https://plainsec.com/stories/c5b72599-7b04-4cfb-b9c0-5035ac218ca5/check-point-gateway-attacks-reached-esxi-and-wiped-files PlainSec en 2026-11-13T10:30:10Z Check Point gateway attacks reached ESXi and wiped files https://plainsec.com/it/stories/c5b72599-7b04-4cfb-b9c0-5035ac218ca5/check-point-gateway-attacks-reached-esxi-and-wiped-files PlainSec it 2026-11-13T10:30:10Z Dai gateway Check Point ai server ESXi: l’attacco cancella file https://plainsec.com/stories/632e1b2d-6984-4f56-9fa8-e1d1c1fba50d/trezor-implants-leave-old-recovery-phrases-exposed PlainSec en 2026-11-13T20:33:02Z Trezor implants leave old recovery phrases exposed https://plainsec.com/it/stories/632e1b2d-6984-4f56-9fa8-e1d1c1fba50d/trezor-implants-leave-old-recovery-phrases-exposed PlainSec it 2026-11-13T20:33:02Z La frase rubata resta valida dopo l’aggiornamento dei Trezor Safe 5 https://plainsec.com/stories/f8f89611-881b-49c3-84b0-5001c21ad73d/binance-theft-seizure-leaves-victims-waiting-on-court PlainSec en 2026-11-13T08:31:21Z FaceStealer seizure shows how Sapphire Sleet reuses victims https://plainsec.com/it/stories/f8f89611-881b-49c3-84b0-5001c21ad73d/binance-theft-seizure-leaves-victims-waiting-on-court PlainSec it 2026-11-13T08:31:21Z Oltre 900 volti rubati alimentano le prossime truffe di Sapphire Sleet https://plainsec.com/stories/62cbb360-aca1-41b5-b825-433200e336d9/silentair-hijacks-asian-carriers-to-intercept-calls-and-texts PlainSec en 2026-11-13T04:26:10Z SilentAir hijacks Asian carriers to intercept calls and texts https://plainsec.com/it/stories/62cbb360-aca1-41b5-b825-433200e336d9/silentair-hijacks-asian-carriers-to-intercept-calls-and-texts PlainSec it 2026-11-13T04:26:10Z Operatori compromessi in sei paesi colpiscono abbonati oltre confine https://plainsec.com/stories/814ba2fe-8ff6-42d5-8320-d0c4fe9291c9/microsoft-365-outage-hit-email-and-security-visibility PlainSec en 2026-11-13T00:22:42Z Microsoft 365 outage hit email and security visibility https://plainsec.com/it/stories/814ba2fe-8ff6-42d5-8320-d0c4fe9291c9/microsoft-365-outage-hit-email-and-security-visibility PlainSec it 2026-11-13T00:22:42Z Un solo guasto ferma email e difesa SOC in Microsoft 365 https://plainsec.com/stories/a67f0f19-e601-4ee1-8f6c-7839560690a2/cairn-scales-tailored-intrusions-across-19-organizations PlainSec en 2026-11-12T18:33:04Z Cairn scales tailored intrusions across 19 organizations https://plainsec.com/it/stories/a67f0f19-e601-4ee1-8f6c-7839560690a2/cairn-scales-tailored-intrusions-across-19-organizations PlainSec it 2026-11-12T18:33:04Z Cairn porta intrusioni mirate in parallelo contro 19 organizzazioni https://plainsec.com/stories/cf56654c-cb8d-42f5-b62c-0fffe5f035ea/north-korean-fake-hires-meet-broad-file-access-at-onboarding PlainSec en 2026-11-13T10:30:10Z North Korean fake hires meet broad file access at onboarding https://plainsec.com/it/stories/cf56654c-cb8d-42f5-b62c-0fffe5f035ea/north-korean-fake-hires-meet-broad-file-access-at-onboarding PlainSec it 2026-11-13T10:30:10Z Un’assunzione ostile può aprire subito i dati aziendali