https://plainsec.com/stories/8d83f201-2ee9-4c1b-8fed-0c4a73aa6bc7/beyondtrust-appliance-bug-turned-support-into-a-foothold PlainSec en 2026-10-16T04:37:15Z BeyondTrust zero-day shifts to self-hosted exposure https://plainsec.com/it/stories/8d83f201-2ee9-4c1b-8fed-0c4a73aa6bc7/beyondtrust-appliance-bug-turned-support-into-a-foothold PlainSec it 2026-10-16T04:37:15Z SaaS già chiuso, restano esposti gli appliance self-hosted https://plainsec.com/stories/f99c661a-3cd6-49c7-bf6e-044312ba6835/cisco-secure-email-gateway-flaw-can-spread-in-clusters PlainSec en 2026-10-16T04:37:15Z Cisco Secure Email Gateway flaw can spread in clusters https://plainsec.com/it/stories/f99c661a-3cd6-49c7-bf6e-044312ba6835/cisco-secure-email-gateway-flaw-can-spread-in-clusters PlainSec it 2026-10-16T04:37:15Z Un filtro mail compromesso può aprire l’intero cluster https://plainsec.com/stories/daf279db-2e44-4b79-a479-f807f73b904a/silent-lynx-turns-winrar-into-startup-persistence PlainSec en 2026-10-16T04:37:15Z Silent Lynx turns WinRAR into startup persistence https://plainsec.com/it/stories/daf279db-2e44-4b79-a479-f807f73b904a/silent-lynx-turns-winrar-into-startup-persistence PlainSec it 2026-10-16T04:37:15Z Silent Lynx trasforma WinRAR in accesso persistente https://plainsec.com/stories/319d0298-b73d-4c67-8de8-41ed859acbff/unit-42-finds-ai-written-espionage-on-linux-hosts PlainSec en 2026-10-16T02:42:16Z Unit 42 finds AI-written espionage on Linux hosts https://plainsec.com/it/stories/319d0298-b73d-4c67-8de8-41ed859acbff/unit-42-finds-ai-written-espionage-on-linux-hosts PlainSec it 2026-10-16T02:42:16Z Linux governativi colpiti da malware scritto anche dall’AI https://plainsec.com/stories/70cd8f32-ec76-4094-b77e-7fe116cee79e/fortimanager-compromise-exposed-managed-firewalls PlainSec en 2026-10-16T06:57:24Z FortiManager compromise exposed managed firewalls https://plainsec.com/it/stories/70cd8f32-ec76-4094-b77e-7fe116cee79e/fortimanager-compromise-exposed-managed-firewalls PlainSec it 2026-10-16T06:57:24Z FortiManager trasforma 500 FortiGate in un unico varco https://plainsec.com/stories/1d35a413-84a1-4982-aa50-629ca7fc77b8/gitlab-ci-cd-regex-bug-opens-self-managed-servers PlainSec en 2026-10-16T17:43:03Z GitLab CI/CD regex bug opens self-managed servers https://plainsec.com/it/stories/1d35a413-84a1-4982-aa50-629ca7fc77b8/gitlab-ci-cd-regex-bug-opens-self-managed-servers PlainSec it 2026-10-16T17:43:03Z Self-managed GitLab espone RCE senza accesso al repository https://plainsec.com/stories/d55e900a-3f21-4873-ac43-d8f73f7a2ea5/adtech-redirects-targeted-ads-into-spyware-infrastructure PlainSec en 2026-10-15T18:41:51Z Adtech routes spyware onto managed phones https://plainsec.com/it/stories/d55e900a-3f21-4873-ac43-d8f73f7a2ea5/adtech-redirects-targeted-ads-into-spyware-infrastructure PlainSec it 2026-10-15T18:41:51Z Gli annunci targetizzati diventano un canale per spyware invisibile https://plainsec.com/stories/3f08ea9d-bc08-4eda-bcd8-312060bf8919/pwnescape-breaks-linux-vm-isolation-at-the-host-layer PlainSec en 2026-10-16T02:42:16Z PwnEscape breaks Linux VM isolation at the host layer https://plainsec.com/it/stories/3f08ea9d-bc08-4eda-bcd8-312060bf8919/pwnescape-breaks-linux-vm-isolation-at-the-host-layer PlainSec it 2026-10-16T02:42:16Z La sandbox condivisa cede sotto una falla del kernel Linux https://plainsec.com/stories/ed55a27a-8404-40fa-9862-1b04630de572/refrigeration-controller-attack-widens-across-french-supermarkets PlainSec en 2026-10-15T17:09:19Z Refrigeration controller attack widens across French supermarkets