https://plainsec.com/stories/cb2da9ce-7bfa-4ddb-be42-bd1cc380c923/fortinet-fortimail-path-traversal-is-actively-exploited PlainSec en 2026-10-08T10:38:09Z Fortinet FortiMail path traversal is actively exploited https://plainsec.com/it/stories/cb2da9ce-7bfa-4ddb-be42-bd1cc380c923/fortinet-fortimail-path-traversal-is-actively-exploited PlainSec it 2026-10-08T10:38:09Z FortiMail espone il gateway mail con uno zero-day attivo https://plainsec.com/stories/3de74f1b-37c0-4c9f-8ff2-ed7c9d0af181/poellm-hides-its-c2-in-github-poetry PlainSec en 2026-10-07T19:01:58Z PoeLLM Hides Its C2 in GitHub Poetry https://plainsec.com/it/stories/3de74f1b-37c0-4c9f-8ff2-ed7c9d0af181/poellm-hides-its-c2-in-github-poetry PlainSec it 2026-10-07T19:01:58Z PoeLLM trasforma i server esposti in una rete che si autoalimenta https://plainsec.com/stories/4f9a1776-a93d-4e7d-ba9a-d20cbe417da6/fortibleed-locks-out-fortinet-defenders PlainSec en 2026-10-07T14:48:57Z FortiBleed Turns Fortinet Logins Into Brokered Access https://plainsec.com/it/stories/4f9a1776-a93d-4e7d-ba9a-d20cbe417da6/fortibleed-locks-out-fortinet-defenders PlainSec it 2026-10-07T14:48:57Z FortiBleed passa dal furto all’accesso rivenduto https://plainsec.com/stories/e334c599-5406-4fb6-87eb-f1aa858658e8/tensorlake-npm-release-carried-a-self-spreading-worm PlainSec en 2026-10-08T08:34:54Z Tensorlake npm release carried a self-spreading worm https://plainsec.com/it/stories/e334c599-5406-4fb6-87eb-f1aa858658e8/tensorlake-npm-release-carried-a-self-spreading-worm PlainSec it 2026-10-08T08:34:54Z Tensorlake diventa un worm che ruba e ripubblica package https://plainsec.com/stories/881e70a6-b1cf-4541-bda9-c03da75d29d1/arizona-courts-breach-exposed-protection-orders PlainSec en 2026-10-07T20:52:24Z Arizona Courts Breach Exposed Protection Orders https://plainsec.com/it/stories/881e70a6-b1cf-4541-bda9-c03da75d29d1/arizona-courts-breach-exposed-protection-orders PlainSec it 2026-10-07T20:52:24Z I record dei tribunali esposti oltre le semplici tasse arretrate https://plainsec.com/stories/5ae62da1-328e-4883-b2ec-c913a72e4650/forescout-finds-pqc-bottleneck-in-medical-hardware PlainSec en 2026-10-06T21:11:26Z Forescout Finds PQC Bottleneck in Medical Hardware https://plainsec.com/it/stories/5ae62da1-328e-4883-b2ec-c913a72e4650/forescout-finds-pqc-bottleneck-in-medical-hardware PlainSec it 2026-10-06T21:11:26Z La migrazione PQC nelle strutture sanitarie dipende dall’hardware https://plainsec.com/stories/668551ad-ae5a-46d8-95b7-0984bc8f0a19/asos-app-alert-turned-extortion-channel PlainSec en 2026-10-06T21:11:26Z ASOS App Alert Turned Extortion Channel https://plainsec.com/it/stories/668551ad-ae5a-46d8-95b7-0984bc8f0a19/asos-app-alert-turned-extortion-channel PlainSec it 2026-10-06T21:11:26Z L’app ASOS diventa il mezzo del ricatto https://plainsec.com/stories/9ac21280-7134-499a-8765-e4ac850ad81a/cve-2026-106197-google-chrome PlainSec en 2026-10-07T17:12:53Z Chrome 155 Patches Four Critical Memory Bugs https://plainsec.com/it/stories/9ac21280-7134-499a-8765-e4ac850ad81a/cve-2026-106197-google-chrome PlainSec it 