https://plainsec.com/stories/ad240b27-b0f2-4593-8291-b4bf0b413bdf/php-for-windows-rebuild-masks-its-brotli-security-fix PlainSec en 2026-10-29T11:15:27Z PHP for Windows rebuild masks its Brotli security fix https://plainsec.com/it/stories/ad240b27-b0f2-4593-8291-b4bf0b413bdf/php-for-windows-rebuild-masks-its-brotli-security-fix PlainSec it 2026-10-29T11:15:27Z La patch di PHP per Windows si nasconde nel suffisso -1 https://plainsec.com/stories/9597d075-a1c7-41b6-8651-5899797f1754/claude-code-extension-update-leaves-host-backdoors-behind PlainSec en 2026-10-30T13:22:11Z Claude Code extension update leaves host backdoors behind https://plainsec.com/it/stories/9597d075-a1c7-41b6-8651-5899797f1754/claude-code-extension-update-leaves-host-backdoors-behind PlainSec it 2026-10-30T13:22:11Z L’aggiornamento non cancella la backdoor lasciata da Claude Code https://plainsec.com/stories/c2133d0a-dc19-4bab-94cc-1a9aa1dfcbf2/wordpress-update-race-draws-18-500-attack-requests PlainSec en 2026-10-30T14:27:23Z WordPress update race draws 18,500 attack requests https://plainsec.com/it/stories/c2133d0a-dc19-4bab-94cc-1a9aa1dfcbf2/wordpress-update-race-draws-18-500-attack-requests PlainSec it 2026-10-30T14:27:23Z Oltre 18.500 richieste inseguono la finestra di aggiornamento di WordPress https://plainsec.com/stories/025e2e18-4a26-4bad-bafd-7aacc7a44efe/binance-incident-puts-stablecoin-issuers-in-the-response-path PlainSec en 2026-10-30T03:47:57Z Binance breach puts cross-chain signing in scope https://plainsec.com/it/stories/025e2e18-4a26-4bad-bafd-7aacc7a44efe/binance-incident-puts-stablecoin-issuers-in-the-response-path PlainSec it 2026-10-30T03:47:57Z La violazione di Binance arriva al sistema che firma i prelievi https://plainsec.com/stories/d105a4ff-5e12-45d9-be96-5f0088667221/polymarket-s-third-party-breach-put-user-wallets-at-risk PlainSec en 2026-10-30T13:22:11Z DebugBear snippet let attackers trade through Polymarket sessions https://plainsec.com/it/stories/d105a4ff-5e12-45d9-be96-5f0088667221/polymarket-s-third-party-breach-put-user-wallets-at-risk PlainSec it 2026-10-30T13:22:11Z Una sessione Polymarket aperta è bastata a spostare i fondi https://plainsec.com/stories/5cd41826-e1ed-4964-85a1-d365ae6476b2/dhs-leak-maps-staff-tied-to-sensitive-work PlainSec en 2026-10-28T22:42:03Z DHS leak maps undercover work and application access https://plainsec.com/it/stories/5cd41826-e1ed-4964-85a1-d365ae6476b2/dhs-leak-maps-staff-tied-to-sensitive-work PlainSec it 2026-10-28T22:42:03Z I dati DHS diventano una mappa di ruoli e accessi sensibili https://plainsec.com/stories/f62bf214-929f-40a2-9721-3244ceb92cc8/php2shell-attacks-give-exposed-pan-os-consoles-code-execution PlainSec en 2026-10-29T06:25:34Z PHP2Shell attacks give exposed PAN-OS consoles code execution https://plainsec.com/it/stories/f62bf214-929f-40a2-9721-3244ceb92cc8/php2shell-attacks-give-exposed-pan-os-consoles-code-execution PlainSec it 2026-10-29T06:25:34Z Una console firewall esposta può aprire la strada fino ad Active Directory https://plainsec.com/stories/5bd22fe6-4839-4426-b516-f3a28bacace3/drupal-commerce-core-authorization-flaw-is-actively-exploited PlainSec en 2026-10-30T10:11:17Z Drupal Commerce Core authorization flaw is actively exploited https://plainsec.com/it/stories/5bd22fe6-4839-4426-b516-f3a28bacace3/drupal-commerce-core-authorization-flaw-is-actively-exploited PlainSec it 2026-10-30T10:11:17Z Lo sfruttamento attivo apre le funzioni di vendita di Drupal https://plainsec.com/stories/616c0352-bfd8-481c-8f50-99ec28a1323e/help-desk-impersonation-makes-remote-access-look-like-support PlainSec en 2026-10-30T10:11:17Z Fake help desks gain remote access through routine support https://plainsec.com/it/stories/616c0352-bfd8-481c-8f50-99ec28a1323e/help-desk-impersonation-makes-remote-access-look-like-support PlainSec it 2026-10-30T10:11:17Z Nomi e email bastano a trasformare l'assistenza in accesso remoto https://plainsec.com/stories/2ff70744-3941-4df7-9234-a4a63325c8c2/ghostwriter-attack-brings-destructive-cyber-operations-to-ukrainian-industry