https://plainsec.com/stories/3de74f1b-37c0-4c9f-8ff2-ed7c9d0af181/poellm-hides-its-c2-in-github-poetry PlainSec en 2026-10-07T19:01:58Z PoeLLM turns exposed AI servers into scouts https://plainsec.com/it/stories/3de74f1b-37c0-4c9f-8ff2-ed7c9d0af181/poellm-hides-its-c2-in-github-poetry PlainSec it 2026-10-07T19:01:58Z I gateway AI infetti diventano anche scanner offensivi https://plainsec.com/stories/cb2da9ce-7bfa-4ddb-be42-bd1cc380c923/fortinet-fortimail-path-traversal-is-actively-exploited PlainSec en 2026-10-08T10:38:09Z Fortinet FortiMail path traversal is actively exploited https://plainsec.com/it/stories/cb2da9ce-7bfa-4ddb-be42-bd1cc380c923/fortinet-fortimail-path-traversal-is-actively-exploited PlainSec it 2026-10-08T10:38:09Z FortiMail espone il gateway mail con uno zero-day attivo https://plainsec.com/stories/e334c599-5406-4fb6-87eb-f1aa858658e8/tensorlake-npm-release-carried-a-self-spreading-worm PlainSec en 2026-10-08T08:34:54Z Tensorlake npm worm steals cloud secrets https://plainsec.com/it/stories/e334c599-5406-4fb6-87eb-f1aa858658e8/tensorlake-npm-release-carried-a-self-spreading-worm PlainSec it 2026-10-08T08:34:54Z Shai-Hulud passa dai pacchetti ai segreti di CI e Vault https://plainsec.com/stories/29c27f06-1e36-48da-84ee-727451c72de1/cisco-splits-apic-and-meraki-fixes-across-the-stack PlainSec en 2026-10-07T19:01:58Z Cisco broadens fleet-management patch list https://plainsec.com/it/stories/29c27f06-1e36-48da-84ee-727451c72de1/cisco-splits-apic-and-meraki-fixes-across-the-stack PlainSec it 2026-10-07T19:01:58Z Bug di gestione Cisco allargano l’esposizione di rete https://plainsec.com/stories/4f9a1776-a93d-4e7d-ba9a-d20cbe417da6/fortibleed-locks-out-fortinet-defenders PlainSec en 2026-10-07T14:48:57Z FortiBleed shifts into firewall lockout https://plainsec.com/it/stories/4f9a1776-a93d-4e7d-ba9a-d20cbe417da6/fortibleed-locks-out-fortinet-defenders PlainSec it 2026-10-07T14:48:57Z FortiBleed trasforma le credenziali in lockout del firewall https://plainsec.com/stories/591189e2-3edf-418a-aef3-524721729fbc/u-s-puts-10-million-on-hafnium-figure PlainSec en 2026-10-08T16:50:53Z U.S. puts a $10 million bounty on Zhang Yu https://plainsec.com/it/stories/591189e2-3edf-418a-aef3-524721729fbc/u-s-puts-10-million-on-hafnium-figure PlainSec it 2026-10-08T16:50:53Z Washington intensifica la caccia a Zhang Yu https://plainsec.com/stories/668551ad-ae5a-46d8-95b7-0984bc8f0a19/asos-app-alert-turned-extortion-channel PlainSec en 2026-10-06T21:11:26Z ASOS breach turned customer alerts into pressure https://plainsec.com/it/stories/668551ad-ae5a-46d8-95b7-0984bc8f0a19/asos-app-alert-turned-extortion-channel PlainSec it 2026-10-06T21:11:26Z ASOS conferma che il breach è passato dal canale clienti https://plainsec.com/stories/692fad1d-27cf-4dec-b454-ac709a0dd725/16-firefox-extensions-impersonate-wallets-to-steal-seeds PlainSec en 2026-10-08T10:38:09Z 16 Firefox Extensions Impersonate Wallets to Steal Seeds https://plainsec.com/it/stories/692fad1d-27cf-4dec-b454-ac709a0dd725/16-firefox-extensions-impersonate-wallets-to-steal-seeds PlainSec it 2026-10-08T10:38:09Z Sedici estensioni Firefox clonano wallet e rubano seed phrase https://plainsec.com/stories/51f392f1-ad6c-4ce1-9ebe-87d6c08f68b8/uac-0099-keeps-matchboil-alive-in-ukraine PlainSec en 2026-10-08T14:44:18Z UAC-0099 keeps MATCHBOIL alive in Ukraine https://plainsec.com/it/stories/51f392f1-ad6c-4ce1-9ebe-87d6c08f68b8/uac-0099-keeps-matchboil-alive-in-ukraine PlainSec it 2026-10-08T14:44:18Z UAC-0099 rende più difficile smontare MATCHBOIL https://plainsec.com/stories/634e8ff1-7652-44f6-bdbb-cc394b6801fe/splunk-patch-advisory-hinges-on-the-right-branch PlainSec en 2026-10-08T12:22:39Z Splunk patch advisory hinges on the right branch https://plainsec.com/it/stories/634e8ff1-7652-44f6-bdbb-cc394b6801fe/splunk-patch-advisory-hinges-on-the-right-branch