https://plainsec.com/stories/fd1751a0-5cbb-491b-b939-355c4eb94b42/connectwise-backup-credential-opened-173-microsoft-365-tenants PlainSec en 2026-10-17T19:59:37Z ConnectWise backup credential opened 173 Microsoft 365 tenants https://plainsec.com/it/stories/fd1751a0-5cbb-491b-b939-355c4eb94b42/connectwise-backup-credential-opened-173-microsoft-365-tenants PlainSec it 2026-10-17T19:59:37Z Un backup compromesso allarga l’accesso a 173 tenant https://plainsec.com/stories/1d35a413-84a1-4982-aa50-629ca7fc77b8/gitlab-ci-cd-regex-bug-opens-self-managed-servers PlainSec en 2026-10-16T17:43:03Z GitLab CI/CD regex bug opens self-managed servers https://plainsec.com/it/stories/1d35a413-84a1-4982-aa50-629ca7fc77b8/gitlab-ci-cd-regex-bug-opens-self-managed-servers PlainSec it 2026-10-16T17:43:03Z Self-managed GitLab espone RCE senza accesso al repository https://plainsec.com/stories/193c9158-d509-491c-a390-cf536005c460/openbsd-root-chain-turns-a-reliability-fix-into-lpe PlainSec en 2026-10-16T22:49:22Z OpenBSD root chain turns a reliability fix into LPE https://plainsec.com/it/stories/193c9158-d509-491c-a390-cf536005c460/openbsd-root-chain-turns-a-reliability-fix-into-lpe PlainSec it 2026-10-16T22:49:22Z OpenBSD, il bug di affidabilità diventa una chain per root https://plainsec.com/stories/7fdc49d0-e2b7-432e-afbc-b637726dc03f/fbi-arrests-ransomware-negotiator-at-conference PlainSec en 2026-10-17T10:42:07Z FBI arrest exposes the ransomware negotiator blind spot https://plainsec.com/it/stories/7fdc49d0-e2b7-432e-afbc-b637726dc03f/fbi-arrests-ransomware-negotiator-at-conference PlainSec it 2026-10-17T10:42:07Z L’arresto di Dubrovsky scopre il buco nella fiducia ai negotiator https://plainsec.com/stories/88c241ed-373b-4fb4-8e79-bb72168ff988/backdoored-open-weight-models-exfiltrate-secrets PlainSec en 2026-10-16T14:49:55Z Backdoored open-weight models exfiltrate secrets https://plainsec.com/it/stories/88c241ed-373b-4fb4-8e79-bb72168ff988/backdoored-open-weight-models-exfiltrate-secrets PlainSec it 2026-10-16T14:49:55Z I modelli open-weight possono nascondere backdoor dormienti https://plainsec.com/stories/ee423166-eac9-41aa-b3b0-923c6bb1b828/wazuh-manager-config-check-gap-reaches-root PlainSec en 2026-10-16T13:00:27Z Wazuh Manager config check gap reaches root https://plainsec.com/it/stories/ee423166-eac9-41aa-b3b0-923c6bb1b828/wazuh-manager-config-check-gap-reaches-root PlainSec it 2026-10-16T13:00:27Z Wazuh Manager trasforma un permesso config in root https://plainsec.com/stories/a00f9f94-6892-4f62-a0d2-b85b4ce15f35/kwetsbaarheden-verholpen-in-ibm-guardium-data-protection PlainSec en 2026-10-16T13:00:27Z IBM Guardium patch closes parser-facing attack paths https://plainsec.com/it/stories/a00f9f94-6892-4f62-a0d2-b85b4ce15f35/kwetsbaarheden-verholpen-in-ibm-guardium-data-protection PlainSec it 2026-10-16T13:00:27Z Guardium espone il piano dati con dieci falle critiche https://plainsec.com/stories/7413fcbd-289d-4b8a-bdc5-94cde1e80426/bae-systems-outage-stalls-federal-bankruptcy-notices PlainSec en 2026-10-16T10:51:02Z BAE Systems outage halts bankruptcy notices nationwide https://plainsec.com/it/stories/7413fcbd-289d-4b8a-bdc5-94cde1e80426/bae-systems-outage-stalls-federal-bankruptcy-notices PlainSec it 2026-10-16T10:51:02Z La notifica fallimentare federale resta bloccata per un guasto esterno https://plainsec.com/stories/7bb2fff9-76fb-47aa-a4a6-6c3ae1f4b99f/bank-of-america-turns-an-ai-scan-into-a-remediation-bill PlainSec