https://plainsec.com/stories/d19f959b-49d2-4ee0-b1a9-b2f75685bfd9/gpustacks-localhost-spoofing-skips-authentication-on-exposed-managers PlainSec en 2026-11-12T14:33:32Z GPUStack's localhost spoofing skips authentication on exposed managers https://plainsec.com/it/stories/d19f959b-49d2-4ee0-b1a9-b2f75685bfd9/gpustacks-localhost-spoofing-skips-authentication-on-exposed-managers PlainSec it 2026-11-12T14:33:32Z Un falso localhost apre l’infrastruttura AI gestita da GPUStack https://plainsec.com/stories/99401bd3-57cc-49c0-9cd9-f6c676424a0b/screenconnect-attackers-plant-rogue-access-on-customer-devices PlainSec en 2026-11-12T06:27:59Z ScreenConnect malware spreads through technicians’ support sessions https://plainsec.com/it/stories/99401bd3-57cc-49c0-9cd9-f6c676424a0b/screenconnect-attackers-plant-rogue-access-on-customer-devices PlainSec it 2026-11-12T06:27:59Z SCKit trasforma le sessioni di assistenza in una via di propagazione https://plainsec.com/stories/ca65ece4-0823-4df1-bc35-6ba29fe10f3a/github-account-hijacks-put-ci-secrets-at-risk PlainSec en 2026-11-12T10:23:15Z GitHub account hijacks put CI secrets at risk https://plainsec.com/it/stories/ca65ece4-0823-4df1-bc35-6ba29fe10f3a/github-account-hijacks-put-ci-secrets-at-risk PlainSec it 2026-11-12T10:23:15Z Migliaia di account GitHub rubati espongono i segreti della CI https://plainsec.com/stories/a67f0f19-e601-4ee1-8f6c-7839560690a2/cairn-scales-tailored-intrusions-across-19-organizations PlainSec en 2026-11-12T18:33:04Z Cairn scales tailored intrusions across 19 organizations https://plainsec.com/it/stories/a67f0f19-e601-4ee1-8f6c-7839560690a2/cairn-scales-tailored-intrusions-across-19-organizations PlainSec it 2026-11-12T18:33:04Z Cairn porta intrusioni mirate in parallelo contro 19 organizzazioni https://plainsec.com/stories/099fd048-9eb1-4185-be5b-cbc1a006f65f/quay-signing-flaw-lets-attackers-mint-registry-wide-tokens PlainSec en 2026-11-12T12:27:09Z Quay signing flaw lets attackers mint registry-wide tokens https://plainsec.com/it/stories/099fd048-9eb1-4185-be5b-cbc1a006f65f/quay-signing-flaw-lets-attackers-mint-registry-wide-tokens PlainSec it 2026-11-12T12:27:09Z Una chiave falsa apre tutti i repository Quay e sopravvive ai reset https://plainsec.com/stories/f63a7852-d518-475f-b531-e5c0d14f2d8c/xweb-evo-configuration-flaw-exploited-within-100-minutes PlainSec en 2026-11-13T02:22:29Z XWEB EVO configuration flaw exploited within 100 minutes https://plainsec.com/it/stories/f63a7852-d518-475f-b531-e5c0d14f2d8c/xweb-evo-configuration-flaw-exploited-within-100-minutes PlainSec it 2026-11-13T02:22:29Z XWEB EVO sfruttato in 100 minuti, prima di un PoC pubblico https://plainsec.com/stories/d634ec12-5156-4cc3-921b-4dcfd053d4a7/emudhra-revokes-eight-more-cas-after-key-transfer-failure PlainSec en 2026-11-11T22:22:48Z eMudhra revokes eight more CAs after key-transfer failure https://plainsec.com/it/stories/d634ec12-5156-4cc3-921b-4dcfd053d4a7/emudhra-revokes-eight-more-cas-after-key-transfer-failure PlainSec it 2026-11-11T22:22:48Z Otto CA dichiarate sicure mettono a rischio siti e software firmati https://plainsec.com/stories/c537d517-89bb-4156-b5a6-5790dac346d8/gsocket-keeps-linux-server-access-alive-after-patching PlainSec en 2026-11-11T22:22:48Z GSocket keeps Linux server access