https://plainsec.com/stories/3de74f1b-37c0-4c9f-8ff2-ed7c9d0af181/poellm-hides-its-c2-in-github-poetry PlainSec en 2026-10-07T19:01:58Z PoeLLM Hides Its C2 in GitHub Poetry https://plainsec.com/it/stories/3de74f1b-37c0-4c9f-8ff2-ed7c9d0af181/poellm-hides-its-c2-in-github-poetry PlainSec it 2026-10-07T19:01:58Z PoeLLM trasforma i server esposti in una rete che si autoalimenta https://plainsec.com/stories/8c424ac7-5508-47a0-acee-f5703abee3a0/hfs-cookie-flaw-opens-a-remote-code-execution-path PlainSec en 2026-10-06T15:53:55Z HFS Cookie Flaw Opens a Remote Code Execution Path https://plainsec.com/it/stories/8c424ac7-5508-47a0-acee-f5703abee3a0/hfs-cookie-flaw-opens-a-remote-code-execution-path PlainSec it 2026-10-06T15:53:55Z HFS trasforma un cookie bug in esecuzione remota https://plainsec.com/stories/4f9a1776-a93d-4e7d-ba9a-d20cbe417da6/fortibleed-locks-out-fortinet-defenders PlainSec en 2026-10-07T14:48:57Z FortiBleed Turns Fortinet Logins Into Brokered Access https://plainsec.com/it/stories/4f9a1776-a93d-4e7d-ba9a-d20cbe417da6/fortibleed-locks-out-fortinet-defenders PlainSec it 2026-10-07T14:48:57Z FortiBleed passa dal furto all’accesso rivenduto https://plainsec.com/stories/8af5a865-a929-43cf-95df-666a4771993c/fbi-breach-traces-to-a-missed-peoplesoft-patch PlainSec en 2026-10-06T18:53:39Z FBI Breach Followed a Missed PeopleSoft Patch https://plainsec.com/it/stories/8af5a865-a929-43cf-95df-666a4771993c/fbi-breach-traces-to-a-missed-peoplesoft-patch PlainSec it 2026-10-06T18:53:39Z Un patch mancata apre il varco al breach FBI https://plainsec.com/stories/668551ad-ae5a-46d8-95b7-0984bc8f0a19/asos-app-alert-turned-extortion-channel PlainSec en 2026-10-06T21:11:26Z ASOS App Alert Turned Extortion Channel https://plainsec.com/it/stories/668551ad-ae5a-46d8-95b7-0984bc8f0a19/asos-app-alert-turned-extortion-channel PlainSec it 2026-10-06T21:11:26Z L’app ASOS diventa il mezzo del ricatto https://plainsec.com/stories/5b78305e-1230-44d2-9416-6ba26adcca85/gentlemen-affiliate-broke-the-raas-money-flow PlainSec en 2026-10-06T18:53:39Z Gentlemen Affiliate Broke the RaaS Money Flow https://plainsec.com/it/stories/5b78305e-1230-44d2-9416-6ba26adcca85/gentlemen-affiliate-broke-the-raas-money-flow PlainSec it 2026-10-06T18:53:39Z Un affiliato di The Gentlemen rompe la filiera del ransomware https://plainsec.com/stories/16a0ce1e-8904-4ba5-ad3f-7ac05acf7679/cve-2026-21589-atlassian-bitbucket PlainSec en 2026-10-06T08:30:07Z Atlassian File-Read Flaw Draws Live Probing https://plainsec.com/it/stories/16a0ce1e-8904-4ba5-ad3f-7ac05acf7679/cve-2026-21589-atlassian-bitbucket PlainSec it 2026-10-06T08:30:07Z Il file-read di Atlassian espone credenziali e chiavi https://plainsec.com/stories/5ae62da1-328e-4883-b2ec-c913a72e4650/forescout-finds-pqc-bottleneck-in-medical-hardware PlainSec en 2026-10-06T21:11:26Z Forescout Finds PQC Bottleneck in Medical Hardware https://plainsec.com/it/stories/5ae62da1-328e-4883-b2ec-c913a72e4650/forescout-finds-pqc-bottleneck-in-medical-hardware PlainSec it 2026-10-06T21:11:26Z La migrazione PQC nelle strutture sanitarie dipende dall’hardware https://plainsec.com/stories/6f6df11c-7fda-49ad-9042-d48c9a3c12b5/nikkei-mailbox-hijack-reached-journalistic-sources PlainSec en 