https://plainsec.com/stories/04e4e0ec-bf4f-4d65-b297-33f3aee32886/alpine-ssh-flaw-lets-attackers-into-passwordless-accounts PlainSec en 2026-11-05T22:27:10Z OpenSSH flaw reaches root before daemon restart https://plainsec.com/it/stories/04e4e0ec-bf4f-4d65-b297-33f3aee32886/alpine-ssh-flaw-lets-attackers-into-passwordless-accounts PlainSec it 2026-11-05T22:27:10Z Root ottenuto su Alpine: installare la patch non basta https://plainsec.com/stories/41153bb4-f62b-4a61-94f1-331b20b7e903/plex2shell-puts-qnap-nas-storage-at-risk PlainSec en 2026-11-06T18:32:14Z Plex2Shell puts QNAP NAS storage at risk https://plainsec.com/it/stories/41153bb4-f62b-4a61-94f1-331b20b7e903/plex2shell-puts-qnap-nas-storage-at-risk PlainSec it 2026-11-06T18:32:14Z Una falla di Plex mette a rischio l’archivio del NAS https://plainsec.com/stories/f341b0ca-6c80-4b6b-a335-b25d1fac611b/cooling-system-attacks-put-food-and-blood-supplies-at-risk PlainSec en 2026-11-06T00:22:49Z Cooling-system attacks put food and blood supplies at risk https://plainsec.com/it/stories/f341b0ca-6c80-4b6b-a335-b25d1fac611b/cooling-system-attacks-put-food-and-blood-supplies-at-risk PlainSec it 2026-11-06T00:22:49Z Un accesso remoto può trasformare i frigoriferi in un rischio fisico https://plainsec.com/stories/2d650e4e-3dff-4f25-a7fd-b3a93d3cbb40/storm-2603s-sharepoint-foothold-hid-in-iis-memory PlainSec en 2026-11-05T14:28:50Z Storm-2603's SharePoint foothold hid in IIS memory https://plainsec.com/it/stories/2d650e4e-3dff-4f25-a7fd-b3a93d3cbb40/storm-2603s-sharepoint-foothold-hid-in-iis-memory PlainSec it 2026-11-05T14:28:50Z Il controllo su SharePoint resta nascosto nella memoria del server https://plainsec.com/stories/f8f30896-3f5a-4a04-af06-bd57eac13e16/zyxel-switch-schwachstelle-erm-glicht-codeausf-hrung PlainSec en 2026-11-05T04:21:35Z Zyxel GS1900 Patch 2 missed the exploited flaw https://plainsec.com/it/stories/f8f30896-3f5a-4a04-af06-bd57eac13e16/zyxel-switch-schwachstelle-erm-glicht-codeausf-hrung PlainSec it 2026-11-05T04:21:35Z La Patch 2 Zyxel lasciava aperto l’exploit sui GS1900 https://plainsec.com/stories/e4a08975-e167-4e24-81f7-4d5315d92881/trojanized-cwp-server-spreads-a-linux-backdoor PlainSec en 2026-11-06T06:22:41Z Trojanized CWP server spreads a Linux backdoor https://plainsec.com/it/stories/e4a08975-e167-4e24-81f7-4d5315d92881/trojanized-cwp-server-spreads-a-linux-backdoor PlainSec it 2026-11-06T06:22:41Z Il backdoor arriva dal server, anche senza pannello esposto https://plainsec.com/stories/24c3e2cc-b145-4f1f-9f14-2928c60759d5/chatgpt-previews-opened-a-route-to-data-theft-and-phishing PlainSec en 2026-11-05T18:34:48Z ChatGPT previews opened a route to data theft and phishing https://plainsec.com/it/stories/24c3e2cc-b145-4f1f-9f14-2928c60759d5/chatgpt-previews-opened-a-route-to-data-theft-and-phishing PlainSec it 2026-11-05T18:34:48Z Un’anteprima HTML aggira Lockdown Mode e apre la porta al phishing https://plainsec.com/stories/abc68e62-d789-402b-88b5-7cb70a7cc5a7/vapor-panda-coordinated-parallel-intrusions-across-14-countries PlainSec en 2026-11-05T14:28:50Z VAPOR PANDA coordinated parallel intrusions across 14 countries https://plainsec.com/it/stories/abc68e62-d789-402b-88b5-7cb70a7cc5a7/vapor-panda-coordinated-parallel-intrusions-across-14-countries PlainSec it 2026-11-05T14:28:50Z Un solo controller, intrusioni in 14 paesi e nove compromissioni confermate https://plainsec.com/stories/7962f24c-b787-4038-abbd-ec8c93f6aeb4/digicert-migration-exposed-customer-records-and-identity-documents PlainSec en 2026-11-06T16:31:53Z DigiCert migration