alive after patching https://plainsec.com/it/stories/c537d517-89bb-4156-b5a6-5790dac346d8/gsocket-keeps-linux-server-access-alive-after-patching PlainSec it 2026-11-11T22:22:48Z La patch chiude l’ingresso, ma GSocket resta sui server Linux https://plainsec.com/stories/57893739-6a2f-4410-8cd8-2e9ed703cf67/silent-lynx-used-one-rail-account-to-reach-government-files PlainSec en 2026-11-12T18:33:04Z Silent Lynx used one rail account to reach government files https://plainsec.com/it/stories/57893739-6a2f-4410-8cd8-2e9ed703cf67/silent-lynx-used-one-rail-account-to-reach-government-files PlainSec it 2026-11-12T18:33:04Z Una credenziale ferroviaria apre gli archivi del governo tagiko https://plainsec.com/stories/7ff35e8d-3cd2-4183-b66c-8120f5d75928/php-and-node-js-runtime-flaws-put-every-app-at-risk PlainSec en 2026-11-12T12:27:09Z PHP and Node.js runtime flaws put every app at risk https://plainsec.com/it/stories/7ff35e8d-3cd2-4183-b66c-8120f5d75928/php-and-node-js-runtime-flaws-put-every-app-at-risk PlainSec it 2026-11-12T12:27:09Z La patch del server non copre tutte le app esposte https://plainsec.com/stories/8396fe58-a8ed-422a-a230-95f5512f310a/apache-http-2-flaw-opens-cloud-workloads-to-code-execution PlainSec en 2026-11-12T06:27:59Z Apache HTTP/2 code-execution claim remains disputed https://plainsec.com/it/stories/8396fe58-a8ed-422a-a230-95f5512f310a/apache-http-2-flaw-opens-cloud-workloads-to-code-execution PlainSec it 2026-11-12T06:27:59Z La RCE contestata in Apache richiede HTTP/2 attivo https://plainsec.com/stories/148f8d6e-5e05-4622-bb38-f3d695cf1300/maersk-probes-suspected-theft-from-legacy-system PlainSec en 2026-11-12T18:33:04Z Maersk confirms legacy-system theft as WhiteArmor’s haul remains unverified https://plainsec.com/it/stories/148f8d6e-5e05-4622-bb38-f3d695cf1300/maersk-probes-suspected-theft-from-legacy-system PlainSec it 2026-11-12T18:33:04Z Le spedizioni proseguono, ma i dati sottratti a Maersk restano ignoti https://plainsec.com/stories/a851bb36-4fc2-4c1e-98e9-21d85b694397/poisoned-coding-agents-can-misuse-their-granted-tools PlainSec en 2026-11-13T04:26:10Z Poisoned coding agents can misuse their granted tools https://plainsec.com/it/stories/a851bb36-4fc2-4c1e-98e9-21d85b694397/poisoned-coding-agents-can-misuse-their-granted-tools PlainSec it 2026-11-13T04:26:10Z Una backdoor può usare i tool del coding agent contro il sistema https://plainsec.com/stories/62cbb360-aca1-41b5-b825-433200e336d9/silentair-hijacks-asian-carriers-to-intercept-calls-and-texts PlainSec en 2026-11-13T04:26:10Z SilentAir hijacks Asian carriers to intercept calls and texts https://plainsec.com/it/stories/62cbb360-aca1-41b5-b825-433200e336d9/silentair-hijacks-asian-carriers-to-intercept-calls-and-texts PlainSec it 2026-11-13T04:26:10Z Operatori compromessi in sei paesi colpiscono abbonati oltre confine https://plainsec.com/stories/9a39521f-b5aa-4e10-97fa-e66526880009/ivanti-november-security-update PlainSec en 2026-11-11T14:39:53Z Ivanti Endpoint Manager SQL flaw puts Core at code-execution risk https://plainsec.com/it/stories/9a39521f-b5aa-4e10-97fa-e66526880009/ivanti-november-security-update PlainSec it 2026-11-11T14:39:53Z La Core di Ivanti Endpoint Manager può eseguire codice senza autenticazione