 2026-10-28T22:42:03Z I dati DHS diventano una mappa di ruoli e accessi sensibili https://plainsec.com/stories/8d882f2f-4cce-436a-9c77-a5f6aa5198f4/cisa-confirms-active-exploitation-of-brotli-decoder-flaw PlainSec en 2026-10-28T16:55:58Z CISA confirms active exploitation of Brotli decoder flaw https://plainsec.com/it/stories/8d882f2f-4cce-436a-9c77-a5f6aa5198f4/cisa-confirms-active-exploitation-of-brotli-decoder-flaw PlainSec it 2026-10-28T16:55:58Z Brotli espone servizi web anche quando la libreria è nascosta nelle dipendenze https://plainsec.com/stories/f37306e2-8d14-4d17-bb92-b65b5ff92766/fbi-seizure-leaves-virtualine-s-hosting-reach-uncertain PlainSec en 2026-10-29T02:35:36Z Virtualine’s shell-company plan shadows wider FBI seizure https://plainsec.com/it/stories/f37306e2-8d14-4d17-bb92-b65b5ff92766/fbi-seizure-leaves-virtualine-s-hosting-reach-uncertain PlainSec it 2026-10-29T02:35:36Z Il sequestro di Virtualine interrompe un servizio, non prova la chiusura https://plainsec.com/stories/1680ce96-a74b-4ab9-a4d6-782ea9422afa/ai-agent-finds-four-epics-flaws-one-may-enable-code-execution PlainSec en 2026-10-27T23:11:04Z AI agent finds four EPICS flaws, one may enable code execution https://plainsec.com/it/stories/1680ce96-a74b-4ab9-a4d6-782ea9422afa/ai-agent-finds-four-epics-flaws-one-may-enable-code-execution PlainSec it 2026-10-27T23:11:04Z Quattro falle in EPICS Base scoperte in meno di quattro ore https://plainsec.com/stories/5ce6e876-3b76-4f0f-879f-91773372d6ec/warp-panda-used-vmware-esxi-flaw-to-hide-operations PlainSec en 2026-10-29T11:15:27Z Warp Panda used VMware ESXi flaw to hide operations https://plainsec.com/it/stories/5ce6e876-3b76-4f0f-879f-91773372d6ec/warp-panda-used-vmware-esxi-flaw-to-hide-operations PlainSec it 2026-10-29T11:15:27Z I log di ESXi possono tacere dopo una compromissione https://plainsec.com/stories/84e682b4-b316-47ea-af13-cc3817ba2cc5/edk-ii-flaw-exposes-shared-firmware-to-boot-time-code-execution PlainSec en 2026-10-27T23:11:04Z EDK II flaw exposes shared firmware to boot-time code execution https://plainsec.com/it/stories/84e682b4-b316-47ea-af13-cc3817ba2cc5/edk-ii-flaw-exposes-shared-firmware-to-boot-time-code-execution PlainSec it 2026-10-27T23:11:04Z La falla pre-boot attraversa il firmware di molti server https://plainsec.com/stories/800a3f4d-28f4-494c-bd9a-c21a08ad95fe/nik-c2-joins-data-theft-with-screen-locking-ransomware PlainSec en 2026-10-29T11:15:27Z NIK C2 joins data theft with screen-locking ransomware https://plainsec.com/it/stories/800a3f4d-28f4-494c-bd9a-c21a08ad95fe/nik-c2-joins-data-theft-with-screen-locking-ransomware PlainSec it 2026-10-29T11:15:27Z Il furto di dati può sfociare nello stesso impianto in ransomware https://plainsec.com/stories/d29eec37-e594-4a77-8057-fbe6c633f394/moldova-takes-more-than-80-public-services-offline PlainSec en 2026-10-28T20:26:36Z Moldova attack reached beyond public services into government data https://plainsec.com/it/stories/d29eec37-e594-4a77-8057-fbe6c633f394/moldova-takes-more-than-80-public-services-offline PlainSec it 2026-10-28T20:26:36Z I servizi moldavi aperti al pubblico hanno esposto dati collegati https://plainsec.com/stories/acf14d8e-f555-4253-9003-e5936ba9fe44/so-net-breach-exposes-email-passwords-beyond-customer-records PlainSec en 2026-10-28T20:26:36Z So-net breach adds mailbox and bank-account exposure