https://plainsec.com/stories/ad240b27-b0f2-4593-8291-b4bf0b413bdf/php-for-windows-rebuild-masks-its-brotli-security-fix PlainSec en 2026-10-29T11:15:27Z PHP for Windows rebuild masks its Brotli security fix https://plainsec.com/it/stories/ad240b27-b0f2-4593-8291-b4bf0b413bdf/php-for-windows-rebuild-masks-its-brotli-security-fix PlainSec it 2026-10-29T11:15:27Z La patch di PHP per Windows si nasconde nel suffisso -1 https://plainsec.com/stories/f62bf214-929f-40a2-9721-3244ceb92cc8/php2shell-attacks-give-exposed-pan-os-consoles-code-execution PlainSec en 2026-10-29T06:25:34Z PAN-OS PHP2Shell chain stole Active Directory credentials https://plainsec.com/it/stories/f62bf214-929f-40a2-9721-3244ceb92cc8/php2shell-attacks-give-exposed-pan-os-consoles-code-execution PlainSec it 2026-10-29T06:25:34Z Dal firewall ad Active Directory: rubate credenziali su 25 server PAN-OS https://plainsec.com/stories/9597d075-a1c7-41b6-8651-5899797f1754/claude-code-extension-update-leaves-host-backdoors-behind PlainSec en 2026-10-30T13:22:11Z Claude Code extension update leaves host backdoors behind https://plainsec.com/it/stories/9597d075-a1c7-41b6-8651-5899797f1754/claude-code-extension-update-leaves-host-backdoors-behind PlainSec it 2026-10-30T13:22:11Z L’aggiornamento non cancella la backdoor lasciata da Claude Code https://plainsec.com/stories/ad147c54-3082-47b0-b538-27fcb4d2004b/vapor-panda-scales-espionage-by-seeking-falcon-gaps PlainSec en 2026-10-30T03:47:57Z Vapor Panda scales espionage with nine confirmed footholds https://plainsec.com/it/stories/ad147c54-3082-47b0-b538-27fcb4d2004b/vapor-panda-scales-espionage-by-seeking-falcon-gaps PlainSec it 2026-10-30T03:47:57Z Nove intrusioni confermate portano Vapor Panda oltre il targeting https://plainsec.com/stories/025e2e18-4a26-4bad-bafd-7aacc7a44efe/binance-incident-puts-stablecoin-issuers-in-the-response-path PlainSec en 2026-10-30T03:47:57Z Binance breach widens beyond a laptop entry https://plainsec.com/it/stories/025e2e18-4a26-4bad-bafd-7aacc7a44efe/binance-incident-puts-stablecoin-issuers-in-the-response-path PlainSec it 2026-10-30T03:47:57Z Binance scopre più varchi: il furto supera il perimetro del laptop https://plainsec.com/stories/d105a4ff-5e12-45d9-be96-5f0088667221/polymarket-s-third-party-breach-put-user-wallets-at-risk PlainSec en 2026-10-30T13:22:11Z DebugBear snippet let attackers trade through Polymarket sessions https://plainsec.com/it/stories/d105a4ff-5e12-45d9-be96-5f0088667221/polymarket-s-third-party-breach-put-user-wallets-at-risk PlainSec it 2026-10-30T13:22:11Z Una sessione Polymarket aperta è bastata a spostare i fondi https://plainsec.com/stories/c2133d0a-dc19-4bab-94cc-1a9aa1dfcbf2/wordpress-update-race-draws-18-500-attack-requests PlainSec en 2026-10-30T14:27:23Z WordPress update race draws 18,500 attack requests https://plainsec.com/it/stories/c2133d0a-dc19-4bab-94cc-1a9aa1dfcbf2/wordpress-update-race-draws-18-500-attack-requests PlainSec it 2026-10-30T14:27:23Z Oltre 18.500 richieste inseguono la finestra di aggiornamento di WordPress https://plainsec.com/stories/0453f768-1083-4f08-868d-2971064314f8/anthropic-model-links-platform-flaws-into-working-exploits PlainSec en 2026-10-30T20:26:10Z Claude built a Linux exploit for zero-click remote root https://plainsec.com/it/stories/0453f768-1083-4f08-868d-2971064314f8/anthropic-model-links-platform-flaws-into-working-exploits PlainSec it 2026-10-30T20:26:10Z In 53 minuti Claude porta una falla Linux a root remoto https://plainsec.com/stories/5bd22fe6-4839-4426-b516-f3a28bacace3/drupal-commerce-core-authorization-flaw-is-actively-exploited PlainSec en 2026-10-30T10:11:17Z Drupal Commerce Core authorization flaw is actively exploited https://plainsec.com/it/stories/5bd22fe6-4839-4426-b516-f3a28bacace3/drupal-commerce-core-authorization-flaw-is-actively-exploited PlainSec it 2026-10-30T10:11:17Z Lo sfruttamento