2026-10-07T17:12:53Z Chrome chiude 247 falle, quattro sono critiche https://plainsec.com/stories/5e86adae-3e24-4e3d-b925-a485e61ae37f/lmcache-routable-cache-server-enables-remote-code-execution PlainSec en 2026-10-07T22:59:50Z LMCache Routable Cache Server Enables Remote Code Execution https://plainsec.com/it/stories/5e86adae-3e24-4e3d-b925-a485e61ae37f/lmcache-routable-cache-server-enables-remote-code-execution PlainSec it 2026-10-07T22:59:50Z LMCache espone l’LLM serving a RCE senza patch https://plainsec.com/stories/868ee69d-c93b-4201-bcd2-1336210ed1b2/monstercloud-charged-over-fake-ransomware-recovery PlainSec en 2026-10-08T10:38:09Z MonsterCloud charged over fake ransomware recovery https://plainsec.com/it/stories/868ee69d-c93b-4201-bcd2-1336210ed1b2/monstercloud-charged-over-fake-ransomware-recovery PlainSec it 2026-10-08T10:38:09Z Il recupero ransomware finisce in frode da 19 milioni https://plainsec.com/stories/692fad1d-27cf-4dec-b454-ac709a0dd725/16-firefox-extensions-impersonate-wallets-to-steal-seeds PlainSec en 2026-10-08T10:38:09Z 16 Firefox Extensions Impersonate Wallets to Steal Seeds https://plainsec.com/it/stories/692fad1d-27cf-4dec-b454-ac709a0dd725/16-firefox-extensions-impersonate-wallets-to-steal-seeds PlainSec it 2026-10-08T10:38:09Z Sedici estensioni Firefox clonano wallet e rubano seed phrase https://plainsec.com/stories/c26cf471-2a71-4e93-a855-f21259e9c5a2/coalition-pushes-cisa-to-assign-ot-ownership PlainSec en 2026-10-07T13:07:27Z Coalition Pushes CISA to Assign OT Ownership https://plainsec.com/it/stories/c26cf471-2a71-4e93-a855-f21259e9c5a2/coalition-pushes-cisa-to-assign-ot-ownership PlainSec it 2026-10-07T13:07:27Z Cisa sotto pressione per colmare il vuoto sull’ot federale https://plainsec.com/stories/86cb38ca-398c-4a9c-8567-5a4f5a3f4163/pwn2own-ireland-opens-with-mobile-focus PlainSec en 2026-10-07T17:12:53Z Pwn2Own Day One Put AI Tools in Scope https://plainsec.com/it/stories/86cb38ca-398c-4a9c-8567-5a4f5a3f4163/pwn2own-ireland-opens-with-mobile-focus PlainSec it 2026-10-07T17:12:53Z Pwn2Own mostra che l’AI espone bug più pesanti https://plainsec.com/stories/234f0bb1-bd09-4bba-b395-61c3f36f7bdc/x-org-patched-dozen-display-server-flaws PlainSec en 2026-10-08T10:38:09Z X.Org Patched Dozen Display-Server Flaws https://plainsec.com/it/stories/234f0bb1-bd09-4bba-b395-61c3f36f7bdc/x-org-patched-dozen-display-server-flaws PlainSec it 2026-10-08T10:38:09Z X.Org corregge 12 falle che espongono il display server https://plainsec.com/stories/d2f6b172-7996-4ff8-b60d-5c365d321943/google-blocks-counterfeit-certificates-after-registry-breach PlainSec en 2026-10-07T13:07:27Z Registry Hijack Minted Valid Google Certificates https://plainsec.com/it/stories/d2f6b172-7996-4ff8-b60d-5c365d321943/google-blocks-counterfeit-certificates-after-registry-breach PlainSec it 2026-10-07T13:07:27Z La fiducia del browser è stata dirottata a monte https://plainsec.com/stories/f8170250-1a0c-4b34-8949-0d3944b37cec/sonicwall-sma1000-series-appliances-affected-by-multiple-vulnerabilities PlainSec en 2026-10-07T10:49:14Z SonicWall’s SMA1000 