exposed customer records and identity documents https://plainsec.com/it/stories/7962f24c-b787-4038-abbd-ec8c93f6aeb4/digicert-migration-exposed-customer-records-and-identity-documents PlainSec it 2026-11-06T16:31:53Z I dati dei clienti esposti, non le chiavi di DigiCert https://plainsec.com/stories/5b47b0e6-b2e6-4205-820a-821428aeb0d0/fortinet-exploit-adds-13-payloads-for-account-creation-and-persistence PlainSec en 2026-11-05T14:28:50Z Fortinet exploit adds 13 payloads for account creation and persistence https://plainsec.com/it/stories/5b47b0e6-b2e6-4205-820a-821428aeb0d0/fortinet-exploit-adds-13-payloads-for-account-creation-and-persistence PlainSec it 2026-11-05T14:28:50Z Il PoC per FortiOS ora prepara anche la persistenza https://plainsec.com/stories/8d5bbad6-56ba-4aa4-bd96-63d28a709f4a/gpt-6-astra-quietly-underperformed-on-safety-research-tasks PlainSec en 2026-11-06T04:23:06Z GPT-6 Cyber’s bug haul meets Astra’s silent restraint https://plainsec.com/it/stories/8d5bbad6-56ba-4aa4-bd96-63d28a709f4a/gpt-6-astra-quietly-underperformed-on-safety-research-tasks PlainSec it 2026-11-06T04:23:06Z Le vulnerabilità arrivano più in fretta delle patch https://plainsec.com/stories/f83ea6cf-1e6b-49c3-b241-af978ae638cf/proxy-services-made-white-house-addresses-rentable PlainSec en 2026-11-05T22:27:10Z InfaticaSDK proxy exits blur White House traffic attribution https://plainsec.com/it/stories/f83ea6cf-1e6b-49c3-b241-af978ae638cf/proxy-services-made-white-house-addresses-rentable PlainSec it 2026-11-05T22:27:10Z Il traffico di estranei sembra provenire dalla rete della Casa Bianca https://plainsec.com/stories/eb6eb694-af15-49a0-8a59-251672f7b19f/artex-overlaps-with-self-hosted-ai-gateway-infrastructure PlainSec en 2026-11-06T18:32:14Z ARTEX overlaps with self-hosted AI gateway infrastructure https://plainsec.com/it/stories/eb6eb694-af15-49a0-8a59-251672f7b19f/artex-overlaps-with-self-hosted-ai-gateway-infrastructure PlainSec it 2026-11-06T18:32:14Z Report Censys: ARTEX compare accanto a gateway LLM https://plainsec.com/stories/0e0b12dd-eb54-432c-9d02-387d5c775008/strutil-core-release-targets-developer-credentials-and-ai-tools PlainSec en 2026-11-06T20:24:21Z strutil-core release targets developer credentials and AI tools https://plainsec.com/it/stories/0e0b12dd-eb54-432c-9d02-387d5c775008/strutil-core-release-targets-developer-credentials-and-ai-tools PlainSec it 2026-11-06T20:24:21Z Un pacchetto Ruby mirava a credenziali e assistenti AI https://plainsec.com/stories/0fafe9ea-7dda-48ea-accd-383f7c646294/kwetsbaarheid-verholpen-in-windows-paint-van-microsoft PlainSec en 2026-11-06T18:32:14Z Paint’s Store-only fix leaves patch checks uncertain https://plainsec.com/it/stories/0fafe9ea-7dda-48ea-accd-383f7c646294/kwetsbaarheid-verholpen-in-windows-paint-van-microsoft PlainSec it 2026-11-06T18:32:14Z La correzione di Paint sfugge ai controlli di Windows Update https://plainsec.com/stories/beee738b-6bc3-43f2-ac0f-bf50fadf4243/fbi-and-cisa-warn-refrigeration-attacks-could-threaten-food-safety PlainSec en 2026-11-06T10:23:14Z FBI and CISA warn refrigeration attacks could threaten food safety https://plainsec.com/it/stories/beee738b-6bc3-43f2-ac0f-bf50fadf4243/fbi-and-cisa-warn-refrigeration-attacks-could-threaten-food-safety PlainSec it 2026-11-06T10:23:14Z La refrigerazione industriale diventa un rischio per la sicurezza fisica https://plainsec.com/stories/8581bf0d-257e-4bc2-92d4-dc95b87953c5/crafty-falcon-targets-finance-as-artex-backdoor-exposes-consoles PlainSec en 2026-11-05T12:39:27Z Crafty Falcon targets finance as ARTEX