https://plainsec.com/stories/d49562cc-f5c1-44da-90b3-1b98effdd2f6/citrix-flaws-threaten-netscaler-services-and-access PlainSec en 2026-11-12T18:33:04Z Citrix flaws threaten NetScaler services and access https://plainsec.com/it/stories/d49562cc-f5c1-44da-90b3-1b98effdd2f6/citrix-flaws-threaten-netscaler-services-and-access PlainSec it 2026-11-12T18:33:04Z Servizi VPN e traffico a rischio nelle falle Citrix NetScaler https://plainsec.com/stories/814ba2fe-8ff6-42d5-8320-d0c4fe9291c9/microsoft-365-outage-hit-email-and-security-visibility PlainSec en 2026-11-13T00:22:42Z Microsoft 365 outage hit email and security visibility https://plainsec.com/it/stories/814ba2fe-8ff6-42d5-8320-d0c4fe9291c9/microsoft-365-outage-hit-email-and-security-visibility PlainSec it 2026-11-13T00:22:42Z Un solo guasto ferma email e difesa SOC in Microsoft 365 https://plainsec.com/stories/0ec54820-4e63-444f-9fe7-7accb0956ae1/railway-breach-may-expose-workspace-secrets-beyond-ai-charges PlainSec en 2026-11-11T08:23:50Z Railway breach may expose workspace secrets beyond AI charges https://plainsec.com/it/stories/0ec54820-4e63-444f-9fe7-7accb0956ae1/railway-breach-may-expose-workspace-secrets-beyond-ai-charges PlainSec it 2026-11-11T08:23:50Z La violazione di Railway va oltre i 740.000 dollari di frode https://plainsec.com/stories/72668fe3-27cd-42f5-86f0-62548e3ec40d/x-org-server-libxrender-renderquerypictformats-reply-heap-based-buffer-overflow-remote-code-execution-vulnerability PlainSec en 2026-11-11T20:25:37Z Xen Orchestra flaws expose pools and XCP-ng hosts https://plainsec.com/it/stories/72668fe3-27cd-42f5-86f0-62548e3ec40d/x-org-server-libxrender-renderquerypictformats-reply-heap-based-buffer-overflow-remote-code-execution-vulnerability PlainSec it 2026-11-11T20:25:37Z Una falla in Xen Orchestra può aprire l’intero pool virtuale https://plainsec.com/stories/1fdc5e0d-2c44-4b5a-831f-d13a56d3b95b/microsoft-research-finds-ai-backdoors-hidden-in-tiny-edits PlainSec en 2026-11-11T12:28:52Z Microsoft model backdoor can steer agents to run commands https://plainsec.com/it/stories/1fdc5e0d-2c44-4b5a-831f-d13a56d3b95b/microsoft-research-finds-ai-backdoors-hidden-in-tiny-edits PlainSec it 2026-11-11T12:28:52Z Pochi neuroni possono armare un agente AI dall’interno https://plainsec.com/stories/556c9e20-06a8-4d29-a9c8-c57465e9c37d/grok-build-share-links-exposed-data-from-35-000-apps PlainSec en 2026-11-11T14:39:53Z Grok Build share links exposed data from 35,000 apps https://plainsec.com/it/stories/556c9e20-06a8-4d29-a9c8-c57465e9c37d/grok-build-share-links-exposed-data-from-35-000-apps PlainSec it 2026-11-11T14:39:53Z I link casuali di Grok Build non proteggono i dati https://plainsec.com/stories/26fa0010-4307-4856-9ecd-149a615f1b31/qlik-probes-failed-as-activemq-and-veeam-tooling-surfaced PlainSec en 2026-11-11T16:56:18Z Qlik probes failed as ActiveMQ and Veeam tooling surfaced https://plainsec.com/it/stories/26fa0010-4307-4856-9ecd-149a615f1b31/qlik-probes-failed-as-activemq-and-veeam-tooling-surfaced PlainSec it 2026-11-11T16:56:18Z Qlik Sense: i tentativi falliscono, ma affiorano altre vie d’accesso https://plainsec.com/stories/a7c2bd46-5c4f-4859-86f7-ac3e116cc12d/microsoft-ai-scan-surfaces-59-linux-kernel-flaws PlainSec en 2026-11-12T16:41:47Z Microsoft AI scan surfaces 59 Linux kernel flaws