Fix Still Needs One More Step https://plainsec.com/it/stories/f8170250-1a0c-4b34-8949-0d3944b37cec/sonicwall-sma1000-series-appliances-affected-by-multiple-vulnerabilities PlainSec it 2026-10-07T10:49:14Z SonicWall SMA1000 richiede un secondo hotfix https://plainsec.com/stories/62eacc39-8c66-4a4f-817d-a1419e7ad580/outlook-blocks-msix-installer-attachments PlainSec en 2026-10-07T19:01:58Z Microsoft Outlook Drops MSIX Email Delivery https://plainsec.com/it/stories/62eacc39-8c66-4a4f-817d-a1419e7ad580/outlook-blocks-msix-installer-attachments PlainSec it 2026-10-07T19:01:58Z Outlook blocca gli installer MSIX via email https://plainsec.com/stories/a8a78f7a-d407-424b-b395-5cedce59c074/ransomware-goes-after-the-recovery-path PlainSec en 2026-10-07T17:12:53Z Ransomware Goes After the Recovery Path https://plainsec.com/it/stories/a8a78f7a-d407-424b-b395-5cedce59c074/ransomware-goes-after-the-recovery-path PlainSec it 2026-10-07T17:12:53Z I backup sono il nuovo bersaglio del ransomware https://plainsec.com/stories/cb9ccec1-c319-4538-9fc1-167b6269c6cd/malfex-npm-packages-put-build-hosts-at-risk PlainSec en 2026-10-08T04:35:11Z MALFEX npm Packages Put Build Hosts at Risk https://plainsec.com/it/stories/cb9ccec1-c319-4538-9fc1-167b6269c6cd/malfex-npm-packages-put-build-hosts-at-risk PlainSec it 2026-10-08T04:35:11Z Pacchetti npm live infettano le macchine Windows di sviluppo https://plainsec.com/stories/29c27f06-1e36-48da-84ee-727451c72de1/cisco-splits-apic-and-meraki-fixes-across-the-stack PlainSec en 2026-10-07T19:01:58Z Cisco NX-OS and Meraki widen the patch queue https://plainsec.com/it/stories/29c27f06-1e36-48da-84ee-727451c72de1/cisco-splits-apic-and-meraki-fixes-across-the-stack PlainSec it 2026-10-07T19:01:58Z Cisco allarga il patching da NX-OS a Meraki https://plainsec.com/stories/eab710d4-576c-4c0c-9f66-6a3b5fe60c54/wikimedia-says-openai-agents-strained-wikipedia-operations PlainSec en 2026-10-06T15:53:55Z Wikimedia Agents Shifted From Edits to Proxy Abuse https://plainsec.com/it/stories/eab710d4-576c-4c0c-9f66-6a3b5fe60c54/wikimedia-says-openai-agents-strained-wikipedia-operations PlainSec it 2026-10-06T15:53:55Z Gli agenti OpenAI trasformano i tool Wikimedia in proxy https://plainsec.com/stories/d302451d-e498-482c-88b8-237d7d9962ef/github-copilot-cli-leaks-secrets-through-encrypted-pages PlainSec en 2026-10-07T13:07:27Z GitHub Copilot CLI Leaks Secrets Through Encrypted Pages https://plainsec.com/it/stories/d302451d-e498-482c-88b8-237d7d9962ef/github-copilot-cli-leaks-secrets-through-encrypted-pages PlainSec it 2026-10-07T13:07:27Z Copilot CLI può trasformare una pagina web in furto di segreti https://plainsec.com/stories/8c424ac7-5508-47a0-acee-f5703abee3a0/hfs-cookie-flaw-opens-a-remote-code-execution-path PlainSec en 2026-10-06T15:53:55Z HFS Cookie Flaw Opens a Remote Code Execution Path https://plainsec.com/it/stories/8c424ac7-5508-47a0-acee-f5703abee3a0/hfs-cookie-flaw-opens-a-remote-code-execution-path PlainSec it 2026-10-06T15:53:55Z HFS trasforma un cookie bug in esecuzione remota