https://plainsec.com/stories/bd45a422-2427-4052-bdcf-e774d5ead354/ivanti-fixes-seven-flaws-as-connect-secure-is-exploited PlainSec en 2026-10-14T14:57:19Z Ivanti fixes seven flaws as Connect Secure is exploited https://plainsec.com/it/stories/bd45a422-2427-4052-bdcf-e774d5ead354/ivanti-fixes-seven-flaws-as-connect-secure-is-exploited PlainSec it 2026-10-14T14:57:19Z Ivanti corregge sette flaw, uno è già sfruttato su Connect Secure https://plainsec.com/stories/a0cb4493-8929-4251-93f8-c7d18d971a4c/windows-update-elevation-of-privilege-vulnerability PlainSec en 2026-10-14T04:39:43Z Microsoft Patch Tuesday flags exploited Shell zero-day https://plainsec.com/it/stories/a0cb4493-8929-4251-93f8-c7d18d971a4c/windows-update-elevation-of-privilege-vulnerability PlainSec it 2026-10-14T04:39:43Z Il Patch Tuesday record ha un zero-day già sfruttato https://plainsec.com/stories/1217c659-83a4-4c94-87f4-1bf95fe5721a/danfoss-refrigeration-controllers-turn-a-cyberattack-into-spoilage PlainSec en 2026-10-12T20:29:46Z Danfoss refrigeration flaws move from theory to spoilage https://plainsec.com/it/stories/1217c659-83a4-4c94-87f4-1bf95fe5721a/danfoss-refrigeration-controllers-turn-a-cyberattack-into-spoilage PlainSec it 2026-10-12T20:29:46Z I controller del freddo diventano un rischio OT più ampio https://plainsec.com/stories/83c8dead-30de-430c-9482-54b2464b8c84/doj-raids-laptop-farms-feeding-north-korean-it-fraud PlainSec en 2026-10-14T03:39:22Z DOJ arrests confirm North Korean laptop farms https://plainsec.com/it/stories/83c8dead-30de-430c-9482-54b2464b8c84/doj-raids-laptop-farms-feeding-north-korean-it-fraud PlainSec it 2026-10-14T03:39:22Z Arresti e 187 laptop smascherano il modello della laptop farm https://plainsec.com/stories/c0e7c5d2-b920-47c5-ac4c-abe0798acd16/hirudo-swaps-bank-apps-for-patched-copies PlainSec en 2026-10-14T14:57:19Z Hirudo swaps bank apps for patched copies https://plainsec.com/it/stories/c0e7c5d2-b920-47c5-ac4c-abe0798acd16/hirudo-swaps-bank-apps-for-patched-copies PlainSec it 2026-10-14T14:57:19Z Hirudo trasforma la banca in un’app complice https://plainsec.com/stories/c87b9505-3a33-44f0-9ed2-15fe44d75bc0/reflectiz-ai-agent-proves-otp-login-bypass PlainSec en 2026-10-14T14:57:19Z Reflectiz AI agent proves OTP login bypass https://plainsec.com/it/stories/c87b9505-3a33-44f0-9ed2-15fe44d75bc0/reflectiz-ai-agent-proves-otp-login-bypass PlainSec it 2026-10-14T14:57:19Z Un agente AI completa un bypass OTP su un sito live https://plainsec.com/stories/305c20d2-c94a-4635-a119-57996153ee33/npm-trusted-publishing-trusted-the-wrong-identity PlainSec en 2026-10-13T13:44:15Z npm Trusted Publishing trusted the wrong identity https://plainsec.com/it/stories/305c20d2-c94a-4635-a119-57996153ee33/npm-trusted-publishing-trusted-the-wrong-identity PlainSec it 2026-10-13T13:44:15Z Un nome GitHub reclamato bastava a prendere npm https://plainsec.com/stories/1b12c54f-56ad-41f2-8952-39dc62e90846/bo-team-keeps-skynet-under-multi-day-ddos PlainSec en 2026-10-13T17:06:16Z BO Team keeps SkyNet under multi-day DDoS https://plainsec.com/it/stories/1b12c54f-56ad-41f2-8952-39dc62e90846/bo-team-keeps-skynet-under-multi-day-ddos PlainSec it 2026-10-13T17:06:16Z SkyNet sotto DDoS prolungato, servizi degradati per giorni https://plainsec.com/stories/17e5e7f4-d678-4f29-8007-4bf82249f349/linux-vhost-flaw-crosses-from-local-root-to-guest-escape PlainSec en 2026-10-14T10:54:56Z Linux