https://plainsec.com/it/stories/acf14d8e-f555-4253-9003-e5936ba9fe44/so-net-breach-exposes-email-passwords-beyond-customer-records PlainSec it 2026-10-28T20:26:36Z La violazione So-net espone 54.401 password email e dati bancari https://plainsec.com/stories/977bc623-aaa6-458b-8b53-886324fda943/linux-tcp-flaw-puts-mptcp-servers-on-a-path-to-root PlainSec en 2026-10-29T21:27:05Z Linux TCP flaw puts MPTCP servers on a path to root https://plainsec.com/it/stories/977bc623-aaa6-458b-8b53-886324fda943/linux-tcp-flaw-puts-mptcp-servers-on-a-path-to-root PlainSec it 2026-10-29T21:27:05Z Root sui server Linux: l’esposizione dipende dai listener MPTCP https://plainsec.com/stories/2ff70744-3941-4df7-9234-a4a63325c8c2/ghostwriter-attack-brings-destructive-cyber-operations-to-ukrainian-industry PlainSec en 2026-10-28T19:32:29Z GhostWriter attack brings destructive cyber operations to Ukrainian industry https://plainsec.com/it/stories/2ff70744-3941-4df7-9234-a4a63325c8c2/ghostwriter-attack-brings-destructive-cyber-operations-to-ukrainian-industry PlainSec it 2026-10-28T19:32:29Z Dallo spionaggio alla cancellazione: GhostWriter colpisce l’industria ucraina https://plainsec.com/stories/641e92b7-b845-4311-b1fe-3f6f46733b6e/chrome-extensions-hijack-searches-for-referral-payments PlainSec en 2026-10-29T04:49:49Z Chrome extensions hijack searches for referral revenue https://plainsec.com/it/stories/641e92b7-b845-4311-b1fe-3f6f46733b6e/chrome-extensions-hijack-searches-for-referral-payments PlainSec it 2026-10-29T04:49:49Z Le ricerche su Chrome diventano una fonte di ricavi per le estensioni https://plainsec.com/stories/b7a42a52-7724-45d9-a4d1-82266ac5d03f/gmo-desktop-breach-puts-trading-account-integrity-in-question PlainSec en 2026-10-28T02:48:54Z GMO desktop breach puts trading account integrity in question https://plainsec.com/it/stories/b7a42a52-7724-45d9-a4d1-82266ac5d03f/gmo-desktop-breach-puts-trading-account-integrity-in-question PlainSec it 2026-10-28T02:48:54Z Onamae di GMO: dati esposti e conti di trading coinvolti https://plainsec.com/stories/ad240b27-b0f2-4593-8291-b4bf0b413bdf/php-for-windows-rebuild-masks-its-brotli-security-fix PlainSec en 2026-10-29T11:15:27Z PHP for Windows rebuild masks its Brotli security fix https://plainsec.com/it/stories/ad240b27-b0f2-4593-8291-b4bf0b413bdf/php-for-windows-rebuild-masks-its-brotli-security-fix PlainSec it 2026-10-29T11:15:27Z La patch di PHP per Windows si nasconde nel suffisso -1 https://plainsec.com/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec en 2026-10-29T15:20:44Z Scanner used 32 AI identities to probe credential files https://plainsec.com/it/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec it 2026-10-29T15:20:44Z I nomi degli agenti AI diventano una porta da testare https://plainsec.com/stories/35695561-ca0c-4e5d-b555-bbf8bee2e7a2/engie-partner-marketing-breach-exposes-customer-contract-data PlainSec en 2026-10-28T20:26:36Z Engie partner breach exposes identifiers that aid impersonation https://plainsec.com/it/stories/35695561-ca0c-4e5d-b555-bbf8bee2e7a2/engie-partner-marketing-breach-exposes-customer-contract-data PlainSec it 2026-10-28T20:26:36Z I dati Engie possono dare credibilità alle richieste fraudolente https://plainsec.com/stories/3bda9f82-c89e-41b5-9ba6-e7632dcea53f/tailscale-ssh-flaw-lets-authorized-devices-reach-root PlainSec