https://plainsec.com/stories/fd39f9f8-20f7-450e-96e4-053ec94b7a02/bricksforge-upload-flaw-turns-form-files-into-php PlainSec en 2026-10-12T13:00:18Z Bricksforge upload flaw turns form files into PHP https://plainsec.com/it/stories/fd39f9f8-20f7-450e-96e4-053ec94b7a02/bricksforge-upload-flaw-turns-form-files-into-php PlainSec it 2026-10-12T13:00:18Z Bricksforge espone i siti WordPress a RCE via upload https://plainsec.com/stories/84b5aa1d-a001-4f52-9e17-d6fbf3624492/qilin-and-settra-turn-palo-alto-vpn-into-access-path PlainSec en 2026-10-12T13:00:18Z Qilin and Settra turn Palo Alto VPN into access path https://plainsec.com/it/stories/84b5aa1d-a001-4f52-9e17-d6fbf3624492/qilin-and-settra-turn-palo-alto-vpn-into-access-path PlainSec it 2026-10-12T13:00:18Z Il VPN aziendale diventa la porta del ransomware https://plainsec.com/stories/d28797cc-952b-43ef-911a-3683d8152ce3/cyberxero-uses-claude-code-to-scale-wordpress-break-ins PlainSec en 2026-10-12T09:04:39Z CyberXero uses Claude Code to scale WordPress break-ins https://plainsec.com/it/stories/d28797cc-952b-43ef-911a-3683d8152ce3/cyberxero-uses-claude-code-to-scale-wordpress-break-ins PlainSec it 2026-10-12T09:04:39Z CyberXero usa Claude Code per scalare gli attacchi WordPress https://plainsec.com/stories/1217c659-83a4-4c94-87f4-1bf95fe5721a/danfoss-refrigeration-controllers-turn-a-cyberattack-into-spoilage PlainSec en 2026-10-12T20:29:46Z Danfoss refrigeration controllers turn a cyberattack into spoilage https://plainsec.com/it/stories/1217c659-83a4-4c94-87f4-1bf95fe5721a/danfoss-refrigeration-controllers-turn-a-cyberattack-into-spoilage PlainSec it 2026-10-12T20:29:46Z I frigoriferi diventano un bersaglio remoto https://plainsec.com/stories/933d5b2f-8ff5-4dd6-aa1f-ad515d4d0e81/ledger-implant-in-reseller-sold-wallets-drained-millions PlainSec en 2026-10-12T14:47:05Z Ledger implant in reseller-sold wallets drained millions https://plainsec.com/it/stories/933d5b2f-8ff5-4dd6-aa1f-ad515d4d0e81/ledger-implant-in-reseller-sold-wallets-drained-millions PlainSec it 2026-10-12T14:47:05Z Ledger compromesso dalla catena di fornitura dei wallet https://plainsec.com/stories/9b612837-bcba-480d-b9b2-405d952ce60b/risolte-vulnerabilit-su-gitlab-ce-ee PlainSec en 2026-10-12T16:55:41Z GitLab emergency patch closes a code execution hole https://plainsec.com/it/stories/9b612837-bcba-480d-b9b2-405d952ce60b/risolte-vulnerabilit-su-gitlab-ce-ee PlainSec it 2026-10-12T16:55:41Z GitLab espone il control plane del codice con un RCE critico https://plainsec.com/stories/348c2260-f76a-41b9-8f22-f08ad9d35ab6/luna-moth-leak-shows-a-staffed-extortion-service PlainSec en 2026-10-12T16:55:41Z Luna Moth leak shows a staffed extortion service https://plainsec.com/it/stories/348c2260-f76a-41b9-8f22-f08ad9d35ab6/luna-moth-leak-shows-a-staffed-extortion-service PlainSec it 2026-10-12T16:55:41Z Luna Moth emerge come servizio di estorsione su help desk https://plainsec.com/stories/59a1f00e-7ef5-44d8-9c6a-5633d3db0201/snowflake-thefts-came-from-old-stolen-logins PlainSec en 2026-10-12T16:55:41Z Snowflake thefts came from old stolen logins https://plainsec.com/it/stories/59a1f00e-7ef5-44d8-9c6a-5633d3db0201/snowflake-thefts-came-from-old-stolen-logins PlainSec it 2026-10-12T16:55:41Z Credenziali vecchie riaprono gli account Snowflake https://plainsec.com/stories/f76e4eb4-07d4-4e5a-964c-d7e6eb1e6dd8/yandex-s-data-center-losses-ripple-across-russia PlainSec en 2026-10-12T14:47:05Z Yandex loses redundancy as third data center is