vhost flaw crosses from local root to guest escape https://plainsec.com/it/stories/17e5e7f4-d678-4f29-8007-4bf82249f349/linux-vhost-flaw-crosses-from-local-root-to-guest-escape PlainSec it 2026-10-14T10:54:56Z Vghost apre una via dal guest al host Linux https://plainsec.com/stories/cf59ed9d-4a13-407e-8bd1-ca3bcc919534/anthropic-tests-ai-worm-behavior-on-cheap-android-boxes PlainSec en 2026-10-14T03:39:22Z Anthropic shows cheap Android boxes can host AI models https://plainsec.com/it/stories/cf59ed9d-4a13-407e-8bd1-ca3bcc919534/anthropic-tests-ai-worm-behavior-on-cheap-android-boxes PlainSec it 2026-10-14T03:39:22Z I botnet AI diventano plausibili sui box Android da 55 dollari https://plainsec.com/stories/b763d02e-2c7c-45d4-af34-7fc87fac42dc/uk-government-expands-frontier-ai-security-scanning PlainSec en 2026-10-13T17:06:16Z UK government expands frontier AI security scanning https://plainsec.com/it/stories/b763d02e-2c7c-45d4-af34-7fc87fac42dc/uk-government-expands-frontier-ai-security-scanning PlainSec it 2026-10-13T17:06:16Z L’AI entra nella difesa, e diventa un rischio da gestire https://plainsec.com/stories/b3a51ca1-cb53-445b-9a58-dfcf3dbda6fe/azure-sre-agent-elevation-of-privilege-vulnerability PlainSec en 2026-10-14T04:39:43Z NCSC flags multiple Azure control-plane flaws https://plainsec.com/it/stories/b3a51ca1-cb53-445b-9a58-dfcf3dbda6fe/azure-sre-agent-elevation-of-privilege-vulnerability PlainSec it 2026-10-14T04:39:43Z Più falle in Azure, alcune già corrette da Microsoft https://plainsec.com/stories/8e1319b3-de96-4c97-88c3-ad55a28963a2/openai-case-spotlights-room-level-insider-surveillance PlainSec en 2026-10-14T03:39:22Z OpenAI case spotlights room-level insider surveillance https://plainsec.com/it/stories/8e1319b3-de96-4c97-88c3-ad55a28963a2/openai-case-spotlights-room-level-insider-surveillance PlainSec it 2026-10-14T03:39:22Z Un dispositivo nascosto porta l’insider threat nella sala riunioni https://plainsec.com/stories/b543d94f-36cd-4113-93f3-cbfc83ad7d7b/semperis-survey-flags-ransomware-threats-beyond-data-theft PlainSec en 2026-10-14T06:54:10Z Semperis survey flags ransomware threats beyond data theft https://plainsec.com/it/stories/b543d94f-36cd-4113-93f3-cbfc83ad7d7b/semperis-survey-flags-ransomware-threats-beyond-data-theft PlainSec it 2026-10-14T06:54:10Z Il ransomware diventa una minaccia per la sicurezza fisica https://plainsec.com/stories/91976c02-941c-439f-8b8a-fe4380c120d5/package-managers-leave-repository-tampering-too-much-trust PlainSec en 2026-10-14T14:57:19Z Package managers leave repository tampering too much trust https://plainsec.com/it/stories/91976c02-941c-439f-8b8a-fe4380c120d5/package-managers-leave-repository-tampering-too-much-trust PlainSec it 2026-10-14T14:57:19Z I package manager non bloccano la manomissione a monte https://plainsec.com/stories/320da9a7-163f-4c08-aa94-84bc9136ebbd/kimsuky-hides-wartime-espionage-in-ordinary-outreach PlainSec en 2026-10-14T03:39:22Z Kimsuky hides wartime espionage in ordinary outreach https://plainsec.com/it/stories/320da9a7-163f-4c08-aa94-84bc9136ebbd/kimsuky-hides-wartime-espionage-in-ordinary-outreach PlainSec it 2026-10-14T03:39:22Z Kimsuky usa inviti plausibili per cercare intelligence sulla guerra https://plainsec.com/stories/79554ed2-9a03-4dab-b050-bde59a08cbca/cve-2026-104935-ivanti-connect-secure PlainSec en 2026-10-14T00:00:33Z Ivanti Connect Secure exploit added