PlainSec it 2026-10-08T12:22:39Z Aggiornare all’ultima major non basta per Splunk https://plainsec.com/stories/5e86adae-3e24-4e3d-b925-a485e61ae37f/lmcache-routable-cache-server-enables-remote-code-execution PlainSec en 2026-10-07T22:59:50Z LMCache Routable Cache Server Enables Remote Code Execution https://plainsec.com/it/stories/5e86adae-3e24-4e3d-b925-a485e61ae37f/lmcache-routable-cache-server-enables-remote-code-execution PlainSec it 2026-10-07T22:59:50Z LMCache espone l’LLM serving a RCE senza patch https://plainsec.com/stories/d2f6b172-7996-4ff8-b60d-5c365d321943/google-blocks-counterfeit-certificates-after-registry-breach PlainSec en 2026-10-07T13:07:27Z Registry Hijack Minted Valid Google Certificates https://plainsec.com/it/stories/d2f6b172-7996-4ff8-b60d-5c365d321943/google-blocks-counterfeit-certificates-after-registry-breach PlainSec it 2026-10-07T13:07:27Z La fiducia del browser è stata dirottata a monte https://plainsec.com/stories/c26cf471-2a71-4e93-a855-f21259e9c5a2/coalition-pushes-cisa-to-assign-ot-ownership PlainSec en 2026-10-07T13:07:27Z Coalition Pushes CISA to Assign OT Ownership https://plainsec.com/it/stories/c26cf471-2a71-4e93-a855-f21259e9c5a2/coalition-pushes-cisa-to-assign-ot-ownership PlainSec it 2026-10-07T13:07:27Z Cisa sotto pressione per colmare il vuoto sull’ot federale https://plainsec.com/stories/d302451d-e498-482c-88b8-237d7d9962ef/github-copilot-cli-leaks-secrets-through-encrypted-pages PlainSec en 2026-10-07T13:07:27Z GitHub Copilot CLI Leaks Secrets Through Encrypted Pages https://plainsec.com/it/stories/d302451d-e498-482c-88b8-237d7d9962ef/github-copilot-cli-leaks-secrets-through-encrypted-pages PlainSec it 2026-10-07T13:07:27Z Copilot CLI può trasformare una pagina web in furto di segreti https://plainsec.com/stories/868ee69d-c93b-4201-bcd2-1336210ed1b2/monstercloud-charged-over-fake-ransomware-recovery PlainSec en 2026-10-08T10:38:09Z MonsterCloud case turns into criminal fraud charges https://plainsec.com/it/stories/868ee69d-c93b-4201-bcd2-1336210ed1b2/monstercloud-charged-over-fake-ransomware-recovery PlainSec it 2026-10-08T10:38:09Z Il recupero ransomware finisce in frode da 19 milioni https://plainsec.com/stories/62ebef64-d379-4e72-b8cd-0e48ec62c6d4/jpcert-ties-japanese-leaks-to-metabase-sql-injection PlainSec en 2026-10-08T18:58:08Z JPCERT ties Japanese leaks to Metabase SQL injection https://plainsec.com/it/stories/62ebef64-d379-4e72-b8cd-0e48ec62c6d4/jpcert-ties-japanese-leaks-to-metabase-sql-injection PlainSec it 2026-10-08T18:58:08Z La falla in Metabase allarga il furto dai portali web al backend https://plainsec.com/stories/881e70a6-b1cf-4541-bda9-c03da75d29d1/arizona-courts-breach-exposed-protection-orders PlainSec en 2026-10-07T20:52:24Z Arizona Courts Breach Exposed Protection Orders https://plainsec.com/it/stories/881e70a6-b1cf-4541-bda9-c03da75d29d1/arizona-courts-breach-exposed-protection-orders PlainSec it 2026-10-07T20:52:24Z I record dei tribunali esposti oltre le semplici tasse arretrate https://plainsec.com/stories/963f93f2-a591-4b84-b66c-213660192e08/fake-brand-deals-steer-creators-into-google-account-theft PlainSec en 2026-10-08T16:50:53Z Fake brand deals steer creators into Google account theft https://plainsec.com/it/stories/963f93f2-a591-4b84-b66c-213660192e08/fake-brand-deals-steer-creators-into-google-account-theft PlainSec it 2026-10-08T16:50:53Z Brand deal finta, account Google sottratto ai creator https://plainsec.com/stories/f8170250-1a0c-4b34-8949-0d3944b37cec/sonicwall-sma1000-series-appliances-affected-by-multiple-vulnerabilities PlainSec en 2026-10-07T10:49:14Z SonicWall’s SMA1000 Fix Still Needs One More Step https://plainsec.com/it/stories/f8170250-1a0c-4b34-8949-0d3944b37cec/sonicwall-sma1000-series-appliances-affected-by-multiple-vulnerabilities PlainSec it 2026-10-07T10:49:14Z SonicWall SMA1000 