https://plainsec.com/it/stories/a7c2bd46-5c4f-4859-86f7-ac3e116cc12d/microsoft-ai-scan-surfaces-59-linux-kernel-flaws PlainSec it 2026-11-12T16:41:47Z L’IA amplia la caccia ai bug, ma la correzione resta umana https://plainsec.com/stories/330400fb-5e02-4acf-850e-ebfa3875c1da/greeter-attackers-use-flowise-to-pursue-cloud-access PlainSec en 2026-11-12T00:28:13Z Greeter attackers use Flowise to pursue cloud access https://plainsec.com/it/stories/330400fb-5e02-4acf-850e-ebfa3875c1da/greeter-attackers-use-flowise-to-pursue-cloud-access PlainSec it 2026-11-12T00:28:13Z Da Flowise alle identità cloud: Greeter punta alla persistenza https://plainsec.com/stories/bf5576cf-5fdc-454f-9a82-8f3d461d031d/fortinet-fixes-43-flaws-across-management-and-analytics-products PlainSec en 2026-11-12T14:33:32Z Fortinet fixes 43 flaws across management and analytics products https://plainsec.com/it/stories/bf5576cf-5fdc-454f-9a82-8f3d461d031d/fortinet-fixes-43-flaws-across-management-and-analytics-products PlainSec it 2026-11-12T14:33:32Z Quarantatré falle mettono a rischio il piano di gestione Fortinet https://plainsec.com/stories/5223897d-0bfa-4aa7-857c-61eb5461d007/cisco-broadworks-flaw-exploited-to-read-configuration PlainSec en 2026-11-11T14:39:53Z Cisco BroadWorks flaw exploited to read configuration https://plainsec.com/it/stories/5223897d-0bfa-4aa7-857c-61eb5461d007/cisco-broadworks-flaw-exploited-to-read-configuration PlainSec it 2026-11-11T14:39:53Z BroadWorks espone configurazioni sensibili senza autenticazione https://plainsec.com/stories/0fe1d23f-897a-43b7-b2ba-0c7c2a2cbc4b/iis-web-shells-carried-antifox-linked-attacks-into-aws PlainSec en 2026-11-11T18:28:04Z IIS web shells carried AntiFox-linked attacks into AWS https://plainsec.com/it/stories/0fe1d23f-897a-43b7-b2ba-0c7c2a2cbc4b/iis-web-shells-carried-antifox-linked-attacks-into-aws PlainSec it 2026-11-11T18:28:04Z Da un server IIS compromesso alle credenziali AWS di produzione https://plainsec.com/stories/bddf85f9-8370-49bf-a991-7ed4b70587d9/falcon-steals-government-webmail-access-through-the-browser PlainSec en 2026-11-11T18:28:04Z Falcon steals government webmail access through the browser https://plainsec.com/it/stories/bddf85f9-8370-49bf-a991-7ed4b70587d9/falcon-steals-government-webmail-access-through-the-browser PlainSec it 2026-11-11T18:28:04Z Falcon trasforma i portali governativi in punti d’ingresso per lo spionaggio https://plainsec.com/stories/88d7e8f4-879a-45c1-8b03-ed07cfa31664/mongodb-replica-set-flaw-can-crash-sharded-database-members PlainSec en 2026-11-12T12:27:09Z MongoDB replica-set flaw can crash sharded database members https://plainsec.com/it/stories/88d7e8f4-879a-45c1-8b03-ed07cfa31664/mongodb-replica-set-flaw-can-crash-sharded-database-members PlainSec it 2026-11-12T12:27:09Z L’autenticazione non ferma il crash dei replica set MongoDB https://plainsec.com/stories/87207c72-d5ae-4ab9-995e-3dd53cfef515/blind-eagle-hides-asyncrat-behind-court-document-workflows PlainSec en 2026-11-11T06:34:32Z Blind Eagle hides AsyncRAT behind court-document workflows https://plainsec.com/it/stories/87207c72-d5ae-4ab9-995e-3dd53cfef515/blind-eagle-hides-asyncrat-behind-court-document-workflows PlainSec it 2026-11-11T06:34:32Z Le richieste giudiziarie diventano l’ingresso per Blind Eagle