https://plainsec.com/stories/0ab8a608-09b2-482a-a1ea-160dc881774f/phps-critical-flaws-may-reach-forgotten-applications PlainSec en 2026-10-21T04:51:13Z PHP2Shell probes surge as vendors assess embedded runtimes https://plainsec.com/it/stories/0ab8a608-09b2-482a-a1ea-160dc881774f/phps-critical-flaws-may-reach-forgotten-applications PlainSec it 2026-10-21T04:51:13Z La patch PHP non chiude il rischio nei runtime incorporati https://plainsec.com/stories/597c603e-8b13-41a1-ab0c-bf69407e62a0/litellm-mehrere-schwachstellen PlainSec en 2026-10-21T19:44:10Z LiteLLM malware steals credentials beyond the gateway https://plainsec.com/it/stories/597c603e-8b13-41a1-ab0c-bf69407e62a0/litellm-mehrere-schwachstellen PlainSec it 2026-10-21T19:44:10Z LiteLLM compromesso espone credenziali anche nei runner CI https://plainsec.com/stories/99351dc5-f252-46d2-8b73-78f3d6215986/safepay-s-600-victim-campaign-spans-credentials-and-vulnerabilities PlainSec en 2026-10-20T22:56:14Z SafePay’s credential and Cisco flaws widen access paths https://plainsec.com/it/stories/99351dc5-f252-46d2-8b73-78f3d6215986/safepay-s-600-victim-campaign-spans-credentials-and-vulnerabilities PlainSec it 2026-10-20T22:56:14Z La patch per Cisco non chiude l’accesso a SafePay https://plainsec.com/stories/b98de3d0-f23c-405a-9a8c-41bef5c3beb3/storm-0940-used-connectwise-access-to-enter-microsoft-365-tenants PlainSec en 2026-10-22T02:51:06Z Storm-0940 used trusted ConnectWise apps to reach Microsoft 365 https://plainsec.com/it/stories/b98de3d0-f23c-405a-9a8c-41bef5c3beb3/storm-0940-used-connectwise-access-to-enter-microsoft-365-tenants PlainSec it 2026-10-22T02:51:06Z Storm-0940 ha puntato oltre 2.250 tenant Microsoft 365 tramite app fidate https://plainsec.com/stories/a11104e6-0097-487e-ba22-9b6a133a84b7/emudhra-keys-compromised-triggering-browser-and-go-blocks PlainSec en 2026-10-20T22:56:14Z eMudhra trust cleanup faces confirmed key forgery https://plainsec.com/it/stories/a11104e6-0097-487e-ba22-9b6a133a84b7/emudhra-keys-compromised-triggering-browser-and-go-blocks PlainSec it 2026-10-20T22:56:14Z Le chiavi eMudhra sono recuperabili: i client restano esposti https://plainsec.com/stories/90f62ba1-ba31-4d93-844d-0b880f5fa302/openai-agents-weakened-monitoring-during-routine-coding-tasks PlainSec en 2026-10-22T02:51:06Z OpenAI agents weakened monitoring beyond their own sessions https://plainsec.com/it/stories/90f62ba1-ba31-4d93-844d-0b880f5fa302/openai-agents-weakened-monitoring-during-routine-coding-tasks PlainSec it 2026-10-22T02:51:06Z Il monitor resta sull’agente, ma può mancare sul software che lancia https://plainsec.com/stories/04c6e390-322b-455a-a5ee-e9dcab65c184/apt28-steals-credentials-and-tunnels-into-naval-shipbuilder PlainSec en 2026-10-20T14:59:53Z APT28’s shipbuilder intrusion widens into a two-month campaign https://plainsec.com/it/stories/04c6e390-322b-455a-a5ee-e9dcab65c184/apt28-steals-credentials-and-tunnels-into-naval-shipbuilder PlainSec it 2026-10-20T14:59:53Z APT28 allarga lo spionaggio dal cantiere navale agli obiettivi europei https://plainsec.com/stories/155c05b8-0c6f-48dd-a10e-38ce2da40ee1/bluehammer-can-turn-windows-user-access-into-system PlainSec en 2026-10-21T19:44:10Z BlueHammer can turn Windows user access into SYSTEM https://plainsec.com/it/stories/155c05b8-0c6f-48dd-a10e-38ce2da40ee1/bluehammer-can-turn-windows-user-access-into-system PlainSec it 2026-10-21T19:44:10Z La versione vulnerabile non dice se BlueHammer sia sfruttabile https://plainsec.com/stories/235cb5a7-402d-4e14-80c3-2a61837e23ee/stolen-updraftcentral-keys-backdoor-connected-wordpress-sites PlainSec en 2026-10-22T04:29:59Z Stolen UpdraftCentral keys backdoor connected WordPress sites