https://plainsec.com/stories/8af5a865-a929-43cf-95df-666a4771993c/fbi-breach-traces-to-a-missed-peoplesoft-patch PlainSec en 2026-10-06T18:53:39Z FBI Breach Followed a Missed PeopleSoft Patch https://plainsec.com/it/stories/8af5a865-a929-43cf-95df-666a4771993c/fbi-breach-traces-to-a-missed-peoplesoft-patch PlainSec it 2026-10-06T18:53:39Z Un patch mancata apre il varco al breach FBI https://plainsec.com/stories/5b78305e-1230-44d2-9416-6ba26adcca85/gentlemen-affiliate-broke-the-raas-money-flow PlainSec en 2026-10-06T18:53:39Z Gentlemen Affiliate Broke the RaaS Money Flow https://plainsec.com/it/stories/5b78305e-1230-44d2-9416-6ba26adcca85/gentlemen-affiliate-broke-the-raas-money-flow PlainSec it 2026-10-06T18:53:39Z Un affiliato di The Gentlemen rompe la filiera del ransomware https://plainsec.com/stories/c3f4a1d8-c2e7-491c-8801-3d62b8628f91/langflow-exploitation-turns-ai-builders-into-secret-vaults PlainSec en 2026-10-06T12:45:09Z Langflow Exploitation Turns AI Builders Into Secret Vaults https://plainsec.com/it/stories/c3f4a1d8-c2e7-491c-8801-3d62b8628f91/langflow-exploitation-turns-ai-builders-into-secret-vaults PlainSec it 2026-10-06T12:45:09Z Langflow trasforma un bug in furto di credenziali https://plainsec.com/stories/f9853266-dd0d-4c5a-be77-9fe3ddf056cf/wordpress-plugin-xss-leaves-backdoors-behind PlainSec en 2026-10-07T00:31:07Z WordPress Plugin XSS Leaves Backdoors Behind https://plainsec.com/it/stories/f9853266-dd0d-4c5a-be77-9fe3ddf056cf/wordpress-plugin-xss-leaves-backdoors-behind PlainSec it 2026-10-07T00:31:07Z Lo stored XSS diventa accesso amministratore persistente su WordPress https://plainsec.com/stories/8a41536b-98fb-4bd8-a929-28ce5015fb86/mcp-marketplaces-sell-trust-without-governance PlainSec en 2026-10-06T15:53:55Z MCP Marketplaces Sell Trust Without Governance https://plainsec.com/it/stories/8a41536b-98fb-4bd8-a929-28ce5015fb86/mcp-marketplaces-sell-trust-without-governance PlainSec it 2026-10-06T15:53:55Z La fiducia cieca nei server MCP apre una superficie d’attacco https://plainsec.com/stories/63f5118c-46d9-4cc8-b6df-9ae94486446b/crowdstrike-finds-a-blind-spot-in-llm-guards PlainSec en 2026-10-07T02:26:11Z CrowdStrike Finds a Blind Spot in LLM Guards https://plainsec.com/it/stories/63f5118c-46d9-4cc8-b6df-9ae94486446b/crowdstrike-finds-a-blind-spot-in-llm-guards PlainSec it 2026-10-07T02:26:11Z I filtri per request saltano quando i prompt si sommano https://plainsec.com/stories/ef3ef51e-f0d9-4c4f-9b08-32250f9eb0bf/fake-ai-sites-steal-ad-account-logins PlainSec en 2026-10-06T21:11:26Z Fake ChatGPT Sites Steal Ad Accounts https://plainsec.com/it/stories/ef3ef51e-f0d9-4c4f-9b08-32250f9eb0bf/fake-ai-sites-steal-ad-account-logins PlainSec it 2026-10-06T21:11:26Z Le frodi su ChatGPT e Gemini bucano la MFA degli account adv https://plainsec.com/stories/fc69f824-6c1c-4467-8d88-1ea68084d0e1/blinder-tunnel-hides-iranian-intrusions-in-github PlainSec en 2026-10-06T15:53:55Z Blinder Tunnel Hides Iranian Intrusions in GitHub https://plainsec.com/it/stories/fc69f824-6c1c-4467-8d88-1ea68084d0e1/blinder-tunnel-hides-iranian-intrusions-in-github PlainSec it 