https://plainsec.com/stories/ba5d992c-2716-4d20-a5c2-616b4283c327/wordpress-exploit-hit-government-sites-through-default-logins PlainSec en 2026-09-21T16:27:25Z WordPress Exploit Hit Government Sites Through Default Logins https://plainsec.com/it/stories/ba5d992c-2716-4d20-a5c2-616b4283c327/wordpress-exploit-hit-government-sites-through-default-logins PlainSec it 2026-09-21T16:27:25Z WordPress compromesso, i default account ampliano il furto https://plainsec.com/stories/6a683fb7-0b18-429f-969c-9dd07f009b83/cloudsek-finds-trusted-publishing-was-abused PlainSec en 2026-09-21T16:27:25Z CloudSEK Finds Trusted Publishing Was Abused https://plainsec.com/it/stories/6a683fb7-0b18-429f-969c-9dd07f009b83/cloudsek-finds-trusted-publishing-was-abused PlainSec it 2026-09-21T16:27:25Z Provenance pulita, release malevola in GitHub Actions https://plainsec.com/stories/907383b2-a30a-40dc-97ec-b70b0f994ee2/redis-tls-bug-is-already-being-exploited PlainSec en 2026-09-21T04:21:19Z Redis TLS Bug Is Already Being Exploited https://plainsec.com/it/stories/907383b2-a30a-40dc-97ec-b70b0f994ee2/redis-tls-bug-is-already-being-exploited PlainSec it 2026-09-21T04:21:19Z TLS non basta: Redis espone RCE remota https://plainsec.com/stories/46f7c7f5-04d4-4c0a-814c-350df2c3c57e/openai-forum-flaw-opened-employee-account-access PlainSec en 2026-09-21T06:21:40Z OpenAI Forum Bug Bridged Into Staff Accounts https://plainsec.com/it/stories/46f7c7f5-04d4-4c0a-814c-350df2c3c57e/openai-forum-flaw-opened-employee-account-access PlainSec it 2026-09-21T06:21:40Z Un forum pubblico ha aperto la strada agli account staff https://plainsec.com/stories/e1a7954b-0feb-4b24-bd1e-e98a34ce708d/fake-lastpass-authenticator-repos-push-rapuncel PlainSec en 2026-09-21T16:27:25Z Fake LastPass Authenticator Repos Push Rapuncel https://plainsec.com/it/stories/e1a7954b-0feb-4b24-bd1e-e98a34ce708d/fake-lastpass-authenticator-repos-push-rapuncel PlainSec it 2026-09-21T16:27:25Z GitHub search diventa il canale per un falso LastPass https://plainsec.com/stories/815f58ba-2b2b-4a6d-ab67-2fef171bccaf/nighteagle-reuses-credentials-and-github-tooling PlainSec en 2026-09-21T04:21:19Z NightEagle Reuses Credentials and GitHub Tooling https://plainsec.com/it/stories/815f58ba-2b2b-4a6d-ab67-2fef171bccaf/nighteagle-reuses-credentials-and-github-tooling PlainSec it 2026-09-21T04:21:19Z NightEagle riusa credenziali rubate e tooling pubblico https://plainsec.com/stories/5541ffe8-0a4c-473c-83b9-70a5e6f69131/crowdsec-leak-traced-to-stale-github-access PlainSec en 2026-09-21T04:21:19Z CrowdSec Leak Traced to Stale GitHub Access https://plainsec.com/it/stories/5541ffe8-0a4c-473c-83b9-70a5e6f69131/crowdsec-leak-traced-to-stale-github-access PlainSec it 2026-09-21T04:21:19Z Un token lasciato attivo svuota 170 repository privati https://plainsec.com/stories/66106359-466b-4c74-87e7-a359f32dff02/gyazo-leak-exposes-passwords-and-image-links PlainSec en 2026-09-21T04:21:19Z Gyazo Leak Exposes Passwords and Image Links https://plainsec.com/it/stories/66106359-466b-4c74-87e7-a359f32dff02/gyazo-leak-exposes-passwords-and-image-links PlainSec it 2026-09-21T04:21:19Z Gyazo espone link privati che restano aperti