attivo apre le funzioni di vendita di Drupal https://plainsec.com/stories/616c0352-bfd8-481c-8f50-99ec28a1323e/help-desk-impersonation-makes-remote-access-look-like-support PlainSec en 2026-10-30T10:11:17Z Fake help desks gain remote access through routine support https://plainsec.com/it/stories/616c0352-bfd8-481c-8f50-99ec28a1323e/help-desk-impersonation-makes-remote-access-look-like-support PlainSec it 2026-10-30T10:11:17Z Nomi e email bastano a trasformare l'assistenza in accesso remoto https://plainsec.com/stories/45cba266-4b91-493c-bf2e-0dfa2d9a447c/cisa-flags-patched-gitlab-flaw-as-actively-exploited PlainSec en 2026-10-30T16:27:47Z CISA flags patched GitLab flaw as actively exploited https://plainsec.com/it/stories/45cba266-4b91-493c-bf2e-0dfa2d9a447c/cisa-flags-patched-gitlab-flaw-as-actively-exploited PlainSec it 2026-10-30T16:27:47Z GitLab: la falla di gravità massima è già sfruttata https://plainsec.com/stories/4d20c828-a4e4-4c18-bffb-7eea3786819c/amadeus-breach-exposes-reservation-records-across-two-airlines PlainSec en 2026-10-30T01:38:26Z Amadeus breach exposes 92,000 Japan Airlines customer records https://plainsec.com/it/stories/4d20c828-a4e4-4c18-bffb-7eea3786819c/amadeus-breach-exposes-reservation-records-across-two-airlines PlainSec it 2026-10-30T01:38:26Z La violazione di Amadeus espone 92.000 clienti JAL https://plainsec.com/stories/5ce6e876-3b76-4f0f-879f-91773372d6ec/warp-panda-used-vmware-esxi-flaw-to-hide-operations PlainSec en 2026-10-29T11:15:27Z Warp Panda used VMware ESXi flaw to hide operations https://plainsec.com/it/stories/5ce6e876-3b76-4f0f-879f-91773372d6ec/warp-panda-used-vmware-esxi-flaw-to-hide-operations PlainSec it 2026-10-29T11:15:27Z I log di ESXi possono tacere dopo una compromissione https://plainsec.com/stories/9d21b4b2-9963-4a65-ba88-8d59410cbb1a/teams-impersonation-split-into-two-paths-to-privileged-access PlainSec en 2026-10-30T20:26:10Z Teams impersonation split into two paths to privileged access https://plainsec.com/it/stories/9d21b4b2-9963-4a65-ba88-8d59410cbb1a/teams-impersonation-split-into-two-paths-to-privileged-access PlainSec it 2026-10-30T20:26:10Z Una sessione di assistenza può aprire l’accesso al dominio https://plainsec.com/stories/6eb2375a-4e04-4609-ba9c-751d42e08602/aggiornamenti-di-sicurezza-per-prodotti-juniper-networks PlainSec en 2026-10-30T16:27:47Z Juniper fixes 18 Session Smart flaws, including root command execution https://plainsec.com/it/stories/6eb2375a-4e04-4609-ba9c-751d42e08602/aggiornamenti-di-sicurezza-per-prodotti-juniper-networks PlainSec it 2026-10-30T16:27:47Z Diciotto falle Juniper toccano anche la gestione della rete https://plainsec.com/stories/8b6f3036-9e02-493a-b014-09bf15666d7f/risolte-vulnerabilit-in-prodotti-teamviewer PlainSec en 2026-10-30T10:11:17Z TeamViewer flaw puts support technicians’ own machines at risk https://plainsec.com/it/stories/8b6f3036-9e02-493a-b014-09bf15666d7f/risolte-vulnerabilit-in-prodotti-teamviewer PlainSec it 2026-10-30T10:11:17Z La sessione remota può colpire il computer del tecnico https://plainsec.com/stories/68476ce3-27d4-4676-b949-2b53660dc01f/netamloader-uses-trusted-files-to-target-custom-windows-10 PlainSec en 2026-10-30T13:22:11Z NetamLoader uses trusted files to target custom Windows 10 https://plainsec.com/it/stories/68476ce3-27d4-4676-b949-2b53660dc01f/netamloader-uses-trusted-files-to-target-custom-windows-10 PlainSec it 2026-10-30T13:22:11Z Componenti firmati come copertura per NetamLoader su Windows 10 governativo https://plainsec.com/stories/746f90fc-7e21-4363-80cb-972a913bde41/trezor-warns-cryptobilis-buyers-of-phrase-stealing-implant PlainSec en 2026-10-30T18:30:43Z Trezor warns CryptoBilis buyers of phrase-stealing implant https://plainsec.com/it/stories/746f90fc-7e21-4363-80cb-972a913bde41/trezor-warns-cryptobilis-buyers-of-phrase-stealing-implant PlainSec it 