richiede un secondo hotfix https://plainsec.com/stories/5ae62da1-328e-4883-b2ec-c913a72e4650/forescout-finds-pqc-bottleneck-in-medical-hardware PlainSec en 2026-10-06T21:11:26Z Forescout Finds PQC Bottleneck in Medical Hardware https://plainsec.com/it/stories/5ae62da1-328e-4883-b2ec-c913a72e4650/forescout-finds-pqc-bottleneck-in-medical-hardware PlainSec it 2026-10-06T21:11:26Z La migrazione PQC nelle strutture sanitarie dipende dall’hardware https://plainsec.com/stories/86cb38ca-398c-4a9c-8567-5a4f5a3f4163/pwn2own-ireland-opens-with-mobile-focus PlainSec en 2026-10-07T17:12:53Z Pwn2Own Day One Put AI Tools in Scope https://plainsec.com/it/stories/86cb38ca-398c-4a9c-8567-5a4f5a3f4163/pwn2own-ireland-opens-with-mobile-focus PlainSec it 2026-10-07T17:12:53Z Pwn2Own mostra che l’AI espone bug più pesanti https://plainsec.com/stories/9ac21280-7134-499a-8765-e4ac850ad81a/cve-2026-106197-google-chrome PlainSec en 2026-10-07T17:12:53Z Chrome 155 Patches Four Critical Memory Bugs https://plainsec.com/it/stories/9ac21280-7134-499a-8765-e4ac850ad81a/cve-2026-106197-google-chrome PlainSec it 2026-10-07T17:12:53Z Chrome chiude 247 falle, quattro sono critiche https://plainsec.com/stories/234f0bb1-bd09-4bba-b395-61c3f36f7bdc/x-org-patched-dozen-display-server-flaws PlainSec en 2026-10-08T10:38:09Z X.Org Patched Dozen Display-Server Flaws https://plainsec.com/it/stories/234f0bb1-bd09-4bba-b395-61c3f36f7bdc/x-org-patched-dozen-display-server-flaws PlainSec it 2026-10-08T10:38:09Z X.Org corregge 12 falle che espongono il display server https://plainsec.com/stories/62eacc39-8c66-4a4f-817d-a1419e7ad580/outlook-blocks-msix-installer-attachments PlainSec en 2026-10-07T19:01:58Z Microsoft Outlook Drops MSIX Email Delivery https://plainsec.com/it/stories/62eacc39-8c66-4a4f-817d-a1419e7ad580/outlook-blocks-msix-installer-attachments PlainSec it 2026-10-07T19:01:58Z Outlook blocca gli installer MSIX via email https://plainsec.com/stories/a8a78f7a-d407-424b-b395-5cedce59c074/ransomware-goes-after-the-recovery-path PlainSec en 2026-10-07T17:12:53Z Ransomware Goes After the Recovery Path https://plainsec.com/it/stories/a8a78f7a-d407-424b-b395-5cedce59c074/ransomware-goes-after-the-recovery-path PlainSec it 2026-10-07T17:12:53Z I backup sono il nuovo bersaglio del ransomware https://plainsec.com/stories/cb9ccec1-c319-4538-9fc1-167b6269c6cd/malfex-npm-packages-put-build-hosts-at-risk PlainSec en 2026-10-08T04:35:11Z MALFEX npm Packages Put Build Hosts at Risk https://plainsec.com/it/stories/cb9ccec1-c319-4538-9fc1-167b6269c6cd/malfex-npm-packages-put-build-hosts-at-risk PlainSec it 2026-10-08T04:35:11Z Pacchetti npm live infettano le macchine Windows di sviluppo https://plainsec.com/stories/f9853266-dd0d-4c5a-be77-9fe3ddf056cf/wordpress-plugin-xss-leaves-backdoors-behind PlainSec en 2026-10-07T00:31:07Z WordPress Plugin XSS Leaves Backdoors Behind https://plainsec.com/it/stories/f9853266-dd0d-4c5a-be77-9fe3ddf056cf/wordpress-plugin-xss-leaves-backdoors-behind PlainSec it 2026-10-07T00:31:07Z Lo stored XSS diventa accesso amministratore persistente su WordPress https://plainsec.com/stories/63f5118c-46d9-4cc8-b6df-9ae94486446b/crowdstrike-finds-a-blind-spot-in-llm-guards PlainSec en 2026-10-07T02:26:11Z CrowdStrike Finds a Blind Spot in LLM Guards https://plainsec.com/it/stories/63f5118c-46d9-4cc8-b6df-9ae94486446b/crowdstrike-finds-a-blind-spot-in-llm-guards PlainSec it 2026-10-07T02:26:11Z I filtri per request saltano quando i prompt si sommano https://plainsec.com/stories/ef3ef51e-f0d9-4c4f-9b08-32250f9eb0bf/fake-ai-sites-steal-ad-account-logins PlainSec en 2026-10-06T21:11:26Z Fake ChatGPT Sites Steal Ad Accounts https://plainsec.com/it/stories/ef3ef51e-f0d9-4c4f-9b08-32250f9eb0bf/fake-ai-sites-steal-ad-account-logins PlainSec it 2026-10-06T21:11:26Z Le frodi su ChatGPT e Gemini bucano la MFA degli account adv