https://plainsec.com/it/stories/ed55a27a-8404-40fa-9862-1b04630de572/refrigeration-controller-attack-widens-across-french-supermarkets PlainSec it 2026-10-15T17:09:19Z La falla colpisce una flotta più ampia dei soli controller Danfoss https://plainsec.com/stories/88c241ed-373b-4fb4-8e79-bb72168ff988/backdoored-open-weight-models-exfiltrate-secrets PlainSec en 2026-10-16T14:49:55Z Backdoored open-weight models exfiltrate secrets https://plainsec.com/it/stories/88c241ed-373b-4fb4-8e79-bb72168ff988/backdoored-open-weight-models-exfiltrate-secrets PlainSec it 2026-10-16T14:49:55Z I modelli open-weight possono nascondere backdoor dormienti https://plainsec.com/stories/8d381e1f-cb9d-4d04-aa47-434c7fc28895/ad-networks-become-a-zero-click-spyware-channel PlainSec en 2026-10-15T14:33:33Z Ad networks become a zero-click spyware channel https://plainsec.com/it/stories/8d381e1f-cb9d-4d04-aa47-434c7fc28895/ad-networks-become-a-zero-click-spyware-channel PlainSec it 2026-10-15T14:33:33Z Gli annunci online diventano un canale per lo spyware zero-click https://plainsec.com/stories/7413fcbd-289d-4b8a-bdc5-94cde1e80426/bae-systems-outage-stalls-federal-bankruptcy-notices PlainSec en 2026-10-16T10:51:02Z BAE Systems outage halts bankruptcy notices nationwide https://plainsec.com/it/stories/7413fcbd-289d-4b8a-bdc5-94cde1e80426/bae-systems-outage-stalls-federal-bankruptcy-notices PlainSec it 2026-10-16T10:51:02Z La notifica fallimentare federale resta bloccata per un guasto esterno https://plainsec.com/stories/f0790967-9b05-47bc-819e-cff1b2ba4808/langflow-flaw-lets-any-account-run-server-commands PlainSec en 2026-10-15T08:35:46Z Langflow flaw lets any account run server commands https://plainsec.com/it/stories/f0790967-9b05-47bc-819e-cff1b2ba4808/langflow-flaw-lets-any-account-run-server-commands PlainSec it 2026-10-15T08:35:46Z Langflow, un account autenticato basta per eseguire comandi sul server https://plainsec.com/stories/c92e106b-4fbe-417b-bb9a-35db3a62a7c7/openai-models-hid-unauthorized-live-system-access PlainSec en 2026-10-16T17:43:03Z OpenAI models hid unauthorized live-system access https://plainsec.com/it/stories/c92e106b-4fbe-417b-bb9a-35db3a62a7c7/openai-models-hid-unauthorized-live-system-access PlainSec it 2026-10-16T17:43:03Z I modelli OpenAI hanno nascosto le proprie azioni https://plainsec.com/stories/7bb2fff9-76fb-47aa-a4a6-6c3ae1f4b99f/bank-of-america-turns-an-ai-scan-into-a-remediation-bill PlainSec en 2026-10-16T17:43:03Z Bank of America turns an AI scan into a remediation bill https://plainsec.com/it/stories/7bb2fff9-76fb-47aa-a4a6-6c3ae1f4b99f/bank-of-america-turns-an-ai-scan-into-a-remediation-bill PlainSec it 2026-10-16T17:43:03Z Bank of America trasforma un audit AI in remediation di massa https://plainsec.com/stories/43937a50-a955-469b-9466-103ef945e2e6/collabora-built-in-code-flaw-plants-web-shells PlainSec en 2026-10-14T23:13:08Z Collabora built-in CODE flaw plants web shells https://plainsec.com/it/stories/43937a50-a955-469b-9466-103ef945e2e6/collabora-built-in-code-flaw-plants-web-shells PlainSec it 2026-10-14T23:13:08Z Lo stop del server locale apre la porta alla web shell https://plainsec.com/stories/aa8e91c0-fe67-4925-836d-bc9bc3e34087/n0n-leak-site-points-to-shared-port-access PlainSec en 2026-10-15T17:09:19Z n0n leak site points to shared port access https://plainsec.com/it/stories/aa8e91c0-fe67-4925-836d-bc9bc3e34087/n0n-leak-site-points-to-shared-port-access PlainSec it 2026-10-15T17:09:19Z Un punto d’ingresso comune può esporre 38 operatori portuali https://plainsec.com/stories/dd0b1938-2092-491b-a7e9-cdd62581094b/ddos-now-breaks-defenses-before-links-fill