2026-10-06T10:46:34Z Nikkei Mailbox Hijack Reached Journalistic Sources https://plainsec.com/it/stories/6f6df11c-7fda-49ad-9042-d48c9a3c12b5/nikkei-mailbox-hijack-reached-journalistic-sources PlainSec it 2026-10-06T10:46:34Z La mailbox di Nikkei diventa una piattaforma di phishing https://plainsec.com/stories/1ef39c14-d4ae-4a5c-8a98-cd1f14353a68/clickfix-uses-browser-cache-to-evade-run-limits PlainSec en 2026-10-06T08:30:07Z ClickFix Uses Browser Cache to Evade Run Limits https://plainsec.com/it/stories/1ef39c14-d4ae-4a5c-8a98-cd1f14353a68/clickfix-uses-browser-cache-to-evade-run-limits PlainSec it 2026-10-06T08:30:07Z ClickFix usa la cache del browser per aggirare Run https://plainsec.com/stories/eab710d4-576c-4c0c-9f66-6a3b5fe60c54/wikimedia-says-openai-agents-strained-wikipedia-operations PlainSec en 2026-10-06T15:53:55Z Wikimedia Agents Shifted From Edits to Proxy Abuse https://plainsec.com/it/stories/eab710d4-576c-4c0c-9f66-6a3b5fe60c54/wikimedia-says-openai-agents-strained-wikipedia-operations PlainSec it 2026-10-06T15:53:55Z Gli agenti OpenAI trasformano i tool Wikimedia in proxy https://plainsec.com/stories/881e70a6-b1cf-4541-bda9-c03da75d29d1/arizona-courts-breach-exposed-protection-orders PlainSec en 2026-10-07T20:52:24Z Arizona Courts Breach Exposed Protection Orders https://plainsec.com/it/stories/881e70a6-b1cf-4541-bda9-c03da75d29d1/arizona-courts-breach-exposed-protection-orders PlainSec it 2026-10-07T20:52:24Z I record dei tribunali esposti oltre le semplici tasse arretrate https://plainsec.com/stories/c3f4a1d8-c2e7-491c-8801-3d62b8628f91/langflow-exploitation-turns-ai-builders-into-secret-vaults PlainSec en 2026-10-06T12:45:09Z Langflow Exploitation Turns AI Builders Into Secret Vaults https://plainsec.com/it/stories/c3f4a1d8-c2e7-491c-8801-3d62b8628f91/langflow-exploitation-turns-ai-builders-into-secret-vaults PlainSec it 2026-10-06T12:45:09Z Langflow trasforma un bug in furto di credenziali https://plainsec.com/stories/d2f6b172-7996-4ff8-b60d-5c365d321943/google-blocks-counterfeit-certificates-after-registry-breach PlainSec en 2026-10-07T13:07:27Z Registry Hijack Minted Valid Google Certificates https://plainsec.com/it/stories/d2f6b172-7996-4ff8-b60d-5c365d321943/google-blocks-counterfeit-certificates-after-registry-breach PlainSec it 2026-10-07T13:07:27Z La fiducia del browser è stata dirottata a monte https://plainsec.com/stories/f9853266-dd0d-4c5a-be77-9fe3ddf056cf/wordpress-plugin-xss-leaves-backdoors-behind PlainSec en 2026-10-07T00:31:07Z WordPress Plugin XSS Leaves Backdoors Behind https://plainsec.com/it/stories/f9853266-dd0d-4c5a-be77-9fe3ddf056cf/wordpress-plugin-xss-leaves-backdoors-behind PlainSec it 2026-10-07T00:31:07Z Lo stored XSS diventa accesso amministratore persistente su WordPress https://plainsec.com/stories/d302451d-e498-482c-88b8-237d7d9962ef/github-copilot-cli-leaks-secrets-through-encrypted-pages PlainSec en 2026-10-07T13:07:27Z GitHub Copilot CLI Leaks Secrets Through Encrypted Pages https://plainsec.com/it/stories/d302451d-e498-482c-88b8-237d7d9962ef/github-copilot-cli-leaks-secrets-through-encrypted-pages PlainSec it 2026-10-07T13:07:27Z Copilot CLI può trasformare una pagina web in furto di segreti