https://plainsec.com/stories/c30bb42a-2b0c-4284-9c25-adb14b84c088/openai-logs-six-agent-misalignment-incidents PlainSec en 2026-09-21T16:27:25Z OpenAI Logs Six Agent Misalignment Incidents https://plainsec.com/it/stories/c30bb42a-2b0c-4284-9c25-adb14b84c088/openai-logs-six-agent-misalignment-incidents PlainSec it 2026-09-21T16:27:25Z Gli agenti AI imparano a nascondere i propri fallimenti https://plainsec.com/stories/9de7e56a-a8b2-40fc-9b8c-bb3767779e62/orkes-conductor-bug-turns-workflows-into-shell-access PlainSec en 2026-09-21T04:21:19Z Orkes Conductor Bug Turns Workflows Into Shell Access https://plainsec.com/it/stories/9de7e56a-a8b2-40fc-9b8c-bb3767779e62/orkes-conductor-bug-turns-workflows-into-shell-access PlainSec it 2026-09-21T04:21:19Z Conductor esposto in rete diventa un runner di comandi https://plainsec.com/stories/1428c2a6-762f-436b-af42-95d6202e32f2/browser-extensions-broke-the-ai-trust-boundary PlainSec en 2026-09-21T04:21:19Z Malicious Extensions Can Steer Chromium AI Assistants https://plainsec.com/it/stories/1428c2a6-762f-436b-af42-95d6202e32f2/browser-extensions-broke-the-ai-trust-boundary PlainSec it 2026-09-21T04:21:19Z Un’estensione sola può prendere il controllo di più AI nel browser https://plainsec.com/stories/3bcc0c95-0867-46ec-9daf-d117655762b3/jade-sleet-used-terraform-to-reach-developer-macs PlainSec en 2026-09-21T08:24:22Z Jade Sleet Used Terraform to Reach Developer Macs https://plainsec.com/it/stories/3bcc0c95-0867-46ec-9daf-d117655762b3/jade-sleet-used-terraform-to-reach-developer-macs PlainSec it 2026-09-21T08:24:22Z Terraform diventa il varco verso i developer endpoint https://plainsec.com/stories/6e9c3f4e-3cf4-4bbe-ae3a-ef51cf493d60/phantomraven-hides-stealer-in-npm-installs PlainSec en 2026-09-21T04:21:19Z PhantomRaven Hides Stealer in npm Installs https://plainsec.com/it/stories/6e9c3f4e-3cf4-4bbe-ae3a-ef51cf493d60/phantomraven-hides-stealer-in-npm-installs PlainSec it 2026-09-21T04:21:19Z PhantomRaven trasforma l’installazione npm nel punto d’ingresso https://plainsec.com/stories/a65c82b5-4657-4e84-a847-93404e023661/payload-used-active-directory-to-extort-a-whole-fleet PlainSec en 2026-09-21T12:38:58Z PAYLOAD Used Active Directory to Extort a Whole Fleet https://plainsec.com/it/stories/a65c82b5-4657-4e84-a847-93404e023661/payload-used-active-directory-to-extort-a-whole-fleet PlainSec it 2026-09-21T12:38:58Z Active Directory diventa la piattaforma dell'estorsione https://plainsec.com/stories/c6267c55-c285-4302-a78d-b3d787293f96/chainscript-hides-c2-behind-polygon-lookups PlainSec en 2026-09-21T14:24:35Z ChainScript Hides C2 Behind Polygon Lookups https://plainsec.com/it/stories/c6267c55-c285-4302-a78d-b3d787293f96/chainscript-hides-c2-behind-polygon-lookups PlainSec it 2026-09-21T14:24:35Z ChainScript sposta il C2 su Polygon e aggira i blocchi fissi https://plainsec.com/stories/4e159b5d-50d4-479e-bf41-f831846e3a30/irish-regulator-fines-google-over-location-data PlainSec en 2026-09-21T18:31:00Z Irish Regulator Hits Google Over Location Profiling https://plainsec.com/it/stories/4e159b5d-50d4-479e-bf41-f831846e3a30/irish-regulator-fines-google-over-location-data PlainSec it 2026-09-21T18:31:00Z La profilazione della posizione costa a Google 403 milioni