https://plainsec.com/stories/4ee8d223-ab43-4efb-979f-cc29f91945d9/plex-exploit-chain-drops-miners-and-proxy-software PlainSec en 2026-10-19T16:54:50Z Plex exploit chain drops miners and proxy software https://plainsec.com/it/stories/4ee8d223-ab43-4efb-979f-cc29f91945d9/plex-exploit-chain-drops-miners-and-proxy-software PlainSec it 2026-10-19T16:54:50Z Un server Plex diventa miniera e proxy residenziale https://plainsec.com/stories/655972a6-c4a2-4ec1-99a0-583940d86960/ghostaction-shifts-from-blocked-workflows-to-github-account-theft PlainSec en 2026-10-19T16:54:50Z GhostAction shifts from blocked workflows to GitHub account theft https://plainsec.com/it/stories/655972a6-c4a2-4ec1-99a0-583940d86960/ghostaction-shifts-from-blocked-workflows-to-github-account-theft PlainSec it 2026-10-19T16:54:50Z GitHub blocca il workflow, GhostAction punta agli account dei maintainer https://plainsec.com/stories/bbafd99e-63a2-4d5d-94ff-af2fd4fbe62f/rank-math-pro-backdoor-outlives-the-plugin PlainSec en 2026-10-19T18:28:57Z Rank Math PRO backdoor outlives the plugin https://plainsec.com/it/stories/bbafd99e-63a2-4d5d-94ff-af2fd4fbe62f/rank-math-pro-backdoor-outlives-the-plugin PlainSec it 2026-10-19T18:28:57Z La backdoor sopravvive alla reinstallazione di Rank Math PRO https://plainsec.com/stories/fd1751a0-5cbb-491b-b939-355c4eb94b42/connectwise-backup-credential-opened-173-microsoft-365-tenants PlainSec en 2026-10-17T19:59:37Z ConnectWise incident reaches 162 Microsoft 365 tenants https://plainsec.com/it/stories/fd1751a0-5cbb-491b-b939-355c4eb94b42/connectwise-backup-credential-opened-173-microsoft-365-tenants PlainSec it 2026-10-17T19:59:37Z La compromissione ConnectWise raggiunge 162 tenant Microsoft 365 https://plainsec.com/stories/65d4bcb1-4a3b-49a9-a41e-db8d6537c31c/opencode-console-breach-puts-linked-model-keys-at-risk PlainSec en 2026-10-19T18:28:57Z OpenCode Console breach puts linked model keys at risk https://plainsec.com/it/stories/65d4bcb1-4a3b-49a9-a41e-db8d6537c31c/opencode-console-breach-puts-linked-model-keys-at-risk PlainSec it 2026-10-19T18:28:57Z OpenCode: un accesso alla Console può esporre chiavi di tre provider https://plainsec.com/stories/42d975ce-cceb-4d07-ba11-5d35de334834/drupal-field-ui-flaw-can-reopen-through-modules PlainSec en 2026-10-19T08:28:07Z Drupal RCE paths depend on modules around core https://plainsec.com/it/stories/42d975ce-cceb-4d07-ba11-5d35de334834/drupal-field-ui-flaw-can-reopen-through-modules PlainSec it 2026-10-19T08:28:07Z Drupal: la patch del core non chiude ogni via alla RCE https://plainsec.com/stories/44114131-f6f4-4828-98fb-db70cb6920dc/f5-risolte-vulnerabilit-nei-prodotti-nginx PlainSec en 2026-10-19T16:54:50Z F5 patches three NGINX flaws enabling code execution https://plainsec.com/it/stories/44114131-f6f4-4828-98fb-db70cb6920dc/f5-risolte-vulnerabilit-nei-prodotti-nginx PlainSec it 2026-10-19T16:54:50Z Le patch NGINX di F5 coprono anche le installazioni open source https://plainsec.com/stories/83295002-efc7-49e3-9915-ec90de65e453/apex-npm-tools-pair-malware-with-ai-traffic-hijacking PlainSec en 2026-10-19T15:29:37Z Apex npm tools pair malware with AI traffic hijacking https://plainsec.com/it/stories/83295002-efc7-49e3-9915-ec90de65e453/apex-npm-tools-pair-malware-with-ai-traffic-hijacking PlainSec it 2026-10-19T15:29:37Z Il tool IA di Apex devia le richieste e falsifica gli audit https://plainsec.com/stories/10d85c52-3f64-4048-bb14-332f2ee35fbe/siteguard-flaw-gives-attackers-root-access-to-waf-servers PlainSec en 2026-10-18T18:57:38Z SiteGuard flaw gives attackers root access to WAF servers https://plainsec.com/it/stories/10d85c52-3f64-4048-bb14-332f2ee35fbe/siteguard-flaw-gives-attackers-root-access-to-waf-servers PlainSec it 2026-10-18T18:57:38Z Statistiche attive di default aprono SiteGuard ai comandi root