https://plainsec.com/stories/1db7468a-24b8-4df1-b3ee-8fb2e32879fe/apple-extends-exploited-coregraphics-fix-to-ios-18 PlainSec en 2026-10-27T13:01:01Z Apple extends exploited CoreGraphics fix to iOS 18 https://plainsec.com/it/stories/1db7468a-24b8-4df1-b3ee-8fb2e32879fe/apple-extends-exploited-coregraphics-fix-to-ios-18 PlainSec it 2026-10-27T13:01:01Z La correzione dello zero-day Apple arriva ora anche su iOS 18 https://plainsec.com/stories/b82299c7-2d7a-4fb4-800e-4ae4172ac07d/magento-stores-served-hidden-loaders-despite-clean-scans PlainSec en 2026-10-26T21:20:41Z Magento loaders evade scans on previously infected stores https://plainsec.com/it/stories/b82299c7-2d7a-4fb4-800e-4ae4172ac07d/magento-stores-served-hidden-loaders-despite-clean-scans PlainSec it 2026-10-26T21:20:41Z Il nuovo loader torna in 60 negozi Magento già colpiti https://plainsec.com/stories/444f557c-2e54-42fa-8f2a-5a9ee5fa0530/peoplesoft-patch-spans-three-flaws-behind-one-cve PlainSec en 2026-10-27T21:18:50Z PeopleSoft patch spans three flaws behind one CVE https://plainsec.com/it/stories/444f557c-2e54-42fa-8f2a-5a9ee5fa0530/peoplesoft-patch-spans-three-flaws-behind-one-cve PlainSec it 2026-10-27T21:18:50Z Una sola CVE non racconta tutte le falle di PeopleSoft https://plainsec.com/stories/a9401d36-36c8-4057-a538-f2c96785af36/unm-cyber-disruption-diverted-trauma-patients-statewide PlainSec en 2026-10-27T16:58:21Z UNM hospitals reopen as Health Sciences classes stay canceled https://plainsec.com/it/stories/a9401d36-36c8-4057-a538-f2c96785af36/unm-cyber-disruption-diverted-trauma-patients-statewide PlainSec it 2026-10-27T16:58:21Z UNM riapre gli ospedali, ma ricerca e lezioni restano ferme https://plainsec.com/stories/4e0517d3-320c-4ba8-b428-df952be0b6bc/fake-teams-support-chats-can-lead-to-ransomware PlainSec en 2026-10-27T16:58:21Z Fake Teams support chats deliver payloads in under 15 minutes https://plainsec.com/it/stories/4e0517d3-320c-4ba8-b428-df952be0b6bc/fake-teams-support-chats-can-lead-to-ransomware PlainSec it 2026-10-27T16:58:21Z Quindici minuti dal falso supporto al payload su Teams https://plainsec.com/stories/f98a286e-b2cd-42c2-b9a2-e98188e0bcb5/downloads-file-steers-ai-coding-agent-into-rogue-package PlainSec en 2026-10-26T10:56:37Z Downloads files can persist in Codex and expose Claude tokens https://plainsec.com/it/stories/f98a286e-b2cd-42c2-b9a2-e98188e0bcb5/downloads-file-steers-ai-coding-agent-into-rogue-package PlainSec it 2026-10-26T10:56:37Z Un file in Downloads modifica Codex anche fuori dalla cartella https://plainsec.com/stories/1680ce96-a74b-4ab9-a4d6-782ea9422afa/ai-agent-finds-four-epics-flaws-one-may-enable-code-execution PlainSec en 2026-10-27T23:11:04Z AI agent finds four EPICS flaws, one may enable code execution https://plainsec.com/it/stories/1680ce96-a74b-4ab9-a4d6-782ea9422afa/ai-agent-finds-four-epics-flaws-one-may-enable-code-execution PlainSec it 2026-10-27T23:11:04Z Quattro falle in EPICS Base scoperte in meno di quattro ore https://plainsec.com/stories/dffb627c-b61a-47d0-b7be-8c40eb0838b5/worm-evades-github-search-and-steals-cpanel-credentials PlainSec en 2026-10-27T02:26:42Z Worm evades GitHub search and steals cPanel credentials https://plainsec.com/it/stories/dffb627c-b61a-47d0-b7be-8c40eb0838b5/worm-evades-github-search-and-steals-cpanel-credentials PlainSec it 2026-10-27T02:26:42Z Il worm aggira la ricerca GitHub e raggiunge i server https://plainsec.com/stories/294cacea-a210-4523-89e9-e8460fe76d10/microsoft-net-fixes-leave-bundled-apps-exposed PlainSec en 2026-10-26T22:56:33Z Microsoft .NET fixes leave bundled apps exposed https://plainsec.com/it/stories/294cacea-a210-4523-89e9-e8460fe76d10/microsoft-net-fixes-leave-bundled-apps-exposed PlainSec it 2026-10-26T22:56:33Z Le patch di .NET non raggiungono da sole app e container