https://plainsec.com/stories/c866be5a-9529-4210-96d3-d3ff600daa58/rathat-uses-android-accessibility-as-control-surface PlainSec en 2026-09-21T04:21:19Z RatHat Uses Android Accessibility as Control Surface https://plainsec.com/it/stories/c866be5a-9529-4210-96d3-d3ff600daa58/rathat-uses-android-accessibility-as-control-surface PlainSec it 2026-09-21T04:21:19Z RatHat trasforma il telefono in una console per rubare credenziali https://plainsec.com/stories/0809d688-56a4-454e-9b88-e6b9ac503bd9/manufacturing-ransomware-carries-past-the-factory-floor PlainSec en 2026-09-21T04:21:19Z Manufacturing Keeps Drawing Ransomware Pressure https://plainsec.com/it/stories/0809d688-56a4-454e-9b88-e6b9ac503bd9/manufacturing-ransomware-carries-past-the-factory-floor PlainSec it 2026-09-21T04:21:19Z La fabbrica resta il bersaglio preferito del ransomware https://plainsec.com/stories/5ae82533-46b5-4a54-aeb6-b8567a617730/oracle-s-september-bulletin-spans-the-enterprise-stack PlainSec en 2026-09-21T06:21:40Z Oracle’s September Bulletin Spans the Enterprise Stack https://plainsec.com/it/stories/5ae82533-46b5-4a54-aeb6-b8567a617730/oracle-s-september-bulletin-spans-the-enterprise-stack PlainSec it 2026-09-21T06:21:40Z Una patch wave Oracle attraversa identità, BI e banking https://plainsec.com/stories/b98d71ad-cbd4-40fa-8514-1ebe46eaf640/synology-dsm-fix-spans-four-release-branches PlainSec en 2026-09-21T22:21:13Z Synology DSM Fix Spans Four Release Branches https://plainsec.com/it/stories/b98d71ad-cbd4-40fa-8514-1ebe46eaf640/synology-dsm-fix-spans-four-release-branches PlainSec it 2026-09-21T22:21:13Z Synology DSM, fix su quattro rami dopo otto falle https://plainsec.com/stories/243468da-fa2d-4a98-ac7e-eb4a04b42fc7/gemini-s-test-access-broke-the-sandbox PlainSec en 2026-09-21T16:27:25Z Gemini’s Test Access Broke the Sandbox https://plainsec.com/it/stories/243468da-fa2d-4a98-ac7e-eb4a04b42fc7/gemini-s-test-access-broke-the-sandbox PlainSec it 2026-09-21T16:27:25Z Gemini trasforma un test in tre accessi reali https://plainsec.com/stories/17b80de6-42e5-4f13-a2ed-5ab797888379/settra-hides-ransomware-in-legitimate-rmm PlainSec en 2026-09-21T04:21:19Z Settra Hides Ransomware in Legitimate RMM https://plainsec.com/it/stories/17b80de6-42e5-4f13-a2ed-5ab797888379/settra-hides-ransomware-in-legitimate-rmm PlainSec it 2026-09-21T04:21:19Z Settra si nasconde dietro RMM legittimi e log cancellati https://plainsec.com/stories/05dcb2d4-6ad3-4a82-a5b9-e2117715ed50/shinyhunters-hits-clops-leak-site-trust PlainSec en 2026-09-21T20:24:01Z ShinyHunters Turns Clop's Leak Site Inside Out https://plainsec.com/it/stories/05dcb2d4-6ad3-4a82-a5b9-e2117715ed50/shinyhunters-hits-clops-leak-site-trust PlainSec it 2026-09-21T20:24:01Z Clop perde fiducia: ShinyHunters può esporre i suoi operatori https://plainsec.com/stories/91455b0a-d241-405b-ad07-ddcb7c29dec2/task-stomp-survives-partial-cleanup-on-windows PlainSec en 2026-09-21T18:31:00Z TASK#STOMP Survives Partial Cleanup on Windows https://plainsec.com/it/stories/91455b0a-d241-405b-ad07-ddcb7c29dec2/task-stomp-survives-partial-cleanup-on-windows PlainSec it 2026-09-21T18:31:00Z TASK#STOMP resiste alla rimozione parziale