2026-10-06T15:53:55Z Blinder Tunnel nasconde il C2 in GitHub https://plainsec.com/stories/967db37d-8a9d-49fb-8b4c-0009cfb74b55/ploutus-arrest-could-link-atm-jackpotting-crews PlainSec en 2026-10-06T18:53:39Z Ploutus Arrest Could Link ATM Jackpotting Crews https://plainsec.com/it/stories/967db37d-8a9d-49fb-8b4c-0009cfb74b55/ploutus-arrest-could-link-atm-jackpotting-crews PlainSec it 2026-10-06T18:53:39Z Arrestato il presunto ideatore di Ploutus https://plainsec.com/stories/ab4951de-f526-43a5-be8e-1f11c17e2588/risolte-vulnerabilit-nei-chipset-mediatek PlainSec en 2026-10-06T12:45:09Z MediaTek Bulletin Pushes Risk to OEM Rollouts https://plainsec.com/it/stories/ab4951de-f526-43a5-be8e-1f11c17e2588/risolte-vulnerabilit-nei-chipset-mediatek PlainSec it 2026-10-06T12:45:09Z La patch MediaTek vale solo quando arriva sugli OEM https://plainsec.com/stories/5efe9ff0-419a-480a-b002-5ec2db841896/hpe-ilo-7-bypass-exposes-remote-management PlainSec en 2026-10-06T12:45:09Z HPE iLO 7 Bypass Exposes Remote Management https://plainsec.com/it/stories/5efe9ff0-419a-480a-b002-5ec2db841896/hpe-ilo-7-bypass-exposes-remote-management PlainSec it 2026-10-06T12:45:09Z HPE iLO 7 accetta accessi senza credenziali https://plainsec.com/stories/51f37da7-dda4-415c-8a38-95b1a35b1445/dell-dsu-cli-flaw-can-hand-out-root PlainSec en 2026-10-06T18:53:39Z Dell DSU CLI Flaw Can Hand Out Root https://plainsec.com/it/stories/51f37da7-dda4-415c-8a38-95b1a35b1445/dell-dsu-cli-flaw-can-hand-out-root PlainSec it 2026-10-06T18:53:39Z Un tool di deployment porta a root su Linux https://plainsec.com/stories/8c531b9f-56f7-41e9-b259-abea4bdcabab/datadog-spots-bedrock-checks-in-stolen-aws-keys PlainSec en 2026-10-06T15:53:55Z Datadog Spots Bedrock Checks in Stolen AWS Keys https://plainsec.com/it/stories/8c531b9f-56f7-41e9-b259-abea4bdcabab/datadog-spots-bedrock-checks-in-stolen-aws-keys PlainSec it 2026-10-06T15:53:55Z Le AWS key rubate valgono di più se aprono Bedrock https://plainsec.com/stories/d8d656f2-2fec-4735-87b9-fde3161a093b/malfex-malware-still-slips-past-npm-cleanup PlainSec en 2026-10-06T15:53:55Z MALFEX Malware Still Slips Past npm Cleanup https://plainsec.com/it/stories/d8d656f2-2fec-4735-87b9-fde3161a093b/malfex-malware-still-slips-past-npm-cleanup PlainSec it 2026-10-06T15:53:55Z MALFEX resta dentro npm nonostante le rimozioni https://plainsec.com/stories/f7000aeb-4eed-45d0-bf03-2991a5c86040/langflow-mehrere-schwachstellen PlainSec en 2026-10-06T16:55:48Z Langflow PoCs Expose Header Trust and MCP RCE https://plainsec.com/it/stories/f7000aeb-4eed-45d0-bf03-2991a5c86040/langflow-mehrere-schwachstellen PlainSec it 2026-10-06T16:55:48Z Langflow espone l’AI workflow con un header falsificato https://plainsec.com/stories/0b09ca51-64d9-4d64-8845-410016e53d15/action1-rmm-hides-inside-a-phishing-loader PlainSec en 2026-10-06T12:45:09Z Action1 RMM Hides Inside a Phishing Loader https://plainsec.com/it/stories/0b09ca51-64d9-4d64-8845-410016e53d15/action1-rmm-hides-inside-a-phishing-loader PlainSec it 2026-10-06T12:45:09Z Action1 usato come canale invisibile per il controllo remoto