to KEV https://plainsec.com/it/stories/79554ed2-9a03-4dab-b050-bde59a08cbca/cve-2026-104935-ivanti-connect-secure PlainSec it 2026-10-14T00:00:33Z Ivanti Connect Secure finisce sotto sfruttamento attivo https://plainsec.com/stories/61ab3901-111c-4fc9-85c1-e96bfe06eb43/tfg-london-outage-hits-orders-and-revenue PlainSec en 2026-10-13T17:06:16Z TFG London incident stayed inside a subset of brands https://plainsec.com/it/stories/61ab3901-111c-4fc9-85c1-e96bfe06eb43/tfg-london-outage-hits-orders-and-revenue PlainSec it 2026-10-13T17:06:16Z Incidente contenuto in TFG London, negozi aperti https://plainsec.com/stories/11084b7c-2be6-4cd9-82a1-c386c65bd1d8/m-ltiples-vulnerabilidades-en-nonstop-servers-de-hpe PlainSec en 2026-10-13T16:05:28Z HPE NonStop fix for XDR Streams needs a coldload https://plainsec.com/it/stories/11084b7c-2be6-4cd9-82a1-c386c65bd1d8/m-ltiples-vulnerabilidades-en-nonstop-servers-de-hpe PlainSec it 2026-10-13T16:05:28Z Il coldload allunga l’esposizione sul bug critico di HPE NonStop https://plainsec.com/stories/4dacfb7b-6b91-4a04-bf02-47e02c2aa787/microsoft-smartscreen-enclave-flaw-breaks-windows-trust PlainSec en 2026-10-14T12:26:54Z Microsoft SmartScreen enclave flaw breaks Windows trust https://plainsec.com/it/stories/4dacfb7b-6b91-4a04-bf02-47e02c2aa787/microsoft-smartscreen-enclave-flaw-breaks-windows-trust PlainSec it 2026-10-14T12:26:54Z Il perimetro protetto di SmartScreen cede da dentro https://plainsec.com/stories/a2b1b8bc-1a71-414c-800e-8f661148e547/joint-disruption-week-hit-west-african-scam-hubs PlainSec en 2026-10-14T03:39:22Z Joint Disruption Week hit West African scam hubs https://plainsec.com/it/stories/a2b1b8bc-1a71-414c-800e-8f661148e547/joint-disruption-week-hit-west-african-scam-hubs PlainSec it 2026-10-14T03:39:22Z Raid e takedown svelano l'industria delle truffe in Africa occidentale https://plainsec.com/stories/e3a68936-e234-4c8f-a378-de524b5940fc/third-party-vpn-control-left-a-bank-exposed-for-months PlainSec en 2026-10-14T06:02:12Z Third-party VPN control left a bank exposed for months https://plainsec.com/it/stories/e3a68936-e234-4c8f-a378-de524b5940fc/third-party-vpn-control-left-a-bank-exposed-for-months PlainSec it 2026-10-14T06:02:12Z Un gateway VPN di terzi ha tenuto aperta la banca per mesi https://plainsec.com/stories/9c84721a-4294-4639-8669-54e9b4c035d8/ftc-moves-to-stop-sextortion-help-fraud PlainSec en 2026-10-14T03:39:22Z FTC moves to stop sextortion-help fraud https://plainsec.com/it/stories/9c84721a-4294-4639-8669-54e9b4c035d8/ftc-moves-to-stop-sextortion-help-fraud PlainSec it 2026-10-14T03:39:22Z Truffavano i clienti già sotto ricatto sessuale https://plainsec.com/stories/4bd6354c-f2c2-4c42-a97a-467005be7816/cisco-nx-api-overflow-threatens-nexus-management-planes PlainSec en 2026-10-13T16:05:28Z Cisco NX-API overflow threatens Nexus management planes https://plainsec.com/it/stories/4bd6354c-f2c2-4c42-a97a-467005be7816/cisco-nx-api-overflow-threatens-nexus-management-planes PlainSec it 2026-10-13T16:05:28Z NX-API di Cisco espone i dispositivi di gestione https://plainsec.com/stories/d04d1c62-f20b-476c-b889-920fbb2672c4/microsoft-bundles-october-fixes-into-one-windows-10-rollup PlainSec en 2026-10-14T06:02:12Z Microsoft bundles October fixes into one Windows 10 rollup https://plainsec.com/it/stories/d04d1c62-f20b-476c-b889-920fbb2672c4/microsoft-bundles-october-fixes-into-one-windows-10-rollup PlainSec