PlainSec en 2026-10-28T19:32:29Z FrostyNeighbor’s wiper strike joins sustained Belarus-linked activity https://plainsec.com/it/stories/2ff70744-3941-4df7-9234-a4a63325c8c2/ghostwriter-attack-brings-destructive-cyber-operations-to-ukrainian-industry PlainSec it 2026-10-28T19:32:29Z Il wiper non esaurisce le operazioni legate alla Bielorussia https://plainsec.com/stories/ad147c54-3082-47b0-b538-27fcb4d2004b/vapor-panda-scales-espionage-by-seeking-falcon-gaps PlainSec en 2026-10-30T03:47:57Z VAPOR PANDA scales espionage by seeking Falcon gaps https://plainsec.com/it/stories/ad147c54-3082-47b0-b538-27fcb4d2004b/vapor-panda-scales-espionage-by-seeking-falcon-gaps PlainSec it 2026-10-30T03:47:57Z Le lacune nei sensori diventano criteri di selezione per lo spionaggio https://plainsec.com/stories/f7c0f388-b463-44ac-8dc4-d259227688c2/linux-kernel-checksum-flaw-threatens-guest-isolation PlainSec en 2026-10-30T14:27:23Z Linux kernel checksum flaw threatens guest isolation https://plainsec.com/it/stories/f7c0f388-b463-44ac-8dc4-d259227688c2/linux-kernel-checksum-flaw-threatens-guest-isolation PlainSec it 2026-10-30T14:27:23Z Una VM non isola l’host dalle falle IPv4 del kernel Linux https://plainsec.com/stories/68476ce3-27d4-4676-b949-2b53660dc01f/netamloader-uses-trusted-files-to-target-custom-windows-10 PlainSec en 2026-10-30T13:22:11Z NetamLoader uses trusted files to target custom Windows 10 https://plainsec.com/it/stories/68476ce3-27d4-4676-b949-2b53660dc01f/netamloader-uses-trusted-files-to-target-custom-windows-10 PlainSec it 2026-10-30T13:22:11Z Componenti firmati come copertura per NetamLoader su Windows 10 governativo https://plainsec.com/stories/4d20c828-a4e4-4c18-bffb-7eea3786819c/amadeus-breach-exposes-reservation-records-across-two-airlines PlainSec en 2026-10-30T01:38:26Z Amadeus breach exposes 92,000 Japan Airlines customer records https://plainsec.com/it/stories/4d20c828-a4e4-4c18-bffb-7eea3786819c/amadeus-breach-exposes-reservation-records-across-two-airlines PlainSec it 2026-10-30T01:38:26Z La violazione di Amadeus espone 92.000 clienti JAL https://plainsec.com/stories/8b6f3036-9e02-493a-b014-09bf15666d7f/risolte-vulnerabilit-in-prodotti-teamviewer PlainSec en 2026-10-30T10:11:17Z TeamViewer flaw puts support technicians’ own machines at risk https://plainsec.com/it/stories/8b6f3036-9e02-493a-b014-09bf15666d7f/risolte-vulnerabilit-in-prodotti-teamviewer PlainSec it 2026-10-30T10:11:17Z La sessione remota può colpire il computer del tecnico https://plainsec.com/stories/acf14d8e-f555-4253-9003-e5936ba9fe44/so-net-breach-exposes-email-passwords-beyond-customer-records PlainSec en 2026-10-28T20:26:36Z So-net breach adds mailbox and bank-account exposure https://plainsec.com/it/stories/acf14d8e-f555-4253-9003-e5936ba9fe44/so-net-breach-exposes-email-passwords-beyond-customer-records PlainSec it 2026-10-28T20:26:36Z La violazione So-net espone 54.401 password email e dati bancari https://plainsec.com/stories/5ce6e876-3b76-4f0f-879f-91773372d6ec/warp-panda-used-vmware-esxi-flaw-to-hide-operations PlainSec en 2026-10-29T11:15:27Z Warp Panda used VMware ESXi flaw to hide operations https://plainsec.com/it/stories/5ce6e876-3b76-4f0f-879f-91773372d6ec/warp-panda-used-vmware-esxi-flaw-to-hide-operations PlainSec it 2026-10-29T11:15:27Z I log di ESXi possono tacere dopo una compromissione https://plainsec.com/stories/641e92b7-b845-4311-b1fe-3f6f46733b6e/chrome-extensions-hijack-searches-for-referral-payments PlainSec en 2026-10-29T04:49:49Z Chrome extensions hijack searches for referral revenue https://plainsec.com/it/stories/641e92b7-b845-4311-b1fe-3f6f46733b6e/chrome-extensions-hijack-searches-for-referral-payments PlainSec it 2026-10-29T04:49:49Z Le ricerche su Chrome diventano una fonte di ricavi per le estensioni https://plainsec.com/stories/37bf569a-698b-43bd-8b57-9f2863a29b03/dell-powerprotect-data-domain-os-mehrere-schwachstellen PlainSec en 2026-10-30T10:11:17Z Dell Data Domain flaws expose backup appliances and managed systems