https://plainsec.com/stories/cb2da9ce-7bfa-4ddb-be42-bd1cc380c923/fortinet-fortimail-path-traversal-is-actively-exploited PlainSec en 2026-10-08T10:38:09Z Fortinet FortiMail path traversal is actively exploited https://plainsec.com/it/stories/cb2da9ce-7bfa-4ddb-be42-bd1cc380c923/fortinet-fortimail-path-traversal-is-actively-exploited PlainSec it 2026-10-08T10:38:09Z FortiMail espone il gateway mail con uno zero-day attivo https://plainsec.com/stories/99ccd815-87c6-41ff-99f1-01db35e7acd6/coalition-seizes-integrity-tech-s-flax-typhoon-tools PlainSec en 2026-10-09T02:22:53Z U.S. seizes Flax Typhoon’s control domains https://plainsec.com/it/stories/99ccd815-87c6-41ff-99f1-01db35e7acd6/coalition-seizes-integrity-tech-s-flax-typhoon-tools PlainSec it 2026-10-09T02:22:53Z Sequestrati i domini di Flax Typhoon, ma la botnet resta viva https://plainsec.com/stories/3de74f1b-37c0-4c9f-8ff2-ed7c9d0af181/poellm-hides-its-c2-in-github-poetry PlainSec en 2026-10-07T19:01:58Z PoeLLM turns exposed AI servers into scouts https://plainsec.com/it/stories/3de74f1b-37c0-4c9f-8ff2-ed7c9d0af181/poellm-hides-its-c2-in-github-poetry PlainSec it 2026-10-07T19:01:58Z I gateway AI infetti diventano anche scanner offensivi https://plainsec.com/stories/868ee69d-c93b-4201-bcd2-1336210ed1b2/monstercloud-charged-over-fake-ransomware-recovery PlainSec en 2026-10-08T10:38:09Z MonsterCloud case turns into criminal fraud charges https://plainsec.com/it/stories/868ee69d-c93b-4201-bcd2-1336210ed1b2/monstercloud-charged-over-fake-ransomware-recovery PlainSec it 2026-10-08T10:38:09Z Il recupero ransomware finisce in frode da 19 milioni https://plainsec.com/stories/e334c599-5406-4fb6-87eb-f1aa858658e8/tensorlake-npm-release-carried-a-self-spreading-worm PlainSec en 2026-10-08T08:34:54Z Tensorlake npm worm steals cloud secrets https://plainsec.com/it/stories/e334c599-5406-4fb6-87eb-f1aa858658e8/tensorlake-npm-release-carried-a-self-spreading-worm PlainSec it 2026-10-08T08:34:54Z Shai-Hulud passa dai pacchetti ai segreti di CI e Vault https://plainsec.com/stories/51f392f1-ad6c-4ce1-9ebe-87d6c08f68b8/uac-0099-keeps-matchboil-alive-in-ukraine PlainSec en 2026-10-08T14:44:18Z UAC-0099 keeps MATCHBOIL alive in Ukraine https://plainsec.com/it/stories/51f392f1-ad6c-4ce1-9ebe-87d6c08f68b8/uac-0099-keeps-matchboil-alive-in-ukraine PlainSec it 2026-10-08T14:44:18Z UAC-0099 rende più difficile smontare MATCHBOIL https://plainsec.com/stories/e693da9a-4f61-49c6-a4ac-67e576494938/tenable-patch-closes-a-path-to-domain-controller-system PlainSec en 2026-10-09T10:43:32Z Tenable patch closes a path to domain controller SYSTEM https://plainsec.com/it/stories/e693da9a-4f61-49c6-a4ac-67e576494938/tenable-patch-closes-a-path-to-domain-controller-system PlainSec it 2026-10-09T10:43:32Z Tenable Identity Exposure apre la porta al Domain Controller https://plainsec.com/stories/ba700c01-3e03-4e5d-921f-9b4ee8ca98d8/aws-agentcore-harness-exposes-credentials-through-agent-tools PlainSec en 2026-10-08T22:46:48Z AWS AgentCore Harness exposes credentials through agent tools