PlainSec en 2026-10-16T08:54:00Z DDoS now breaks defenses before links fill https://plainsec.com/it/stories/dd0b1938-2092-491b-a7e9-cdd62581094b/ddos-now-breaks-defenses-before-links-fill PlainSec it 2026-10-16T08:54:00Z Il collo di bottiglia è diventato l’edge https://plainsec.com/stories/47a15365-09b0-46c8-8f41-36026102f862/spip-odt2spip-lets-redacteurs-reach-code-execution PlainSec en 2026-10-16T04:37:15Z SPIP odt2spip lets redacteurs reach code execution https://plainsec.com/it/stories/47a15365-09b0-46c8-8f41-36026102f862/spip-odt2spip-lets-redacteurs-reach-code-execution PlainSec it 2026-10-16T04:37:15Z Un upload può diventare codice sul server SPIP https://plainsec.com/stories/4796663c-49ba-49db-88c5-b4cac8254c9e/aoki-steals-ai-assistant-tokens-for-repo-access PlainSec en 2026-10-16T14:49:55Z Aoki steals AI assistant tokens for repo access https://plainsec.com/it/stories/4796663c-49ba-49db-88c5-b4cac8254c9e/aoki-steals-ai-assistant-tokens-for-repo-access PlainSec it 2026-10-16T14:49:55Z Aoki allarga il furto alle credenziali degli assistant AI https://plainsec.com/stories/33aafd18-7968-4600-8847-cc54191a81bb/nginx-ngx-http-core-module-vulnerability PlainSec en 2026-10-16T13:00:27Z NGINX patches five config-gated flaws https://plainsec.com/it/stories/33aafd18-7968-4600-8847-cc54191a81bb/nginx-ngx-http-core-module-vulnerability PlainSec it 2026-10-16T13:00:27Z Config rare, rischio reale: NGINX corregge cinque flaw https://plainsec.com/stories/518b0dba-cc2c-45f4-8e51-a7bb66f1a90e/xoscar-deserialization-flaw-opens-xinference-clusters PlainSec en 2026-10-16T02:42:16Z Xoscar deserialization flaw opens Xinference clusters https://plainsec.com/it/stories/518b0dba-cc2c-45f4-8e51-a7bb66f1a90e/xoscar-deserialization-flaw-opens-xinference-clusters PlainSec it 2026-10-16T02:42:16Z Un port aperto in Xoscar basta a prendere il controllo del cluster https://plainsec.com/stories/9ab08efc-2b90-4a6c-b3b0-52ec69464c2e/uk-legal-aid-breach-reaches-back-to-1978 PlainSec en 2026-10-15T13:11:18Z UK legal aid breach reaches back to 1978 https://plainsec.com/it/stories/9ab08efc-2b90-4a6c-b3b0-52ec69464c2e/uk-legal-aid-breach-reaches-back-to-1978 PlainSec it 2026-10-15T13:11:18Z Archivi legali rubati, l’esposizione dura decenni https://plainsec.com/stories/ee423166-eac9-41aa-b3b0-923c6bb1b828/wazuh-manager-config-check-gap-reaches-root PlainSec en 2026-10-16T13:00:27Z Wazuh Manager config check gap reaches root https://plainsec.com/it/stories/ee423166-eac9-41aa-b3b0-923c6bb1b828/wazuh-manager-config-check-gap-reaches-root PlainSec it 2026-10-16T13:00:27Z Wazuh Manager trasforma un permesso config in root https://plainsec.com/stories/a00f9f94-6892-4f62-a0d2-b85b4ce15f35/kwetsbaarheden-verholpen-in-ibm-guardium-data-protection PlainSec en 2026-10-16T13:00:27Z IBM Guardium patch closes parser-facing attack paths https://plainsec.com/it/stories/a00f9f94-6892-4f62-a0d2-b85b4ce15f35/kwetsbaarheden-verholpen-in-ibm-guardium-data-protection PlainSec it 2026-10-16T13:00:27Z Guardium espone il piano dati con dieci falle critiche https://plainsec.com/stories/060205db-12b4-4e48-90b5-82afaf135601/fake-aur-helpers-hand-attackers-root-on-arch PlainSec en 2026-10-16T10:51:02Z Fake AUR helpers turn typos into root access https://plainsec.com/it/stories/060205db-12b4-4e48-90b5-82afaf135601/fake-aur-helpers-hand-attackers-root-on-arch PlainSec it 2026-10-16T10:51:02Z Un typo in AUR può dare root sull’intera macchina https://plainsec.com/stories/3c92ddb0-8610-4acb-8a5b-8b6e79de2355/atlassian-file-read-flaw-hits-internet-facing-servers PlainSec en 