https://plainsec.com/it/stories/37bf569a-698b-43bd-8b57-9f2863a29b03/dell-powerprotect-data-domain-os-mehrere-schwachstellen PlainSec it 2026-10-30T10:11:17Z Le falle Dell raggiungono appliance di backup e sistemi gestiti https://plainsec.com/stories/800a3f4d-28f4-494c-bd9a-c21a08ad95fe/nik-c2-joins-data-theft-with-screen-locking-ransomware PlainSec en 2026-10-29T11:15:27Z NIK C2 joins data theft with screen-locking ransomware https://plainsec.com/it/stories/800a3f4d-28f4-494c-bd9a-c21a08ad95fe/nik-c2-joins-data-theft-with-screen-locking-ransomware PlainSec it 2026-10-29T11:15:27Z Il furto di dati può sfociare nello stesso impianto in ransomware https://plainsec.com/stories/8d882f2f-4cce-436a-9c77-a5f6aa5198f4/cisa-confirms-active-exploitation-of-brotli-decoder-flaw PlainSec en 2026-10-28T16:55:58Z CISA confirms active exploitation of Brotli decoder flaw https://plainsec.com/it/stories/8d882f2f-4cce-436a-9c77-a5f6aa5198f4/cisa-confirms-active-exploitation-of-brotli-decoder-flaw PlainSec it 2026-10-28T16:55:58Z Brotli espone servizi web anche quando la libreria è nascosta nelle dipendenze https://plainsec.com/stories/f37306e2-8d14-4d17-bb92-b65b5ff92766/fbi-seizure-leaves-virtualine-s-hosting-reach-uncertain PlainSec en 2026-10-29T02:35:36Z FBI seizure leaves Virtualine’s linked site still hosted https://plainsec.com/it/stories/f37306e2-8d14-4d17-bb92-b65b5ff92766/fbi-seizure-leaves-virtualine-s-hosting-reach-uncertain PlainSec it 2026-10-29T02:35:36Z Sequestrato il dominio di Virtualine, un sito resta ospitato https://plainsec.com/stories/017a90dd-52b3-4253-9e27-43f6234ead88/unsloth-flaw-lets-model-configs-run-python-past-safety-setting PlainSec en 2026-10-29T06:25:34Z Unsloth flaw lets model configs run Python past safety setting https://plainsec.com/it/stories/017a90dd-52b3-4253-9e27-43f6234ead88/unsloth-flaw-lets-model-configs-run-python-past-safety-setting PlainSec it 2026-10-29T06:25:34Z La protezione di Unsloth non ferma il codice ostile https://plainsec.com/stories/d29eec37-e594-4a77-8057-fbe6c633f394/moldova-takes-more-than-80-public-services-offline PlainSec en 2026-10-28T20:26:36Z Moldova attack reached beyond public services into government data https://plainsec.com/it/stories/d29eec37-e594-4a77-8057-fbe6c633f394/moldova-takes-more-than-80-public-services-offline PlainSec it 2026-10-28T20:26:36Z I servizi moldavi aperti al pubblico hanno esposto dati collegati https://plainsec.com/stories/6edf9ce3-4732-4fa7-a4a9-65cf3a3fdff6/watchguard-fireware-flaws-expose-privileged-cluster-controls PlainSec en 2026-10-29T23:45:10Z WatchGuard Fireware flaws expose privileged cluster controls https://plainsec.com/it/stories/6edf9ce3-4732-4fa7-a4a9-65cf3a3fdff6/watchguard-fireware-flaws-expose-privileged-cluster-controls PlainSec it 2026-10-29T23:45:10Z Un FireCluster può accettare azioni amministrative senza autenticazione https://plainsec.com/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec en 2026-10-29T15:20:44Z Scanner used 32 AI identities to probe credential files https://plainsec.com/it/stories/5eaf10a2-4458-4d06-8146-5c4b967ff62a/scanner-used-32-ai-identities-to-probe-credential-files PlainSec it 2026-10-29T15:20:44Z I nomi degli agenti AI diventano una porta da testare https://plainsec.com/stories/35695561-ca0c-4e5d-b555-bbf8bee2e7a2/engie-partner-marketing-breach-exposes-customer-contract-data PlainSec en 2026-10-28T20:26:36Z Engie partner breach exposes identifiers that aid impersonation https://plainsec.com/it/stories/35695561-ca0c-4e5d-b555-bbf8bee2e7a2/engie-partner-marketing-breach-exposes-customer-contract-data PlainSec it 2026-10-28T20:26:36Z I dati Engie possono dare credibilità alle richieste fraudolente https://plainsec.com/stories/0b214f96-1a98-474f-bcd8-e83f16d18c0b/public-exploit-puts-d-link-dir-505-backdoor-in-reach PlainSec en 2026-10-29T12:32:35Z Public exploit puts D-Link DIR-505 backdoor in reach https://plainsec.com/it/stories/0b214f96-1a98-474f-bcd8-e83f16d18c0b/public-exploit-puts-d-link-dir-505-backdoor-in-reach PlainSec it 2026-10-29T12:32:35Z Una backdoor remota nel D-Link DIR-505, senza rimedio indicato