hit https://plainsec.com/it/stories/f76e4eb4-07d4-4e5a-964c-d7e6eb1e6dd8/yandex-s-data-center-losses-ripple-across-russia PlainSec it 2026-10-12T14:47:05Z Tre data center colpiti e Yandex perde la ridondanza https://plainsec.com/stories/6709c0e0-956c-4f5e-a453-9024cadf5851/irhythm-breach-exposed-360-000-patient-records PlainSec en 2026-10-12T13:00:18Z iRhythm breach exposed 360,000 patient records https://plainsec.com/it/stories/6709c0e0-956c-4f5e-a453-9024cadf5851/irhythm-breach-exposed-360-000-patient-records PlainSec it 2026-10-12T13:00:18Z Dati sanitari esposti da app terze, non dai sistemi clinici https://plainsec.com/stories/e5a5f42e-5383-4e6d-be10-846c44020e81/lets-encrypt-shortens-certificate-lifetimes-to-64-days PlainSec en 2026-10-12T09:04:39Z Let's Encrypt shortens certificate lifetimes to 64 days https://plainsec.com/it/stories/e5a5f42e-5383-4e6d-be10-846c44020e81/lets-encrypt-shortens-certificate-lifetimes-to-64-days PlainSec it 2026-10-12T09:04:39Z Gli script di rinnovo fissi non reggeranno il nuovo ciclo di Let's Encrypt https://plainsec.com/stories/4d343d20-2199-4f41-92e0-fdbac5ab2bf6/metasploit-framework-web-service-rest-api-missing-authentication-on-credential-endpoints PlainSec en 2026-10-13T04:23:17Z Metasploit API bug exposed saved credentials https://plainsec.com/it/stories/4d343d20-2199-4f41-92e0-fdbac5ab2bf6/metasploit-framework-web-service-rest-api-missing-authentication-on-credential-endpoints PlainSec it 2026-10-13T04:23:17Z Metasploit espone l’intero credential store via API https://plainsec.com/stories/98ba807b-1a14-403c-a967-25fc01a7bc05/ai-agents-shrink-the-ot-defense-window PlainSec en 2026-10-11T14:37:45Z AI agents shrink the OT defense window https://plainsec.com/it/stories/98ba807b-1a14-403c-a967-25fc01a7bc05/ai-agents-shrink-the-ot-defense-window PlainSec it 2026-10-11T14:37:45Z L'AI accorcia a minuti la finestra di difesa OT https://plainsec.com/stories/68b04b2b-618e-4442-9246-c2a07bc59e25/avisloader-uses-tox-to-outlast-takedowns PlainSec en 2026-10-12T22:32:50Z AvisLoader uses Tox to outlast takedowns https://plainsec.com/it/stories/68b04b2b-618e-4442-9246-c2a07bc59e25/avisloader-uses-tox-to-outlast-takedowns PlainSec it 2026-10-12T22:32:50Z Un loader Windows che non cade con un domain takedown https://plainsec.com/stories/c9160463-98da-4f36-a5a8-506139601504/aruba-clearpass-policy-manager-mehrere-schwachstellen PlainSec en 2026-10-12T16:55:41Z HPE switch advisory flags management-plane bypasses https://plainsec.com/it/stories/c9160463-98da-4f36-a5a8-506139601504/aruba-clearpass-policy-manager-mehrere-schwachstellen PlainSec it 2026-10-12T16:55:41Z Il piano di gestione degli switch HPE è raggiungibile senza login https://plainsec.com/stories/e379c7ad-fac3-494b-9c1c-51f18c55ba85/microsoft-warns-old-windows-will-miss-updates PlainSec en 2026-10-12T09:04:39Z Microsoft warns old Windows will miss updates https://plainsec.com/it/stories/e379c7ad-fac3-494b-9c1c-51f18c55ba85/microsoft-warns-old-windows-will-miss-updates PlainSec it 2026-10-12T09:04:39Z Windows vecchi restano online, ma senza patch https://plainsec.com/stories/1a16f566-e26e-4022-afd9-e78dc545460c/nvidia-dcgm-exporter-leaks-telemetry-and-can-crash PlainSec en 2026-10-12T06:41:58Z Nvidia DCGM Exporter leaks telemetry and can crash https://plainsec.com/it/stories/1a16f566-e26e-4022-afd9-e78dc545460c/nvidia-dcgm-exporter-leaks-telemetry-and-can-crash PlainSec it 2026-10-12T06:41:58Z Monitoraggio GPU esposto, anche i carichi AI vanno in crisi