https://plainsec.com/stories/dc24d856-ff75-41fc-a5fe-52457f15ecdd/waterplum-turns-job-interviews-into-intrusion PlainSec en 2026-09-21T04:21:19Z WaterPlum Turns Hiring into Corporate Access https://plainsec.com/it/stories/dc24d856-ff75-41fc-a5fe-52457f15ecdd/waterplum-turns-job-interviews-into-intrusion PlainSec it 2026-09-21T04:21:19Z I colloqui finti diventano un accesso stabile alle aziende https://plainsec.com/stories/ad826068-40c6-42f9-be7b-c1ebf42c8194/exvicy-s-wordpress-loader-has-a-rival-s-blueprint PlainSec en 2026-09-21T16:27:25Z Exvicy’s WordPress Loader Has a Rival’s Blueprint https://plainsec.com/it/stories/ad826068-40c6-42f9-be7b-c1ebf42c8194/exvicy-s-wordpress-loader-has-a-rival-s-blueprint PlainSec it 2026-09-21T16:27:25Z Exvicy industrializza il ClickFix su WordPress compromessi https://plainsec.com/stories/e2a8639a-6e9e-42c5-bc67-159949c9237c/rust-crate-owners-face-recruiter-style-account-theft PlainSec en 2026-09-21T12:38:58Z Rust Crate Owners Face Recruiter-Style Account Theft https://plainsec.com/it/stories/e2a8639a-6e9e-42c5-bc67-159949c9237c/rust-crate-owners-face-recruiter-style-account-theft PlainSec it 2026-09-21T12:38:58Z Rust: i finti colloqui puntano alla supply chain https://plainsec.com/stories/0d6c77c4-1460-49a2-9b0b-880100d4374a/terminalfix-hid-a-dll-inside-valid-pngs PlainSec en 2026-09-21T12:38:58Z TerminalFix Hid a DLL Inside Valid PNGs https://plainsec.com/it/stories/0d6c77c4-1460-49a2-9b0b-880100d4374a/terminalfix-hid-a-dll-inside-valid-pngs PlainSec it 2026-09-21T12:38:58Z PNG validi usati per nascondere un DLL https://plainsec.com/stories/2c6e5f1a-f92a-47b6-ab1c-be92d8d10a8f/agentcore-harness-shell-leaks-vaulted-credentials PlainSec en 2026-09-21T04:21:19Z AgentCore Harness Shell Leaks Vaulted Credentials https://plainsec.com/it/stories/2c6e5f1a-f92a-47b6-ab1c-be92d8d10a8f/agentcore-harness-shell-leaks-vaulted-credentials PlainSec it 2026-09-21T04:21:19Z AgentCore Harness espone credenziali in chiaro a runtime https://plainsec.com/stories/7f25fb45-0c0c-4854-ada0-cff21e458c5e/gemini-test-escaped-into-real-company-systems PlainSec en 2026-09-21T08:24:22Z Gemini Test Escaped Into Real Company Systems https://plainsec.com/it/stories/7f25fb45-0c0c-4854-ada0-cff21e458c5e/gemini-test-escaped-into-real-company-systems PlainSec it 2026-09-21T08:24:22Z Gemini esce dal test e tocca sistemi reali https://plainsec.com/stories/b232c42a-decc-4540-9ae3-1fd4d085ffe3/siemens-scalance-flaws-can-cascade-to-ot-root-access PlainSec en 2026-09-21T04:21:19Z Siemens SCALANCE Flaws Can Cascade to OT Root Access https://plainsec.com/it/stories/b232c42a-decc-4540-9ae3-1fd4d085ffe3/siemens-scalance-flaws-can-cascade-to-ot-root-access PlainSec it 2026-09-21T04:21:19Z Il patching del box non basta più su SCALANCE LPE9403 https://plainsec.com/stories/3287f0e3-8a57-43ac-967d-3aada0cf8559/public-linux-kernel-root-exploits-raise-the-stakes PlainSec en 2026-09-21T10:31:22Z CISA Puts Three Linux Kernel Flaws on KEV https://plainsec.com/it/stories/3287f0e3-8a57-43ac-967d-3aada0cf8559/public-linux-kernel-root-exploits-raise-the-stakes PlainSec it 2026-09-21T10:31:22Z Tre kernel Linux in KEV, patch d’emergenza entro tre giorni https://plainsec.com/stories/5dadd5d5-63d6-479e-a260-fb64c9da99a7/chrome-patch-closes-42-security-flaws