backdoor exposes consoles https://plainsec.com/it/stories/8581bf0d-257e-4bc2-92d4-dc95b87953c5/crafty-falcon-targets-finance-as-artex-backdoor-exposes-consoles PlainSec it 2026-11-05T12:39:27Z Attacchi alla finanza indiana e 62 console ARTEX esposte a root https://plainsec.com/stories/8ddda1c3-d541-46ef-b5ee-210b742f1484/ghostmap-can-crash-pixel-10-before-an-app-runs PlainSec en 2026-11-05T14:28:50Z GhostMap can crash Pixel 10 before an app runs https://plainsec.com/it/stories/8ddda1c3-d541-46ef-b5ee-210b742f1484/ghostmap-can-crash-pixel-10-before-an-app-runs PlainSec it 2026-11-05T14:28:50Z Un APK installato può mandare il Pixel 10 in crash loop https://plainsec.com/stories/c43b6372-4b93-45f3-8fde-f977055730d2/norad-breach-leaves-high-risk-users-exposure-uncertain PlainSec en 2026-11-05T14:28:50Z Norad breach leaves high-risk users' exposure uncertain https://plainsec.com/it/stories/c43b6372-4b93-45f3-8fde-f977055730d2/norad-breach-leaves-high-risk-users-exposure-uncertain PlainSec it 2026-11-05T14:28:50Z Norad non sa se il furto espone persone in aree di conflitto https://plainsec.com/stories/e3dbd0be-dcfc-43c0-bf13-480cfc44beb8/rootevidence-scanner-probes-an-older-cisco-ios-flaw PlainSec en 2026-11-06T04:23:06Z RootEvidence scanner probes an older Cisco IOS flaw https://plainsec.com/it/stories/e3dbd0be-dcfc-43c0-bf13-480cfc44beb8/rootevidence-scanner-probes-an-older-cisco-ios-flaw PlainSec it 2026-11-06T04:23:06Z Una richiesta a Cisco IOS non prova una compromissione https://plainsec.com/stories/2956859a-4cc8-4a66-9d66-ee57e936e8d4/rails-upload-flaw-can-expose-secrets-beyond-the-server PlainSec en 2026-11-05T02:23:02Z Rails upload flaw can expose secrets beyond the server https://plainsec.com/it/stories/2956859a-4cc8-4a66-9d66-ee57e936e8d4/rails-upload-flaw-can-expose-secrets-beyond-the-server PlainSec it 2026-11-05T02:23:02Z Un upload anonimo può esporre i segreti delle app Rails https://plainsec.com/stories/9a6839c9-79d6-4eb5-a505-c64e366249a6/google-calendar-lures-steal-sessions-despite-mfa PlainSec en 2026-11-05T04:21:35Z Google Calendar lures steal sessions despite MFA https://plainsec.com/it/stories/9a6839c9-79d6-4eb5-a505-c64e366249a6/google-calendar-lures-steal-sessions-despite-mfa PlainSec it 2026-11-05T04:21:35Z L’MFA approvata non ferma il furto delle sessioni Google https://plainsec.com/stories/7472237f-449f-4a76-be7c-d20632946954/apt-retries-can-turn-downloads-into-root-access PlainSec en 2026-11-05T10:25:08Z APT retries can turn downloads into root access https://plainsec.com/it/stories/7472237f-449f-4a76-be7c-d20632946954/apt-retries-can-turn-downloads-into-root-access PlainSec it 2026-11-05T10:25:08Z Il retry di APT può consegnare privilegi root a un pacchetto falso https://plainsec.com/stories/c8f9bbe5-3f1e-4f10-97cf-8637520df8b1/crowdstrike-puts-falcon-inside-cowork-s-execution-blind-spot PlainSec en 2026-11-05T00:24:20Z CrowdStrike pairs AI testing with Falcon agent monitoring https://plainsec.com/it/stories/c8f9bbe5-3f1e-4f10-97cf-8637520df8b1/crowdstrike-puts-falcon-inside-cowork-s-execution-blind-spot PlainSec it 2026-11-05T00:24:20Z Falcon punta a seguire gli agenti AI dal test all’esercizio https://plainsec.com/stories/c8e527d6-8285-4db8-aef8-0ef3a1c43436/dreamhost-breach-reaches-beyond-hosted-files PlainSec en 2026-11-04T22:28:29Z DreamHost breach reaches beyond hosted files https://plainsec.com/it/stories/c8e527d6-8285-4db8-aef8-0ef3a1c43436/dreamhost-breach-reaches-beyond-hosted-files PlainSec it 2026-11-04T22:28:29Z Le credenziali rubate a DreamHost valgono oltre il File Manager