https://plainsec.com/it/stories/ba700c01-3e03-4e5d-921f-9b4ee8ca98d8/aws-agentcore-harness-exposes-credentials-through-agent-tools PlainSec it 2026-10-08T22:46:48Z La memoria condivisa degli agenti AWS diventa il problema https://plainsec.com/stories/8af0165a-1ce1-4382-89c1-c6468f7b06f9/anydesk-linux-exploit-reaches-root-over-port-7070 PlainSec en 2026-10-09T17:07:30Z AnyDesk Linux exploit reaches root over port 7070 https://plainsec.com/it/stories/8af0165a-1ce1-4382-89c1-c6468f7b06f9/anydesk-linux-exploit-reaches-root-over-port-7070 PlainSec it 2026-10-09T17:07:30Z AnyDesk Linux espone root via TCP diretto https://plainsec.com/stories/62ebef64-d379-4e72-b8cd-0e48ec62c6d4/jpcert-ties-japanese-leaks-to-metabase-sql-injection PlainSec en 2026-10-08T18:58:08Z JPCERT ties Japanese leaks to Metabase SQL injection https://plainsec.com/it/stories/62ebef64-d379-4e72-b8cd-0e48ec62c6d4/jpcert-ties-japanese-leaks-to-metabase-sql-injection PlainSec it 2026-10-08T18:58:08Z La falla in Metabase allarga il furto dai portali web al backend https://plainsec.com/stories/250f0625-4210-4641-93d5-fa33cfbe9bba/midnight-mimosa-shipped-inside-cheap-android-phones PlainSec en 2026-10-08T20:52:03Z Midnight Mimosa shipped inside cheap Android phones https://plainsec.com/it/stories/250f0625-4210-4641-93d5-fa33cfbe9bba/midnight-mimosa-shipped-inside-cheap-android-phones PlainSec it 2026-10-08T20:52:03Z Firmware compromesso prima del primo avvio https://plainsec.com/stories/591189e2-3edf-418a-aef3-524721729fbc/u-s-puts-10-million-on-hafnium-figure PlainSec en 2026-10-08T16:50:53Z U.S. bounty raises the heat on Zhang Yu https://plainsec.com/it/stories/591189e2-3edf-418a-aef3-524721729fbc/u-s-puts-10-million-on-hafnium-figure PlainSec it 2026-10-08T16:50:53Z La taglia su Zhang Yu rende più rischiosi i viaggi https://plainsec.com/stories/e5d6289c-6414-4131-a977-600ad6cd5252/nvidia-dcgm-exporter-exposes-gpu-fleets-to-recon PlainSec en 2026-10-08T22:46:48Z NVIDIA DCGM Exporter exposes GPU fleets to recon https://plainsec.com/it/stories/e5d6289c-6414-4131-a977-600ad6cd5252/nvidia-dcgm-exporter-exposes-gpu-fleets-to-recon PlainSec it 2026-10-08T22:46:48Z Telemetria GPU esposta, i cluster AI diventano mappabili https://plainsec.com/stories/18dcf7f4-de7e-424f-b11d-de17139324d5/rapid7-ships-a-vllm-leak-scanner PlainSec en 2026-10-09T17:07:30Z Rapid7 ships a vLLM leak scanner https://plainsec.com/it/stories/18dcf7f4-de7e-424f-b11d-de17139324d5/rapid7-ships-a-vllm-leak-scanner PlainSec it 2026-10-09T17:07:30Z Metasploit automatizza la caccia alla fuga di heap in vLLM https://plainsec.com/stories/61a69544-bfc7-47d4-90ae-18379f053f36/omisi-n-de-autenticaci-n-en-intelligent-management-center-de-hpe PlainSec en 2026-10-09T15:06:55Z HPE iMC authentication bypass exposes management data https://plainsec.com/it/stories/61a69544-bfc7-47d4-90ae-18379f053f36/omisi-n-de-autenticaci-n-en-intelligent-management-center-de-hpe PlainSec it 2026-10-09T15:06:55Z HPE iMC espone il piano di gestione a chi non si autentica https://plainsec.com/stories/215bfa47-b218-4e9c-8454-80360afdf4a8/citrix-netscaler-saml-flaw-allows-remote-code-execution