https://plainsec.com/stories/3dd3bb6d-3f77-4cf8-a532-46b9642e5a0b/hpe-rilevate-vulnerabilit-in-arubaos PlainSec en 2026-10-27T16:58:21Z ArubaOS flaws could expose wireless network controls https://plainsec.com/it/stories/3dd3bb6d-3f77-4cf8-a532-46b9642e5a0b/hpe-rilevate-vulnerabilit-in-arubaos PlainSec it 2026-10-27T16:58:21Z Le falle ArubaOS non si fermano ai controller Wi-Fi https://plainsec.com/stories/667e1407-8321-46ea-9de0-f316384f0167/android-authenticator-flaw-exposed-work-accounts-to-rogue-apps PlainSec en 2026-10-27T08:51:27Z Android Authenticator flaw exposed work accounts to rogue apps https://plainsec.com/it/stories/667e1407-8321-46ea-9de0-f316384f0167/android-authenticator-flaw-exposed-work-accounts-to-rogue-apps PlainSec it 2026-10-27T08:51:27Z Microsoft Authenticator si fidava dell’identità dichiarata dalle app https://plainsec.com/stories/84e682b4-b316-47ea-af13-cc3817ba2cc5/edk-ii-flaw-exposes-shared-firmware-to-boot-time-code-execution PlainSec en 2026-10-27T23:11:04Z EDK II flaw exposes shared firmware to boot-time code execution https://plainsec.com/it/stories/84e682b4-b316-47ea-af13-cc3817ba2cc5/edk-ii-flaw-exposes-shared-firmware-to-boot-time-code-execution PlainSec it 2026-10-27T23:11:04Z La falla pre-boot attraversa il firmware di molti server https://plainsec.com/stories/e15dd9e1-c63c-456d-9643-e4ca81607c2c/escritura-fuera-de-l-mites-en-productos-de-palo-alto-networks PlainSec en 2026-10-27T23:11:04Z PAN-OS Brotli flaw can expose memory or disrupt firewalls https://plainsec.com/it/stories/e15dd9e1-c63c-456d-9643-e4ca81607c2c/escritura-fuera-de-l-mites-en-productos-de-palo-alto-networks PlainSec it 2026-10-27T23:11:04Z La patch 11.2.10-h16 lascia aperta la falla Brotli https://plainsec.com/stories/48458f58-7c69-4f36-b0c0-6cc1423e7908/mitsubishi-electric-flaws-span-code-execution-and-access-bypass PlainSec en 2026-10-27T19:06:36Z Mitsubishi Electric flaws span code execution and access bypass https://plainsec.com/it/stories/48458f58-7c69-4f36-b0c0-6cc1423e7908/mitsubishi-electric-flaws-span-code-execution-and-access-bypass PlainSec it 2026-10-27T19:06:36Z Dieci suite Mitsubishi, ma una sola correzione documentata https://plainsec.com/stories/d917ced5-118e-4081-801f-78f011e0a13b/qwen3-8-flash-next-tried-uploading-a-probe-to-alibaba-cloud PlainSec en 2026-10-27T13:01:01Z Qwen3.8-Flash-Next tried uploading a probe to Alibaba Cloud https://plainsec.com/it/stories/d917ced5-118e-4081-801f-78f011e0a13b/qwen3-8-flash-next-tried-uploading-a-probe-to-alibaba-cloud PlainSec it 2026-10-27T13:01:01Z La traccia rassicurante non ha fermato Qwen3.8-Flash-Next https://plainsec.com/stories/f6edcec2-3596-4862-ba17-e7555a11f038/dahua-easy4ip-leaves-cameras-reachable-behind-firewalls PlainSec en 2026-10-27T08:51:27Z Dahua Easy4IP leaves cameras reachable behind firewalls https://plainsec.com/it/stories/f6edcec2-3596-4862-ba17-e7555a11f038/dahua-easy4ip-leaves-cameras-reachable-behind-firewalls PlainSec it 2026-10-27T08:51:27Z Il firewall non isola le telecamere Dahua raggiungibili via cloud https://plainsec.com/stories/1dd91957-abe3-4a49-9d3f-0d9c223a61ef/epics-base PlainSec en 2026-10-27T21:18:50Z EPICS Base flaws put control services at risk https://plainsec.com/it/stories/1dd91957-abe3-4a49-9d3f-0d9c223a61ef/epics-base PlainSec it 2026-10-27T21:18:50Z Quattro falle in EPICS Base possono destabilizzare i sistemi di controllo https://plainsec.com/stories/9b1a2822-7df6-408a-a9a1-b24ea9a744b4/netscaler-zero-days-put-edge-traffic-control-at-stake PlainSec en 2026-10-27T13:01:01Z NetScaler zero-days put edge traffic control at stake https://plainsec.com/it/stories/9b1a2822-7df6-408a-a9a1-b24ea9a744b4/netscaler-zero-days-put-edge-traffic-control-at-stake PlainSec it 2026-10-27T13:01:01Z NetScaler compromesso può ridisegnare le comunicazioni della rete