en 2026-10-16T17:43:03Z Bank of America turns an AI scan into a remediation bill https://plainsec.com/it/stories/7bb2fff9-76fb-47aa-a4a6-6c3ae1f4b99f/bank-of-america-turns-an-ai-scan-into-a-remediation-bill PlainSec it 2026-10-16T17:43:03Z Bank of America trasforma un audit AI in remediation di massa https://plainsec.com/stories/acc9bd81-3730-4254-ad81-34aaa5020666/coldfusion-incorrect-authorization-cwe-863 PlainSec en 2026-10-17T18:32:53Z Adobe ColdFusion patch closes code execution paths https://plainsec.com/it/stories/acc9bd81-3730-4254-ad81-34aaa5020666/coldfusion-incorrect-authorization-cwe-863 PlainSec it 2026-10-17T18:32:53Z ColdFusion espone anche reti interne e file locali https://plainsec.com/stories/89fbaa03-cb29-47d0-9b08-dfa5756c6720/ibm-datapower-patch-bulletin-spans-many-flaws PlainSec en 2026-10-17T14:46:21Z IBM DataPower patch bulletin spans many flaws https://plainsec.com/it/stories/89fbaa03-cb29-47d0-9b08-dfa5756c6720/ibm-datapower-patch-bulletin-spans-many-flaws PlainSec it 2026-10-17T14:46:21Z IBM DataPower Gateway, molte vulnerabilità corrette https://plainsec.com/stories/060205db-12b4-4e48-90b5-82afaf135601/fake-aur-helpers-hand-attackers-root-on-arch PlainSec en 2026-10-16T10:51:02Z Fake AUR helpers turn typos into root access https://plainsec.com/it/stories/060205db-12b4-4e48-90b5-82afaf135601/fake-aur-helpers-hand-attackers-root-on-arch PlainSec it 2026-10-16T10:51:02Z Un typo in AUR può dare root sull’intera macchina https://plainsec.com/stories/33aafd18-7968-4600-8847-cc54191a81bb/nginx-ngx-http-core-module-vulnerability PlainSec en 2026-10-16T13:00:27Z NGINX patches five config-gated flaws https://plainsec.com/it/stories/33aafd18-7968-4600-8847-cc54191a81bb/nginx-ngx-http-core-module-vulnerability PlainSec it 2026-10-16T13:00:27Z Config rare, rischio reale: NGINX corregge cinque flaw https://plainsec.com/stories/94754b9a-b7e7-4bbf-b452-e1a305d5611f/adobe-commerce-flaw-lets-attackers-run-php-code PlainSec en 2026-10-17T04:21:51Z Adobe Commerce flaw lets attackers run PHP code https://plainsec.com/it/stories/94754b9a-b7e7-4bbf-b452-e1a305d5611f/adobe-commerce-flaw-lets-attackers-run-php-code PlainSec it 2026-10-17T04:21:51Z Il negozio diventa un server PHP dell'attaccante https://plainsec.com/stories/93380837-0ace-41b2-b55c-a3ec39cfeb5e/ivanti-connect-secure-zero-day-hits-the-vpn-edge PlainSec en 2026-10-16T18:23:59Z Ivanti Connect Secure zero-day hits the VPN edge https://plainsec.com/it/stories/93380837-0ace-41b2-b55c-a3ec39cfeb5e/ivanti-connect-secure-zero-day-hits-the-vpn-edge PlainSec it 2026-10-16T18:23:59Z Ivanti Connect Secure espone il gateway che apre la rete interna https://plainsec.com/stories/c92e106b-4fbe-417b-bb9a-35db3a62a7c7/openai-models-hid-unauthorized-live-system-access PlainSec en 2026-10-16T17:43:03Z OpenAI disclosures show agents crossing permission lines https://plainsec.com/it/stories/c92e106b-4fbe-417b-bb9a-35db3a62a7c7/openai-models-hid-unauthorized-live-system-access PlainSec it 2026-10-16T17:43:03Z OpenAI mostra il limite della sola verifica dell’output https://plainsec.com/stories/4796663c-49ba-49db-88c5-b4cac8254c9e/aoki-steals-ai-assistant-tokens-for-repo-access PlainSec en 2026-10-16T14:49:55Z Aoki steals AI assistant tokens for repo access https://plainsec.com/it/stories/4796663c-49ba-49db-88c5-b4cac8254c9e/aoki-steals-ai-assistant-tokens-for-repo-access PlainSec it 2026-10-16T14:49:55Z Aoki allarga il furto alle credenziali degli assistant AI