PlainSec en 2026-09-21T10:31:22Z Chrome and Firefox Ship Large Security Batches https://plainsec.com/it/stories/5dadd5d5-63d6-479e-a260-fb64c9da99a7/chrome-patch-closes-42-security-flaws PlainSec it 2026-09-21T10:31:22Z Chrome e Firefox chiudono decine di falle, ma i conteggi ingannano https://plainsec.com/stories/7a3568f5-e346-41ec-a472-ff0794797fc3/hypr-survey-finds-hiring-fraud-starts-before-access-checks PlainSec en 2026-09-21T04:21:19Z HYPR Survey Finds Hiring Fraud Starts Before Access Checks https://plainsec.com/it/stories/7a3568f5-e346-41ec-a472-ff0794797fc3/hypr-survey-finds-hiring-fraud-starts-before-access-checks PlainSec it 2026-09-21T04:21:19Z Le credenziali arrivano prima della verifica dell’identità https://plainsec.com/stories/228f2930-9483-496a-a695-a0d4b273563d/microsoft-cloud-flaws-were-fixed-server-side PlainSec en 2026-09-21T06:21:40Z Microsoft Cloud Flaws Were Fixed Server-Side https://plainsec.com/it/stories/228f2930-9483-496a-a695-a0d4b273563d/microsoft-cloud-flaws-were-fixed-server-side PlainSec it 2026-09-21T06:21:40Z Solo un fix cliente nel nuovo giro Microsoft https://plainsec.com/stories/1f78152a-697d-44b8-8f37-aa8c78c4139a/check-point-login-overflow-reaches-root-on-management-servers PlainSec en 2026-09-21T04:21:19Z Check Point Login Overflow Reaches Root on Management Servers https://plainsec.com/it/stories/1f78152a-697d-44b8-8f37-aa8c78c4139a/check-point-login-overflow-reaches-root-on-management-servers PlainSec it 2026-09-21T04:21:19Z Il server che governa i firewall è diventato il bersaglio https://plainsec.com/stories/cf82bf19-3c7c-49cb-a2f9-dca760419332/authorities-seize-nightmarestresser-in-wider-ddos-takedown PlainSec en 2026-09-21T04:21:19Z NightmareStresser Disruption Shifts DDoS Capacity https://plainsec.com/it/stories/cf82bf19-3c7c-49cb-a2f9-dca760419332/authorities-seize-nightmarestresser-in-wider-ddos-takedown PlainSec it 2026-09-21T04:21:19Z Sparisce un booter enorme, non la domanda di DDoS https://plainsec.com/stories/a52aa543-6db6-4a42-a92b-c66b24ff5a1a/wordpress-7-1-1-fixes-silent-theme-install-bug PlainSec en 2026-09-21T04:21:19Z WordPress 7.1.1 Fixes Silent Theme Install Bug https://plainsec.com/it/stories/a52aa543-6db6-4a42-a92b-c66b24ff5a1a/wordpress-7-1-1-fixes-silent-theme-install-bug PlainSec it 2026-09-21T04:21:19Z WordPress installa temi da un link e può arrivare al code execution https://plainsec.com/stories/b956f654-72fc-4cb3-809b-4e1bad334662/google-s-mole-shrinks-teampcp-s-supply-chain-blast-radius PlainSec en 2026-09-20T12:21:10Z Google’s Mole Shrinks TeamPCP’s Supply-Chain Blast Radius https://plainsec.com/it/stories/b956f654-72fc-4cb3-809b-4e1bad334662/google-s-mole-shrinks-teampcp-s-supply-chain-blast-radius PlainSec it 2026-09-20T12:21:10Z Dentro TeamPCP, Google ha visto e fermato la campagna https://plainsec.com/stories/fe616320-27ef-4948-99c2-8c2c4fbfdb5c/solarwinds-arm-patch-fixes-hard-coded-key-rce PlainSec en 2026-09-20T04:27:15Z SolarWinds ARM Patch Fixes Hard-Coded Key RCE https://plainsec.com/it/stories/fe616320-27ef-4948-99c2-8c2c4fbfdb5c/solarwinds-arm-patch-fixes-hard-coded-key-rce PlainSec it 2026-09-20T04:27:15Z SolarWinds corregge un RCE senza login in ARM