https://plainsec.com/stories/a90d7560-c489-4656-af04-a79d333feb13/fake-chatgpt-and-claude-downloads-deliver-yoba-malware PlainSec en 2026-10-27T16:58:21Z Fake ChatGPT and Claude downloads deliver Yoba malware https://plainsec.com/it/stories/a90d7560-c489-4656-af04-a79d333feb13/fake-chatgpt-and-claude-downloads-deliver-yoba-malware PlainSec it 2026-10-27T16:58:21Z I falsi client AI in cima a Google consegnano malware https://plainsec.com/stories/6a064d7d-67e9-4aa5-b645-e4fcb06c838c/wasmtime-flaws-let-webassembly-escape-sandboxing PlainSec en 2026-10-26T15:32:18Z Wasmtime flaws let WebAssembly escape sandboxing https://plainsec.com/it/stories/6a064d7d-67e9-4aa5-b645-e4fcb06c838c/wasmtime-flaws-let-webassembly-escape-sandboxing PlainSec it 2026-10-26T15:32:18Z Il sandbox di Wasmtime può cedere anche nei prodotti di terzi https://plainsec.com/stories/cebcd554-781a-4fa1-8310-a7c249ea7f61/goahead-can-still-trust-revoked-client-certificates PlainSec en 2026-10-27T16:58:21Z GoAhead can still trust revoked client certificates https://plainsec.com/it/stories/cebcd554-781a-4fa1-8310-a7c249ea7f61/goahead-can-still-trust-revoked-client-certificates PlainSec it 2026-10-27T16:58:21Z In GoAhead, i certificati revocati possono ancora aprire l’accesso https://plainsec.com/stories/a94c4ce2-880a-4810-94ad-ba925c6f45ac/lazarus-abuses-south-korean-security-software-to-deliver-malware PlainSec en 2026-10-27T13:01:01Z Lazarus abuses South Korean security software to deliver malware https://plainsec.com/it/stories/a94c4ce2-880a-4810-94ad-ba925c6f45ac/lazarus-abuses-south-korean-security-software-to-deliver-malware PlainSec it 2026-10-27T13:01:01Z Il software finanziario fidato diventa un varco per Lazarus https://plainsec.com/stories/2ae0c33f-7e71-46f0-9b41-c85c815e4037/php2shell-draws-millions-of-attempts-but-no-success-observed PlainSec en 2026-10-27T13:01:01Z PHP2Shell draws millions of attempts, but no success observed https://plainsec.com/it/stories/2ae0c33f-7e71-46f0-9b41-c85c815e4037/php2shell-draws-millions-of-attempts-but-no-success-observed PlainSec it 2026-10-27T13:01:01Z Milioni di tentativi contro PHP, nessun exploit riuscito https://plainsec.com/stories/87c6c3b9-5dc6-40aa-966f-2b1157269001/phps-rce-flaw-hinges-on-a-runtime-session-switch PlainSec en 2026-10-26T10:56:37Z PHP honeypots confirm RCE, but reliability remains unproven https://plainsec.com/it/stories/87c6c3b9-5dc6-40aa-966f-2b1157269001/phps-rce-flaw-hinges-on-a-runtime-session-switch PlainSec it 2026-10-26T10:56:37Z La RCE su PHP è dimostrata, ma solo con un worker https://plainsec.com/stories/d1486d9f-959b-4070-be2e-12ef3129e1f3/apples-october-update-closes-exploited-coregraphics-flaw-on-ios-18 PlainSec en 2026-10-27T02:26:42Z Apple's October update closes exploited CoreGraphics flaw on iOS 18 https://plainsec.com/it/stories/d1486d9f-959b-4070-be2e-12ef3129e1f3/apples-october-update-closes-exploited-coregraphics-flaw-on-ios-18 PlainSec it 2026-10-27T02:26:42Z iOS 18 riceve un mese dopo la patch per una falla sfruttata https://plainsec.com/stories/34f68489-2a8d-474e-8cc7-34c4109dd063/openai-compaction-flaw-moved-reasoning-between-models PlainSec en 2026-10-27T11:31:47Z OpenAI compaction flaw moved reasoning between models https://plainsec.com/it/stories/34f68489-2a8d-474e-8cc7-34c4109dd063/openai-compaction-flaw-moved-reasoning-between-models PlainSec it 2026-10-27T11:31:47Z La compattazione del contesto può trasportare ragionamento proprietario tra modelli https://plainsec.com/stories/bfdcabfd-ce13-4a9b-b2a0-8d345b65f538/gotenberg-exploit-points-to-a-wider-maintained-toolkit PlainSec en 2026-10-26T21:20:41Z Gotenberg exploit points to a wider maintained toolkit https://plainsec.com/it/stories/bfdcabfd-ce13-4a9b-b2a0-8d345b65f538/gotenberg-exploit-points-to-a-wider-maintained-toolkit PlainSec it 2026-10-26T21:20:41Z Il varco in Gotenberg apre su un toolkit sviluppato da mesi