https://plainsec.com/it/stories/235cb5a7-402d-4e14-80c3-2a61837e23ee/stolen-updraftcentral-keys-backdoor-connected-wordpress-sites PlainSec it 2026-10-22T04:29:59Z Le chiavi rubate danno accesso amministrativo ai siti WordPress https://plainsec.com/stories/6553d863-3791-45df-a3d4-26d928f53acc/apt41s-blackx-bootkit-keeps-baton-drop-in-play PlainSec en 2026-10-22T11:05:02Z APT41's BlackX bootkit keeps Baton Drop in play https://plainsec.com/it/stories/6553d863-3791-45df-a3d4-26d928f53acc/apt41s-blackx-bootkit-keeps-baton-drop-in-play PlainSec it 2026-10-22T11:05:02Z La bonifica del sistema operativo può lasciare intatto il bootkit UEFI https://plainsec.com/stories/a29aa9ac-a756-44fd-80ff-5579493b72ca/oracle-java-sandboxing-may-not-contain-critical-jsse-flaw PlainSec en 2026-10-22T11:05:02Z Oracle Java sandboxing may not contain critical JSSE flaw https://plainsec.com/it/stories/a29aa9ac-a756-44fd-80ff-5579493b72ca/oracle-java-sandboxing-may-not-contain-critical-jsse-flaw PlainSec it 2026-10-22T11:05:02Z La sandbox Java non garantisce isolamento dalla falla JSSE https://plainsec.com/stories/8ee51990-80e6-4b80-bdee-e6d4b9f4130f/splunk-enterprise-and-soar-flaws-expose-data-and-bypass-controls PlainSec en 2026-10-22T11:05:02Z Splunk Enterprise and SOAR flaws expose data and bypass controls https://plainsec.com/it/stories/8ee51990-80e6-4b80-bdee-e6d4b9f4130f/splunk-enterprise-and-soar-flaws-expose-data-and-bypass-controls PlainSec it 2026-10-22T11:05:02Z Dati sensibili e controlli d’accesso a rischio su Splunk https://plainsec.com/stories/c8515f70-0441-49c9-9e47-3fec2dfa7d90/signal-call-bug-can-leave-microphone-and-camera-active PlainSec en 2026-10-22T11:05:02Z Signal call bug can leave microphone and camera active https://plainsec.com/it/stories/c8515f70-0441-49c9-9e47-3fec2dfa7d90/signal-call-bug-can-leave-microphone-and-camera-active PlainSec it 2026-10-22T11:05:02Z Chiudere una chiamata Signal potrebbe non fermare microfono e videocamera https://plainsec.com/stories/e8b59f67-d9b3-42f4-b2a7-07ea64dea52b/cyber-partisans-hid-vasilek-in-vmware-tools-for-two-years PlainSec en 2026-10-21T13:24:37Z Cyber Partisans hid Vasilek in VMware Tools for two years https://plainsec.com/it/stories/e8b59f67-d9b3-42f4-b2a7-07ea64dea52b/cyber-partisans-hid-vasilek-in-vmware-tools-for-two-years PlainSec it 2026-10-21T13:24:37Z Due anni di accesso silenzioso attraverso VMware Tools nella sanità russa https://plainsec.com/stories/f2b4a5a2-aea0-4cdb-89e2-be7aa73249bc/bsi-flags-75-vulnerabilities-across-six-atlassian-products PlainSec en 2026-10-21T17:22:04Z Oracle Java fixes span exposed APIs and sandbox crashes https://plainsec.com/it/stories/f2b4a5a2-aea0-4cdb-89e2-be7aa73249bc/bsi-flags-75-vulnerabilities-across-six-atlassian-products PlainSec it 2026-10-21T17:22:04Z Le falle Java mettono a rischio API esposte e sandbox https://plainsec.com/stories/f93b2bec-83cb-4f17-81de-fb9cb980514b/risolte-vulnerabilit-in-google-chrome PlainSec en 2026-10-21T21:00:53Z Chrome 156 closes 353 flaws across desktop browsers https://plainsec.com/it/stories/f93b2bec-83cb-4f17-81de-fb9cb980514b/risolte-vulnerabilit-in-google-chrome PlainSec it 2026-10-21T21:00:53Z Chrome 156 chiude 353 falle, senza sfruttamenti segnalati https://plainsec.com/stories/c44cf8db-1276-416e-987a-38126afa1f91/aomei-update-servers-fed-shinyroad-to-checking-hosts PlainSec en 2026-10-20T19:05:58Z AOMEI update tampering leaves infected clients uncounted https://plainsec.com/it/stories/c44cf8db-1276-416e-987a-38126afa1f91/aomei-update-servers-fed-shinyroad-to-checking-hosts PlainSec it 2026-10-20T19:05:58Z La pulizia dei server AOMEI non rivela chi ha ricevuto malware https://plainsec.com/stories/df9e258a-52ad-41a8-b4eb-cd25ed57dc2d/cairn-s-exposed-dashboards-became-footholds-for-website-attacks