https://plainsec.com/stories/5e86adae-3e24-4e3d-b925-a485e61ae37f/lmcache-routable-cache-server-enables-remote-code-execution PlainSec en 2026-10-07T22:59:50Z LMCache Routable Cache Server Enables Remote Code Execution https://plainsec.com/it/stories/5e86adae-3e24-4e3d-b925-a485e61ae37f/lmcache-routable-cache-server-enables-remote-code-execution PlainSec it 2026-10-07T22:59:50Z LMCache espone l’LLM serving a RCE senza patch https://plainsec.com/stories/f8170250-1a0c-4b34-8949-0d3944b37cec/sonicwall-sma1000-series-appliances-affected-by-multiple-vulnerabilities PlainSec en 2026-10-07T10:49:14Z SonicWall’s SMA1000 Fix Still Needs One More Step https://plainsec.com/it/stories/f8170250-1a0c-4b34-8949-0d3944b37cec/sonicwall-sma1000-series-appliances-affected-by-multiple-vulnerabilities PlainSec it 2026-10-07T10:49:14Z SonicWall SMA1000 richiede un secondo hotfix https://plainsec.com/stories/a8a78f7a-d407-424b-b395-5cedce59c074/ransomware-goes-after-the-recovery-path PlainSec en 2026-10-07T17:12:53Z Ransomware Goes After the Recovery Path https://plainsec.com/it/stories/a8a78f7a-d407-424b-b395-5cedce59c074/ransomware-goes-after-the-recovery-path PlainSec it 2026-10-07T17:12:53Z I backup sono il nuovo bersaglio del ransomware https://plainsec.com/stories/c26cf471-2a71-4e93-a855-f21259e9c5a2/coalition-pushes-cisa-to-assign-ot-ownership PlainSec en 2026-10-07T13:07:27Z Coalition Pushes CISA to Assign OT Ownership https://plainsec.com/it/stories/c26cf471-2a71-4e93-a855-f21259e9c5a2/coalition-pushes-cisa-to-assign-ot-ownership PlainSec it 2026-10-07T13:07:27Z Cisa sotto pressione per colmare il vuoto sull’ot federale https://plainsec.com/stories/86cb38ca-398c-4a9c-8567-5a4f5a3f4163/pwn2own-ireland-opens-with-mobile-focus PlainSec en 2026-10-07T17:12:53Z Pwn2Own Day One Put AI Tools in Scope https://plainsec.com/it/stories/86cb38ca-398c-4a9c-8567-5a4f5a3f4163/pwn2own-ireland-opens-with-mobile-focus PlainSec it 2026-10-07T17:12:53Z Pwn2Own mostra che l’AI espone bug più pesanti https://plainsec.com/stories/62eacc39-8c66-4a4f-817d-a1419e7ad580/outlook-blocks-msix-installer-attachments PlainSec en 2026-10-07T19:01:58Z Microsoft Outlook Drops MSIX Email Delivery https://plainsec.com/it/stories/62eacc39-8c66-4a4f-817d-a1419e7ad580/outlook-blocks-msix-installer-attachments PlainSec it 2026-10-07T19:01:58Z Outlook blocca gli installer MSIX via email https://plainsec.com/stories/9ac21280-7134-499a-8765-e4ac850ad81a/cve-2026-106197-google-chrome PlainSec en 2026-10-07T17:12:53Z Chrome 155 Patches Four Critical Memory Bugs https://plainsec.com/it/stories/9ac21280-7134-499a-8765-e4ac850ad81a/cve-2026-106197-google-chrome PlainSec it 2026-10-07T17:12:53Z Chrome chiude 247 falle, quattro sono critiche https://plainsec.com/stories/29c27f06-1e36-48da-84ee-727451c72de1/cisco-splits-apic-and-meraki-fixes-across-the-stack PlainSec en 2026-10-07T19:01:58Z Cisco Splits APIC and Meraki Fixes Across the Stack https://plainsec.com/it/stories/29c27f06-1e36-48da-84ee-727451c72de1/cisco-splits-apic-and-meraki-fixes-across-the-stack PlainSec it 2026-10-07T19:01:58Z Cisco chiude APIC e Meraki con più rilasci distinti https://plainsec.com/stories/8a41536b-98fb-4bd8-a929-28ce5015fb86/mcp-marketplaces-sell-trust-without-governance PlainSec en 2026-10-06T15:53:55Z