PlainSec en 2026-10-09T15:06:55Z Citrix NetScaler SAML flaw allows remote code execution https://plainsec.com/it/stories/215bfa47-b218-4e9c-8454-80360afdf4a8/citrix-netscaler-saml-flaw-allows-remote-code-execution PlainSec it 2026-10-09T15:06:55Z SAML trasforma NetScaler nel punto d’esecuzione https://plainsec.com/stories/dd59ca23-2506-4f8f-8a30-0cbcbf1797f5/improper-control-of-a-resource-through-its-lifetime-in-splunk-enterprise PlainSec en 2026-10-09T15:06:55Z Splunk patches multiple trust-boundary flaws https://plainsec.com/it/stories/dd59ca23-2506-4f8f-8a30-0cbcbf1797f5/improper-control-of-a-resource-through-its-lifetime-in-splunk-enterprise PlainSec it 2026-10-09T15:06:55Z Splunk chiude una serie di falle di autorizzazione https://plainsec.com/stories/c1e61329-3aaf-4538-af1b-79a67513750f/citrix-netscaler-flaw-keeps-the-front-door-exposed PlainSec en 2026-10-08T20:52:03Z Citrix NetScaler flaw keeps the front door exposed https://plainsec.com/it/stories/c1e61329-3aaf-4538-af1b-79a67513750f/citrix-netscaler-flaw-keeps-the-front-door-exposed PlainSec it 2026-10-08T20:52:03Z L’uptime tiene aperta la porta di NetScaler https://plainsec.com/stories/692fad1d-27cf-4dec-b454-ac709a0dd725/16-firefox-extensions-impersonate-wallets-to-steal-seeds PlainSec en 2026-10-08T10:38:09Z 16 Firefox Extensions Impersonate Wallets to Steal Seeds https://plainsec.com/it/stories/692fad1d-27cf-4dec-b454-ac709a0dd725/16-firefox-extensions-impersonate-wallets-to-steal-seeds PlainSec it 2026-10-08T10:38:09Z Sedici estensioni Firefox clonano wallet e rubano seed phrase https://plainsec.com/stories/40036e71-0245-4e7f-8e5c-0d1c2aa56c41/integrity-technology-group-framed-as-china-s-cyber-services-hub PlainSec en 2026-10-09T12:24:10Z Integrity Technology Group framed as China’s cyber-services hub https://plainsec.com/it/stories/40036e71-0245-4e7f-8e5c-0d1c2aa56c41/integrity-technology-group-framed-as-china-s-cyber-services-hub PlainSec it 2026-10-09T12:24:10Z Un fornitore di cyber servizi allarga la portata degli attacchi cinesi https://plainsec.com/stories/963f93f2-a591-4b84-b66c-213660192e08/fake-brand-deals-steer-creators-into-google-account-theft PlainSec en 2026-10-08T16:50:53Z Fake brand deals steer creators into Google account theft https://plainsec.com/it/stories/963f93f2-a591-4b84-b66c-213660192e08/fake-brand-deals-steer-creators-into-google-account-theft PlainSec it 2026-10-08T16:50:53Z Brand deal finta, account Google sottratto ai creator https://plainsec.com/stories/29c27f06-1e36-48da-84ee-727451c72de1/cisco-splits-apic-and-meraki-fixes-across-the-stack PlainSec en 2026-10-07T19:01:58Z Cisco APIC flaws put the fabric at risk https://plainsec.com/it/stories/29c27f06-1e36-48da-84ee-727451c72de1/cisco-splits-apic-and-meraki-fixes-across-the-stack PlainSec it 2026-10-07T19:01:58Z Cisco APIC trasforma un admin in root sul controller https://plainsec.com/stories/1b05838a-59ed-4f0d-9365-f38ed4d587df/integrity-technology-linked-hackers-turned-stolen-mail-into-a-portal PlainSec en 2026-10-08T22:46:48Z Integrity Technology-linked hackers