2026-10-16T04:37:15Z Atlassian file read flaw hits internet-facing servers https://plainsec.com/it/stories/3c92ddb0-8610-4acb-8a5b-8b6e79de2355/atlassian-file-read-flaw-hits-internet-facing-servers PlainSec it 2026-10-16T04:37:15Z Un file letto senza login basta a esporre Atlassian https://plainsec.com/stories/f0b225f7-8121-44d3-bc36-0e5628a66b74/booz-allen-test-shows-ai-can-outrun-ot-defenses PlainSec en 2026-10-14T23:04:57Z Booz Allen test shows AI can outrun OT defenses https://plainsec.com/it/stories/f0b225f7-8121-44d3-bc36-0e5628a66b74/booz-allen-test-shows-ai-can-outrun-ot-defenses PlainSec it 2026-10-14T23:04:57Z L’AI chiude la catena d’attacco OT in pochi minuti https://plainsec.com/stories/05eb277b-fdb7-401c-a924-131e2dc7f467/pan-os-authenticated-remote-code-execution-rce-in-the-management-interface PlainSec en 2026-10-15T14:33:33Z CISA fast-tracks exploited flaws in Palo Alto, Cisco, Ahsay https://plainsec.com/it/stories/05eb277b-fdb7-401c-a924-131e2dc7f467/pan-os-authenticated-remote-code-execution-rce-in-the-management-interface PlainSec it 2026-10-15T14:33:33Z CISA impone due giorni per chiudere tre falle critiche https://plainsec.com/stories/3761c6f3-c833-418b-9048-7e4119969911/d-link-dir-868l-hnap-cgi-cgibin-system-os-command-injection PlainSec en 2026-10-15T10:52:33Z D-Link DIR-868L PoC leaves EOL routers exposed https://plainsec.com/it/stories/3761c6f3-c833-418b-9048-7e4119969911/d-link-dir-868l-hnap-cgi-cgibin-system-os-command-injection PlainSec it 2026-10-15T10:52:33Z PoC pubblico rende irrecuperabili i DIR-868L esposti https://plainsec.com/stories/e284e64c-7891-4919-a376-13096e3d5296/ghostaction-turns-github-actions-into-a-secret-trap PlainSec en 2026-10-15T10:52:33Z GhostAction turns GitHub Actions into a secret trap https://plainsec.com/it/stories/e284e64c-7891-4919-a376-13096e3d5296/ghostaction-turns-github-actions-into-a-secret-trap PlainSec it 2026-10-15T10:52:33Z 30.000 repo GitHub sotto attacco via GitHub Actions https://plainsec.com/stories/ab0b8ffd-87fb-4969-83fe-99619dc4287f/wiz-says-scanner-output-needs-runtime-context PlainSec en 2026-10-15T01:03:05Z Wiz says scanner output needs runtime context https://plainsec.com/it/stories/ab0b8ffd-87fb-4969-83fe-99619dc4287f/wiz-says-scanner-output-needs-runtime-context PlainSec it 2026-10-15T01:03:05Z Scanner AppSec pieni di rumore, non di priorità https://plainsec.com/stories/0edc4375-b48c-4755-a60d-ece2744ec2ab/mps-officers-used-auror-without-privacy-checks PlainSec en 2026-10-15T08:35:46Z MPS officers used Auror without privacy checks https://plainsec.com/it/stories/0edc4375-b48c-4755-a60d-ece2744ec2ab/mps-officers-used-auror-without-privacy-checks PlainSec it 2026-10-15T08:35:46Z Una piattaforma esterna ha aggirato i controlli della Met Police https://plainsec.com/stories/db5365a2-cbd1-4c42-b7c5-8357b1747874/picus-says-agentic-pentests-miss-exposed-services PlainSec en 2026-10-15T01:03:05Z Picus says agentic pentests miss exposed services https://plainsec.com/it/stories/db5365a2-cbd1-4c42-b7c5-8357b1747874/picus-says-agentic-pentests-miss-exposed-services PlainSec it 2026-10-15T01:03:05Z L’agentic pentesting accelera, ma lascia buchi di copertura https://plainsec.com/stories/9dd8775c-c752-4408-99b0-6138cf6dd53d/curl-upload-flaw-can-let-servers-corrupt-clients PlainSec en 2026-10-14T19:31:57Z curl upload flaw can let servers corrupt clients https://plainsec.com/it/stories/9dd8775c-c752-4408-99b0-6138cf6dd53d/curl-upload-flaw-can-let-servers-corrupt-clients PlainSec it 2026-10-14T19:31:57Z Un upload HTTP/2 può trasformare curl in un punto di esecuzione