en 2026-10-28T13:36:11Z Tailscale SSH flaw lets authorized devices reach root https://plainsec.com/it/stories/3bda9f82-c89e-41b5-9ba6-e7632dcea53f/tailscale-ssh-flaw-lets-authorized-devices-reach-root PlainSec it 2026-10-28T13:36:11Z Un dispositivo autorizzato può aprire la strada a root sui server https://plainsec.com/stories/e5cf7e87-8075-4d07-aef8-cc16cdf69a6d/stryzhak-sentence-leaves-ransomware-ties-unresolved PlainSec en 2026-10-28T15:05:58Z Stryzhak sentence leaves ransomware networks unresolved https://plainsec.com/it/stories/e5cf7e87-8075-4d07-aef8-cc16cdf69a6d/stryzhak-sentence-leaves-ransomware-ties-unresolved PlainSec it 2026-10-28T15:05:58Z Una condanna chiude il caso di un affiliato, non la rete https://plainsec.com/stories/e2787d1e-1fcf-45e2-86f8-659c2911dea7/adobe-fixes-nine-critical-flaws-across-campaign-classic-and-connect PlainSec en 2026-10-28T15:05:58Z Adobe fixes nine critical flaws across Campaign Classic and Connect https://plainsec.com/it/stories/e2787d1e-1fcf-45e2-86f8-659c2911dea7/adobe-fixes-nine-critical-flaws-across-campaign-classic-and-connect PlainSec it 2026-10-28T15:05:58Z Nove falle critiche, due percorsi di aggiornamento Adobe https://plainsec.com/stories/0b214f96-1a98-474f-bcd8-e83f16d18c0b/public-exploit-puts-d-link-dir-505-backdoor-in-reach PlainSec en 2026-10-29T12:32:35Z Public exploit puts D-Link DIR-505 backdoor in reach https://plainsec.com/it/stories/0b214f96-1a98-474f-bcd8-e83f16d18c0b/public-exploit-puts-d-link-dir-505-backdoor-in-reach PlainSec it 2026-10-29T12:32:35Z Una backdoor remota nel D-Link DIR-505, senza rimedio indicato https://plainsec.com/stories/017a90dd-52b3-4253-9e27-43f6234ead88/unsloth-flaw-lets-model-configs-run-python-past-safety-setting PlainSec en 2026-10-29T06:25:34Z Unsloth flaw lets model configs run Python past safety setting https://plainsec.com/it/stories/017a90dd-52b3-4253-9e27-43f6234ead88/unsloth-flaw-lets-model-configs-run-python-past-safety-setting PlainSec it 2026-10-29T06:25:34Z La protezione di Unsloth non ferma il codice ostile https://plainsec.com/stories/c50ad65a-f7a6-4892-9c7b-04460469df69/php2shell-chain-rooted-firewalls-and-exposed-managed-fleets PlainSec en 2026-10-28T20:26:36Z PHP2Shell chain rooted firewalls and exposed managed fleets https://plainsec.com/it/stories/c50ad65a-f7a6-4892-9c7b-04460469df69/php2shell-chain-rooted-firewalls-and-exposed-managed-fleets PlainSec it 2026-10-28T20:26:36Z Un firewall compromesso apre l’intera flotta e Active Directory https://plainsec.com/stories/131ad3e3-d1c9-44bc-9a27-4223ceef472c/openais-terra-reaches-critical-cyber-capability-threshold PlainSec en 2026-10-28T02:48:54Z OpenAI's Terra reaches Critical cyber capability threshold https://plainsec.com/it/stories/131ad3e3-d1c9-44bc-9a27-4223ceef472c/openais-terra-reaches-critical-cyber-capability-threshold PlainSec it 2026-10-28T02:48:54Z Un modello più economico raggiunge la soglia cyber più alta di OpenAI https://plainsec.com/stories/61d93753-7e77-4144-afaa-59fab93c8100/node-js-patch-gap-leaves-1-7-million-runtimes-stranded PlainSec en 2026-10-28T08:52:41Z Node.js patch gap leaves 1.7 million runtimes stranded https://plainsec.com/it/stories/61d93753-7e77-4144-afaa-59fab93c8100/node-js-patch-gap-leaves-1-7-million-runtimes-stranded PlainSec it 2026-10-28T08:52:41Z 1,7 milioni di installazioni Node.js sono su linee senza patch