it 2026-10-14T06:02:12Z Microsoft compatta ottobre in un solo update per Windows 10 https://plainsec.com/stories/0942302e-b395-4285-b35a-93f591feaf59/mitigation-bypass-in-the-networking-http-component PlainSec en 2026-10-14T04:39:43Z Mozilla patch bundle spans Firefox and Thunderbird tracks https://plainsec.com/it/stories/0942302e-b395-4285-b35a-93f591feaf59/mitigation-bypass-in-the-networking-http-component PlainSec it 2026-10-14T04:39:43Z Mozilla chiude 30 falle su Firefox e Thunderbird https://plainsec.com/stories/348c2260-f76a-41b9-8f22-f08ad9d35ab6/luna-moth-leak-shows-a-staffed-extortion-service PlainSec en 2026-10-12T16:55:41Z Luna Moth leak shows a staffed extortion service https://plainsec.com/it/stories/348c2260-f76a-41b9-8f22-f08ad9d35ab6/luna-moth-leak-shows-a-staffed-extortion-service PlainSec it 2026-10-12T16:55:41Z Luna Moth emerge come servizio di estorsione su help desk https://plainsec.com/stories/59a1f00e-7ef5-44d8-9c6a-5633d3db0201/snowflake-thefts-came-from-old-stolen-logins PlainSec en 2026-10-12T16:55:41Z Snowflake thefts came from old stolen logins https://plainsec.com/it/stories/59a1f00e-7ef5-44d8-9c6a-5633d3db0201/snowflake-thefts-came-from-old-stolen-logins PlainSec it 2026-10-12T16:55:41Z Credenziali vecchie riaprono gli account Snowflake https://plainsec.com/stories/e19b980b-5e1c-4985-839d-e27912ab0e47/marklogic-patch-leaves-delegated-admins-too-much-power PlainSec en 2026-10-13T17:06:16Z MarkLogic patch leaves delegated admins too much power https://plainsec.com/it/stories/e19b980b-5e1c-4985-839d-e27912ab0e47/marklogic-patch-leaves-delegated-admins-too-much-power PlainSec it 2026-10-13T17:06:16Z I delegati di MarkLogic possono diventare admin persistenti https://plainsec.com/stories/0ec9a132-2f33-434e-8895-a455f9c99b40/vmware-pairs-monthly-patches-with-paid-guardrails PlainSec en 2026-10-13T13:44:15Z VMware pairs monthly patches with paid guardrails https://plainsec.com/it/stories/0ec9a132-2f33-434e-8895-a455f9c99b40/vmware-pairs-monthly-patches-with-paid-guardrails PlainSec it 2026-10-13T13:44:15Z VMware trasforma il ritmo delle patch in un prodotto a pagamento https://plainsec.com/stories/4d343d20-2199-4f41-92e0-fdbac5ab2bf6/metasploit-framework-web-service-rest-api-missing-authentication-on-credential-endpoints PlainSec en 2026-10-13T04:23:17Z Metasploit API bug exposed saved credentials https://plainsec.com/it/stories/4d343d20-2199-4f41-92e0-fdbac5ab2bf6/metasploit-framework-web-service-rest-api-missing-authentication-on-credential-endpoints PlainSec it 2026-10-13T04:23:17Z Metasploit espone l’intero credential store via API https://plainsec.com/stories/c9160463-98da-4f36-a5a8-506139601504/aruba-clearpass-policy-manager-mehrere-schwachstellen PlainSec en 2026-10-12T16:55:41Z HPE switch advisory flags management-plane bypasses https://plainsec.com/it/stories/c9160463-98da-4f36-a5a8-506139601504/aruba-clearpass-policy-manager-mehrere-schwachstellen PlainSec it 2026-10-12T16:55:41Z Il piano di gestione degli switch HPE è raggiungibile senza login https://plainsec.com/stories/68b04b2b-618e-4442-9246-c2a07bc59e25/avisloader-uses-tox-to-outlast-takedowns PlainSec en 2026-10-12T22:32:50Z AvisLoader uses Tox to outlast takedowns https://plainsec.com/it/stories/68b04b2b-618e-4442-9246-c2a07bc59e25/avisloader-uses-tox-to-outlast-takedowns PlainSec it 2026-10-12T22:32:50Z Un loader Windows che non cade con un domain takedown