MCP Marketplaces Sell Trust Without Governance https://plainsec.com/it/stories/8a41536b-98fb-4bd8-a929-28ce5015fb86/mcp-marketplaces-sell-trust-without-governance PlainSec it 2026-10-06T15:53:55Z La fiducia cieca nei server MCP apre una superficie d’attacco https://plainsec.com/stories/63f5118c-46d9-4cc8-b6df-9ae94486446b/crowdstrike-finds-a-blind-spot-in-llm-guards PlainSec en 2026-10-07T02:26:11Z CrowdStrike Finds a Blind Spot in LLM Guards https://plainsec.com/it/stories/63f5118c-46d9-4cc8-b6df-9ae94486446b/crowdstrike-finds-a-blind-spot-in-llm-guards PlainSec it 2026-10-07T02:26:11Z I filtri per request saltano quando i prompt si sommano https://plainsec.com/stories/ef3ef51e-f0d9-4c4f-9b08-32250f9eb0bf/fake-ai-sites-steal-ad-account-logins PlainSec en 2026-10-06T21:11:26Z Fake ChatGPT Sites Steal Ad Accounts https://plainsec.com/it/stories/ef3ef51e-f0d9-4c4f-9b08-32250f9eb0bf/fake-ai-sites-steal-ad-account-logins PlainSec it 2026-10-06T21:11:26Z Le frodi su ChatGPT e Gemini bucano la MFA degli account adv https://plainsec.com/stories/fc69f824-6c1c-4467-8d88-1ea68084d0e1/blinder-tunnel-hides-iranian-intrusions-in-github PlainSec en 2026-10-06T15:53:55Z Blinder Tunnel Hides Iranian Intrusions in GitHub https://plainsec.com/it/stories/fc69f824-6c1c-4467-8d88-1ea68084d0e1/blinder-tunnel-hides-iranian-intrusions-in-github PlainSec it 2026-10-06T15:53:55Z Blinder Tunnel nasconde il C2 in GitHub https://plainsec.com/stories/967db37d-8a9d-49fb-8b4c-0009cfb74b55/ploutus-arrest-could-link-atm-jackpotting-crews PlainSec en 2026-10-06T18:53:39Z Ploutus Arrest Could Link ATM Jackpotting Crews https://plainsec.com/it/stories/967db37d-8a9d-49fb-8b4c-0009cfb74b55/ploutus-arrest-could-link-atm-jackpotting-crews PlainSec it 2026-10-06T18:53:39Z Arrestato il presunto ideatore di Ploutus https://plainsec.com/stories/ab4951de-f526-43a5-be8e-1f11c17e2588/risolte-vulnerabilit-nei-chipset-mediatek PlainSec en 2026-10-06T12:45:09Z MediaTek Bulletin Pushes Risk to OEM Rollouts https://plainsec.com/it/stories/ab4951de-f526-43a5-be8e-1f11c17e2588/risolte-vulnerabilit-nei-chipset-mediatek PlainSec it 2026-10-06T12:45:09Z La patch MediaTek vale solo quando arriva sugli OEM https://plainsec.com/stories/5efe9ff0-419a-480a-b002-5ec2db841896/hpe-ilo-7-bypass-exposes-remote-management PlainSec en 2026-10-06T12:45:09Z HPE iLO 7 Bypass Exposes Remote Management https://plainsec.com/it/stories/5efe9ff0-419a-480a-b002-5ec2db841896/hpe-ilo-7-bypass-exposes-remote-management PlainSec it 2026-10-06T12:45:09Z HPE iLO 7 accetta accessi senza credenziali https://plainsec.com/stories/51f37da7-dda4-415c-8a38-95b1a35b1445/dell-dsu-cli-flaw-can-hand-out-root PlainSec en 2026-10-06T18:53:39Z Dell DSU CLI Flaw Can Hand Out Root https://plainsec.com/it/stories/51f37da7-dda4-415c-8a38-95b1a35b1445/dell-dsu-cli-flaw-can-hand-out-root PlainSec it 2026-10-06T18:53:39Z Un tool di deployment porta a root su Linux https://plainsec.com/stories/8c531b9f-56f7-41e9-b259-abea4bdcabab/datadog-spots-bedrock-checks-in-stolen-aws-keys PlainSec en 2026-10-06T15:53:55Z Datadog Spots Bedrock Checks in Stolen AWS Keys https://plainsec.com/it/stories/8c531b9f-56f7-41e9-b259-abea4bdcabab/datadog-spots-bedrock-checks-in-stolen-aws-keys