https://plainsec.com/stories/f63a7852-d518-475f-b531-e5c0d14f2d8c/xweb-evo-configuration-flaw-exploited-within-100-minutes PlainSec en 2026-11-13T02:22:29Z XWEB EVO configuration flaw exploited within 100 minutes https://plainsec.com/it/stories/f63a7852-d518-475f-b531-e5c0d14f2d8c/xweb-evo-configuration-flaw-exploited-within-100-minutes PlainSec it 2026-11-13T02:22:29Z XWEB EVO sfruttato in 100 minuti, prima di un PoC pubblico https://plainsec.com/stories/d811d733-4009-4f06-9bb6-f587c614636c/operation-endgame-seized-servers-but-logins-remain PlainSec en 2026-11-13T14:55:36Z Operation Endgame seized infrastructure, not stolen logins https://plainsec.com/it/stories/d811d733-4009-4f06-9bb6-f587c614636c/operation-endgame-seized-servers-but-logins-remain PlainSec it 2026-11-13T14:55:36Z I server cadono, ma 6,4 milioni di credenziali possono alimentare nuovi attacchi https://plainsec.com/stories/f94e3082-2e32-4ecb-8857-452ed3bd2acc/aws-intrusion-split-across-accounts-by-a-14-day-pause PlainSec en 2026-11-13T16:36:01Z AWS intrusion split across accounts by a 14-day pause https://plainsec.com/it/stories/f94e3082-2e32-4ecb-8857-452ed3bd2acc/aws-intrusion-split-across-accounts-by-a-14-day-pause PlainSec it 2026-11-13T16:36:01Z Una pausa di 14 giorni spezza un'unica intrusione AWS in 78 alert https://plainsec.com/stories/107274da-a92c-40bc-8964-899f7b047be8/asus-router-flaws-threaten-root-access-zoom-patches-privilege-bugs PlainSec en 2026-11-13T16:36:01Z Zoom Workplace flaws could grant Windows host privileges https://plainsec.com/it/stories/107274da-a92c-40bc-8964-899f7b047be8/asus-router-flaws-threaten-root-access-zoom-patches-privilege-bugs PlainSec it 2026-11-13T16:36:01Z Due falle in Zoom possono dare privilegi elevati su Windows https://plainsec.com/stories/0056f159-370a-4714-bb1c-495e262783da/postgresql-fix-needs-extension-rebuild-to-close-code-execution-flaw PlainSec en 2026-11-14T04:29:37Z PostgreSQL fix needs extension rebuild to close code-execution flaw https://plainsec.com/it/stories/0056f159-370a-4714-bb1c-495e262783da/postgresql-fix-needs-extension-rebuild-to-close-code-execution-flaw PlainSec it 2026-11-14T04:29:37Z Una patch PostgreSQL non basta: le estensioni C restano esposte https://plainsec.com/stories/9396c899-6a26-4050-973c-66dc22571501/fake-gta-vi-installer-steals-browser-and-crypto-data PlainSec en 2026-11-14T06:29:50Z Fake GTA VI installer steals browser and crypto data https://plainsec.com/it/stories/9396c899-6a26-4050-973c-66dc22571501/fake-gta-vi-installer-steals-browser-and-crypto-data PlainSec it 2026-11-14T06:29:50Z Il falso GTA VI trasforma il download in furto di credenziali https://plainsec.com/stories/d49562cc-f5c1-44da-90b3-1b98effdd2f6/citrix-flaws-threaten-netscaler-services-and-access PlainSec en 2026-11-12T18:33:04Z Citrix NetScaler patch set adds a Console access bypass https://plainsec.com/it/stories/d49562cc-f5c1-44da-90b3-1b98effdd2f6/citrix-flaws-threaten-netscaler-services-and-access PlainSec it 2026-11-12T18:33:04Z Il bypass senza autenticazione amplia il rischio del patch set NetScaler