turned stolen mail into a portal https://plainsec.com/it/stories/1b05838a-59ed-4f0d-9365-f38ed4d587df/integrity-technology-linked-hackers-turned-stolen-mail-into-a-portal PlainSec it 2026-10-08T22:46:48Z Un portale riapre le mail rubate anche dopo la bonifica https://plainsec.com/stories/881e70a6-b1cf-4541-bda9-c03da75d29d1/arizona-courts-breach-exposed-protection-orders PlainSec en 2026-10-07T20:52:24Z Arizona Courts Breach Exposed Protection Orders https://plainsec.com/it/stories/881e70a6-b1cf-4541-bda9-c03da75d29d1/arizona-courts-breach-exposed-protection-orders PlainSec it 2026-10-07T20:52:24Z I record dei tribunali esposti oltre le semplici tasse arretrate https://plainsec.com/stories/15f6ebf5-e946-4955-9292-797830866a08/greynoise-sees-hikvision-probing-tied-to-ukraine-strikes PlainSec en 2026-10-08T20:52:03Z GreyNoise sees Hikvision probing tied to Ukraine strikes https://plainsec.com/it/stories/15f6ebf5-e946-4955-9292-797830866a08/greynoise-sees-hikvision-probing-tied-to-ukraine-strikes PlainSec it 2026-10-08T20:52:03Z Un picco di probing su Hikvision in Ucraina https://plainsec.com/stories/773d502e-bdd1-46cb-9ec1-63a8b988feb5/crowdstrike-ties-artex-to-south-korean-finance-hits PlainSec en 2026-10-08T22:46:48Z CrowdStrike Ties ARTEX to South Korean Finance Hits https://plainsec.com/it/stories/773d502e-bdd1-46cb-9ec1-63a8b988feb5/crowdstrike-ties-artex-to-south-korean-finance-hits PlainSec it 2026-10-08T22:46:48Z ARTEX trasforma un pentest in furto ripetibile contro la finanza coreana https://plainsec.com/stories/5e86adae-3e24-4e3d-b925-a485e61ae37f/lmcache-routable-cache-server-enables-remote-code-execution PlainSec en 2026-10-07T22:59:50Z LMCache Routable Cache Server Enables Remote Code Execution https://plainsec.com/it/stories/5e86adae-3e24-4e3d-b925-a485e61ae37f/lmcache-routable-cache-server-enables-remote-code-execution PlainSec it 2026-10-07T22:59:50Z LMCache espone l’LLM serving a RCE senza patch https://plainsec.com/stories/234f0bb1-bd09-4bba-b395-61c3f36f7bdc/x-org-patched-dozen-display-server-flaws PlainSec en 2026-10-08T10:38:09Z X.Org Patched Dozen Display-Server Flaws https://plainsec.com/it/stories/234f0bb1-bd09-4bba-b395-61c3f36f7bdc/x-org-patched-dozen-display-server-flaws PlainSec it 2026-10-08T10:38:09Z X.Org corregge 12 falle che espongono il display server https://plainsec.com/stories/62eacc39-8c66-4a4f-817d-a1419e7ad580/outlook-blocks-msix-installer-attachments PlainSec en 2026-10-07T19:01:58Z Microsoft Outlook Drops MSIX Email Delivery https://plainsec.com/it/stories/62eacc39-8c66-4a4f-817d-a1419e7ad580/outlook-blocks-msix-installer-attachments PlainSec it 2026-10-07T19:01:58Z Outlook blocca gli installer MSIX via email https://plainsec.com/stories/cb9ccec1-c319-4538-9fc1-167b6269c6cd/malfex-npm-packages-put-build-hosts-at-risk PlainSec en 2026-10-08T04:35:11Z MALFEX npm Packages Put Build Hosts at Risk https://plainsec.com/it/stories/cb9ccec1-c319-4538-9fc1-167b6269c6cd/malfex-npm-packages-put-build-hosts-at-risk PlainSec it 2026-10-08T04:35:11Z Pacchetti npm live infettano le macchine Windows di sviluppo