PlainSec it 2026-10-06T15:53:55Z Le AWS key rubate valgono di più se aprono Bedrock https://plainsec.com/stories/31a29641-2103-41aa-9a18-6663d000954e/shinyhunters-claim-peoplesoft-zero-day-broke-fbi-defenses PlainSec en 2026-10-06T04:33:37Z ShinyHunters Claim PeopleSoft Zero-Day Broke FBI Defenses https://plainsec.com/it/stories/31a29641-2103-41aa-9a18-6663d000954e/shinyhunters-claim-peoplesoft-zero-day-broke-fbi-defenses PlainSec it 2026-10-06T04:33:37Z PeopleSoft esposto in rete amplia la portata del zero-day https://plainsec.com/stories/d8d656f2-2fec-4735-87b9-fde3161a093b/malfex-malware-still-slips-past-npm-cleanup PlainSec en 2026-10-06T15:53:55Z MALFEX Malware Still Slips Past npm Cleanup https://plainsec.com/it/stories/d8d656f2-2fec-4735-87b9-fde3161a093b/malfex-malware-still-slips-past-npm-cleanup PlainSec it 2026-10-06T15:53:55Z MALFEX resta dentro npm nonostante le rimozioni https://plainsec.com/stories/f7000aeb-4eed-45d0-bf03-2991a5c86040/langflow-mehrere-schwachstellen PlainSec en 2026-10-06T16:55:48Z Langflow PoCs Expose Header Trust and MCP RCE https://plainsec.com/it/stories/f7000aeb-4eed-45d0-bf03-2991a5c86040/langflow-mehrere-schwachstellen PlainSec it 2026-10-06T16:55:48Z Langflow espone l’AI workflow con un header falsificato https://plainsec.com/stories/15eff06c-3f33-474d-9540-dbad91daf72d/atb-extortion-leak-shifts-focus-to-alleged-theft PlainSec en 2026-10-05T23:19:34Z ATB Extortion Leak Shifts Focus to Alleged Theft https://plainsec.com/it/stories/15eff06c-3f33-474d-9540-dbad91daf72d/atb-extortion-leak-shifts-focus-to-alleged-theft PlainSec it 2026-10-05T23:19:34Z Campione di dati pubblicato, la pressione sale su ATB https://plainsec.com/stories/0b09ca51-64d9-4d64-8845-410016e53d15/action1-rmm-hides-inside-a-phishing-loader PlainSec en 2026-10-06T12:45:09Z Action1 RMM Hides Inside a Phishing Loader https://plainsec.com/it/stories/0b09ca51-64d9-4d64-8845-410016e53d15/action1-rmm-hides-inside-a-phishing-loader PlainSec it 2026-10-06T12:45:09Z Action1 usato come canale invisibile per il controllo remoto https://plainsec.com/stories/78466b4e-77c8-4b51-8802-ee420832b967/cve-2026-79820-hpe-ilo PlainSec en 2026-10-06T04:33:37Z HPE iLO Auth Bypass Hits the Hardware Plane https://plainsec.com/it/stories/78466b4e-77c8-4b51-8802-ee420832b967/cve-2026-79820-hpe-ilo PlainSec it 2026-10-06T04:33:37Z iLO di HPE espone la console di gestione completa https://plainsec.com/stories/e9dc87ce-2b68-4e86-aa22-19ad356b131c/milk-dragon-moves-retail-phishing-into-marketplace-ads PlainSec en 2026-10-06T04:33:37Z Milk Dragon Moves Retail Phishing Into Marketplace Ads https://plainsec.com/it/stories/e9dc87ce-2b68-4e86-aa22-19ad356b131c/milk-dragon-moves-retail-phishing-into-marketplace-ads PlainSec it 2026-10-06T04:33:37Z Marketplace social usati per rubare carte e OTP https://plainsec.com/stories/6a5fead5-661a-403f-a755-a95f3537e4f0/belarusian-hackers-hid-in-a-russian-health-network PlainSec en 2026-10-06T06:26:17Z Belarusian Hackers Hid in a Russian Health Network https://plainsec.com/it/stories/6a5fead5-661a-403f-a755-a95f3537e4f0/belarusian-hackers-hid-in-a-russian-health-network PlainSec it 2026-10-06T06:26:17Z Una rete sanitaria-trampolino apre il fianco dei fornitori collegati