https://plainsec.com/stories/f1d44f67-baf1-40d5-951e-c19b54337932/amd-sev-snp-attacks-let-hosts-alter-memory-and-fake-attestation PlainSec en 2026-11-13T22:34:49Z AMD SEV-SNP attacks let hosts alter memory and fake attestation https://plainsec.com/it/stories/f1d44f67-baf1-40d5-951e-c19b54337932/amd-sev-snp-attacks-let-hosts-alter-memory-and-fake-attestation PlainSec it 2026-11-13T22:34:49Z Una VM malevola può passare per affidabile su AMD SEV-SNP https://plainsec.com/stories/f4e1cb8f-a17f-4719-ad15-6e9684e2a82d/signdrop-targets-a-separate-path-to-windows-system-access PlainSec en 2026-11-13T08:31:21Z SignDrop turns Defender’s CLFS hardening into SYSTEM access https://plainsec.com/it/stories/f4e1cb8f-a17f-4719-ad15-6e9684e2a82d/signdrop-targets-a-separate-path-to-windows-system-access PlainSec it 2026-11-13T08:31:21Z La protezione di CLFS diventa una via per ottenere privilegi SYSTEM https://plainsec.com/stories/b997fdac-d303-419e-9ce6-8eb48bdfea15/ai-attack-frameworks-leave-scope-to-prompts-not-code PlainSec en 2026-11-13T20:33:02Z AI attack frameworks leave scope to prompts, not code https://plainsec.com/it/stories/b997fdac-d303-419e-9ce6-8eb48bdfea15/ai-attack-frameworks-leave-scope-to-prompts-not-code PlainSec it 2026-11-13T20:33:02Z Report: cinque framework AI non verificano i limiti nel codice https://plainsec.com/stories/57893739-6a2f-4410-8cd8-2e9ed703cf67/silent-lynx-used-one-rail-account-to-reach-government-files PlainSec en 2026-11-12T18:33:04Z Silent Lynx used one rail account to reach government files https://plainsec.com/it/stories/57893739-6a2f-4410-8cd8-2e9ed703cf67/silent-lynx-used-one-rail-account-to-reach-government-files PlainSec it 2026-11-12T18:33:04Z Una credenziale ferroviaria apre gli archivi del governo tagiko https://plainsec.com/stories/d19f959b-49d2-4ee0-b1a9-b2f75685bfd9/gpustacks-localhost-spoofing-skips-authentication-on-exposed-managers PlainSec en 2026-11-12T14:33:32Z GPUStack's localhost spoofing skips authentication on exposed managers https://plainsec.com/it/stories/d19f959b-49d2-4ee0-b1a9-b2f75685bfd9/gpustacks-localhost-spoofing-skips-authentication-on-exposed-managers PlainSec it 2026-11-12T14:33:32Z Un falso localhost apre l’infrastruttura AI gestita da GPUStack https://plainsec.com/stories/b24e90a0-ac10-4988-9409-d71cbdb6e92c/screenconnect-crypto-named-sessions-put-technicians-at-risk PlainSec en 2026-11-14T02:29:35Z ScreenConnect crypto-named sessions put technicians at risk https://plainsec.com/it/stories/b24e90a0-ac10-4988-9409-d71cbdb6e92c/screenconnect-crypto-named-sessions-put-technicians-at-risk PlainSec it 2026-11-14T02:29:35Z Un server pulito non esclude 2.223 sessioni false in ScreenConnect https://plainsec.com/stories/148f8d6e-5e05-4622-bb38-f3d695cf1300/maersk-probes-suspected-theft-from-legacy-system PlainSec en 2026-11-12T18:33:04Z Maersk confirms legacy-system theft as WhiteArmor’s haul remains unverified https://plainsec.com/it/stories/148f8d6e-5e05-4622-bb38-f3d695cf1300/maersk-probes-suspected-theft-from-legacy-system PlainSec it 2026-11-12T18:33:04Z