2026-10-30T18:30:43Z Un Trezor apparentemente integro può esporre la frase di recupero https://plainsec.com/stories/37bf569a-698b-43bd-8b57-9f2863a29b03/dell-powerprotect-data-domain-os-mehrere-schwachstellen PlainSec en 2026-10-30T10:11:17Z Dell Data Domain flaws expose backup appliances and managed systems https://plainsec.com/it/stories/37bf569a-698b-43bd-8b57-9f2863a29b03/dell-powerprotect-data-domain-os-mehrere-schwachstellen PlainSec it 2026-10-30T10:11:17Z Le falle Dell raggiungono appliance di backup e sistemi gestiti https://plainsec.com/stories/641e92b7-b845-4311-b1fe-3f6f46733b6e/chrome-extensions-hijack-searches-for-referral-payments PlainSec en 2026-10-29T04:49:49Z Chrome extensions hijack searches for referral revenue https://plainsec.com/it/stories/641e92b7-b845-4311-b1fe-3f6f46733b6e/chrome-extensions-hijack-searches-for-referral-payments PlainSec it 2026-10-29T04:49:49Z Le ricerche su Chrome diventano una fonte di ricavi per le estensioni https://plainsec.com/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec en 2026-10-29T15:20:44Z Scanner used 32 AI identities to probe credential files https://plainsec.com/it/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec it 2026-10-29T15:20:44Z I nomi degli agenti AI diventano una porta da testare https://plainsec.com/stories/f37306e2-8d14-4d17-bb92-b65b5ff92766/fbi-seizure-leaves-virtualine-s-hosting-reach-uncertain PlainSec en 2026-10-29T02:35:36Z FBI seizure leaves Virtualine’s linked site still hosted https://plainsec.com/it/stories/f37306e2-8d14-4d17-bb92-b65b5ff92766/fbi-seizure-leaves-virtualine-s-hosting-reach-uncertain PlainSec it 2026-10-29T02:35:36Z Sequestrato il dominio di Virtualine, un sito resta ospitato https://plainsec.com/stories/f7c0f388-b463-44ac-8dc4-d259227688c2/linux-kernel-checksum-flaw-threatens-guest-isolation PlainSec en 2026-10-30T14:27:23Z Linux kernel checksum flaw threatens guest isolation https://plainsec.com/it/stories/f7c0f388-b463-44ac-8dc4-d259227688c2/linux-kernel-checksum-flaw-threatens-guest-isolation PlainSec it 2026-10-30T14:27:23Z Una VM non isola l’host dalle falle IPv4 del kernel Linux https://plainsec.com/stories/800a3f4d-28f4-494c-bd9a-c21a08ad95fe/nik-c2-joins-data-theft-with-screen-locking-ransomware PlainSec en 2026-10-29T11:15:27Z NIK C2 joins data theft with screen-locking ransomware https://plainsec.com/it/stories/800a3f4d-28f4-494c-bd9a-c21a08ad95fe/nik-c2-joins-data-theft-with-screen-locking-ransomware PlainSec it 2026-10-29T11:15:27Z Il furto di dati può sfociare nello stesso impianto in ransomware https://plainsec.com/stories/017a90dd-52b3-4253-9e27-43f6234ead88/unsloth-flaw-lets-model-configs-run-python-past-safety-setting PlainSec en 2026-10-29T06:25:34Z Unsloth flaw lets model configs run Python past safety setting https://plainsec.com/it/stories/017a90dd-52b3-4253-9e27-43f6234ead88/unsloth-flaw-lets-model-configs-run-python-past-safety-setting PlainSec it 2026-10-29T06:25:34Z La protezione di Unsloth non ferma il codice ostile https://plainsec.com/stories/6edf9ce3-4732-4fa7-a4a9-65cf3a3fdff6/watchguard-fireware-flaws-expose-privileged-cluster-controls PlainSec en 2026-10-29T23:45:10Z WatchGuard Fireware flaws expose privileged cluster controls https://plainsec.com/it/stories/6edf9ce3-4732-4fa7-a4a9-65cf3a3fdff6/watchguard-fireware-flaws-expose-privileged-cluster-controls PlainSec it 2026-10-29T23:45:10Z Un FireCluster può accettare azioni amministrative senza autenticazione https://plainsec.com/stories/0b214f96-1a98-474f-bcd8-e83f16d18c0b/public-exploit-puts-d-link-dir-505-backdoor-in-reach PlainSec en 2026-10-29T12:32:35Z Public exploit puts D-Link DIR-505 backdoor in reach https://plainsec.com/it/stories/0b214f96-1a98-474f-bcd8-e83f16d18c0b/public-exploit-puts-d-link-dir-505-backdoor-in-reach PlainSec it 2026-10-29T12:32:35Z Una backdoor remota nel D-Link DIR-505, senza rimedio indicato