PlainSec en 2026-10-20T19:05:58Z Cairn’s exposed dashboards became footholds for website attacks https://plainsec.com/it/stories/df9e258a-52ad-41a8-b4eb-cd25ed57dc2d/cairn-s-exposed-dashboards-became-footholds-for-website-attacks PlainSec it 2026-10-20T19:05:58Z I pannelli di Cairn diventano basi operative per intrusioni persistenti https://plainsec.com/stories/db2b3896-f892-4652-9756-74c76c16f25a/nikkei-s-third-breach-disclosure-exposes-1-83-million-records PlainSec en 2026-10-20T14:59:53Z Nikkei’s compromised logins expose 1.83 million records https://plainsec.com/it/stories/db2b3896-f892-4652-9756-74c76c16f25a/nikkei-s-third-breach-disclosure-exposes-1-83-million-records PlainSec it 2026-10-20T14:59:53Z Credenziali già sottratte aprono a Nikkei l’accesso a 1,83 milioni di record https://plainsec.com/stories/3b9e996e-6dd4-4fa6-b0d6-0bdf22da7d51/hitachi-energy-rtu500-product PlainSec en 2026-10-20T20:27:06Z Hitachi Energy RTU500 fixes vary by firmware branch https://plainsec.com/it/stories/3b9e996e-6dd4-4fa6-b0d6-0bdf22da7d51/hitachi-energy-rtu500-product PlainSec it 2026-10-20T20:27:06Z Cinque rami firmware rendono insufficiente un aggiornamento uniforme https://plainsec.com/stories/38eebb3f-ede1-4fa0-b526-c688f263e61e/go-rebuilds-can-strand-services-behind-blocked-ca-keys PlainSec en 2026-10-20T14:59:53Z Go rebuilds can strand services behind blocked CA keys https://plainsec.com/it/stories/38eebb3f-ede1-4fa0-b526-c688f263e61e/go-rebuilds-can-strand-services-behind-blocked-ca-keys PlainSec it 2026-10-20T14:59:53Z Ricompilare con Go può interrompere connessioni TLS https://plainsec.com/stories/b0193a74-f4e6-468c-8926-45b762c5001e/lazarus-routes-malware-through-south-korea-s-crossweb-ex PlainSec en 2026-10-21T04:51:13Z Lazarus routes malware through South Korea’s CrossWeb EX https://plainsec.com/it/stories/b0193a74-f4e6-468c-8926-45b762c5001e/lazarus-routes-malware-through-south-korea-s-crossweb-ex PlainSec it 2026-10-21T04:51:13Z Il software bancario obbligatorio diventa una via per Lazarus https://plainsec.com/stories/ab76d5c7-b538-4a76-99fc-e83cd4773d1a/fortisiem-poc-turns-file-overwrite-into-code-execution PlainSec en 2026-10-20T19:05:58Z FortiSIEM PoC turns file overwrite into code execution https://plainsec.com/it/stories/ab76d5c7-b538-4a76-99fc-e83cd4773d1a/fortisiem-poc-turns-file-overwrite-into-code-execution PlainSec it 2026-10-20T19:05:58Z Una routine di FortiSIEM può trasformare una scrittura in RCE https://plainsec.com/stories/e90ad5a7-5b65-44ed-beb6-84a69a35581a/bullhorn-outage-cuts-access-to-staffing-platform PlainSec en 2026-10-20T14:59:53Z Bullhorn outage cuts access to staffing platform https://plainsec.com/it/stories/e90ad5a7-5b65-44ed-beb6-84a69a35581a/bullhorn-outage-cuts-access-to-staffing-platform PlainSec it 2026-10-20T14:59:53Z Un attacco informatico lascia offline la piattaforma Bullhorn https://plainsec.com/stories/076535f7-c896-4225-ae25-8fb0ab637f7b/gcp-billing-links-hide-attackers-ai-workloads PlainSec en 2026-10-21T13:24:37Z GCP billing links hide attackers’ AI workloads https://plainsec.com/it/stories/076535f7-c896-4225-ae25-8fb0ab637f7b/gcp-billing-links-hide-attackers-ai-workloads PlainSec it 2026-10-21T13:24:37Z Il conto degli LLM arriva da progetti GCP invisibili https://plainsec.com/stories/cd2a3a5b-2a72-4846-ad91-9beb61e69554/openai-insider-case-ties-executive-room-searches-to-saudi-recruiting PlainSec en 2026-10-20T14:59:53Z OpenAI insider case adds Saudi recruitment claims https://plainsec.com/it/stories/cd2a3a5b-2a72-4846-ad91-9beb61e69554/openai-insider-case-ties-executive-room-searches-to-saudi-recruiting PlainSec it 2026-10-20T14:59:53Z Lo spionaggio in OpenAI unisce accesso fisico e reclutamento saudita