Le spedizioni proseguono, ma i dati sottratti a Maersk restano ignoti https://plainsec.com/stories/a851bb36-4fc2-4c1e-98e9-21d85b694397/poisoned-coding-agents-can-misuse-their-granted-tools PlainSec en 2026-11-13T04:26:10Z Poisoned coding agents can misuse their granted tools https://plainsec.com/it/stories/a851bb36-4fc2-4c1e-98e9-21d85b694397/poisoned-coding-agents-can-misuse-their-granted-tools PlainSec it 2026-11-13T04:26:10Z Una backdoor può usare i tool del coding agent contro il sistema https://plainsec.com/stories/7b7f8cdc-aa4a-4bc2-bbc5-e114b3a92a34/sansar-makes-gpu-mining-look-idle-to-monitoring PlainSec en 2026-11-13T12:28:38Z SANSAR makes GPU mining look idle to monitoring https://plainsec.com/it/stories/7b7f8cdc-aa4a-4bc2-bbc5-e114b3a92a34/sansar-makes-gpu-mining-look-idle-to-monitoring PlainSec it 2026-11-13T12:28:38Z Il mining GPU continua anche quando nvidia-smi segna zero https://plainsec.com/stories/0305634a-70c8-488f-a8c5-6a75f436a625/check-point-flaw-turns-local-code-into-root-access PlainSec en 2026-11-13T16:36:01Z Check Point flaw turns local code into root access https://plainsec.com/it/stories/0305634a-70c8-488f-a8c5-6a75f436a625/check-point-flaw-turns-local-code-into-root-access PlainSec it 2026-11-13T16:36:01Z Un accesso locale basta a ottenere root sui firewall Check Point https://plainsec.com/stories/494914a3-6a99-404d-95cc-340210a627eb/node-js-flaws-put-server-memory-and-uptime-at-risk PlainSec en 2026-11-13T06:31:12Z Node.js flaws put server memory and uptime at risk https://plainsec.com/it/stories/494914a3-6a99-404d-95cc-340210a627eb/node-js-flaws-put-server-memory-and-uptime-at-risk PlainSec it 2026-11-13T06:31:12Z Node.js espone memoria condivisa, non solo la disponibilità dei server https://plainsec.com/stories/1ae51ca5-fd35-4657-a30c-77765b7c8a67/macfinger-clickfix-uses-fake-captcha-to-deliver-mac-infostealer PlainSec en 2026-11-13T10:30:10Z Macfinger ClickFix uses fake CAPTCHA to deliver Mac infostealer https://plainsec.com/it/stories/1ae51ca5-fd35-4657-a30c-77765b7c8a67/macfinger-clickfix-uses-fake-captcha-to-deliver-mac-infostealer PlainSec it 2026-11-13T10:30:10Z La verifica CAPTCHA diventa il varco per un infostealer su Mac https://plainsec.com/stories/a7c2bd46-5c4f-4859-86f7-ac3e116cc12d/microsoft-ai-scan-surfaces-59-linux-kernel-flaws PlainSec en 2026-11-12T16:41:47Z Microsoft AI scan surfaces 59 Linux kernel flaws https://plainsec.com/it/stories/a7c2bd46-5c4f-4859-86f7-ac3e116cc12d/microsoft-ai-scan-surfaces-59-linux-kernel-flaws PlainSec it 2026-11-12T16:41:47Z L’IA amplia la caccia ai bug, ma la correzione resta umana https://plainsec.com/stories/bf5576cf-5fdc-454f-9a82-8f3d461d031d/fortinet-fixes-43-flaws-across-management-and-analytics-products PlainSec en 2026-11-12T14:33:32Z Fortinet fixes 43 flaws across management and analytics products https://plainsec.com/it/stories/bf5576cf-5fdc-454f-9a82-8f3d461d031d/fortinet-fixes-43-flaws-across-management-and-analytics-products PlainSec it 2026-11-12T14:33:32Z Quarantatré falle mettono a rischio il piano di gestione Fortinet