https://plainsec.com/stories/61216e96-f24a-4f3a-8abf-1ffcf4c715e6/wordpress-upgrade-window-opens-a-path-to-server-code PlainSec en 2026-11-04T10:24:24Z WordPress upgrade window opens a path to server code https://plainsec.com/it/stories/61216e96-f24a-4f3a-8abf-1ffcf4c715e6/wordpress-upgrade-window-opens-a-path-to-server-code PlainSec it 2026-11-04T10:24:24Z La finestra d’aggiornamento espone WordPress a codice non autorizzato https://plainsec.com/stories/3f50741f-e066-4699-a7d6-7c0b4ca82213/apt29-used-analytics-code-to-reach-hundreds-of-sites PlainSec en 2026-11-04T16:30:46Z APT29 used analytics code to reach hundreds of sites https://plainsec.com/it/stories/3f50741f-e066-4699-a7d6-7c0b4ca82213/apt29-used-analytics-code-to-reach-hundreds-of-sites PlainSec it 2026-11-04T16:30:46Z Un fornitore compromesso porta exploit su centinaia di siti legittimi https://plainsec.com/stories/67d59d47-5f41-4a29-a9f4-882c6d487c6a/cpguard-update-hijack-left-linux-server-credentials-exposed PlainSec en 2026-11-03T18:31:50Z cPGuard update hijack left Linux server credentials exposed https://plainsec.com/it/stories/67d59d47-5f41-4a29-a9f4-882c6d487c6a/cpguard-update-hijack-left-linux-server-credentials-exposed PlainSec it 2026-11-03T18:31:50Z Il canale fidato di cPGuard ha portato una backdoor sui server Linux https://plainsec.com/stories/5cf1254a-9efa-4b70-9d0c-1a6dcd76b10f/cryptopayment-gateway-flaw-exposes-stored-wallet-keys PlainSec en 2026-11-03T06:25:17Z CryptoPayment Gateway flaw exposes stored wallet keys https://plainsec.com/it/stories/5cf1254a-9efa-4b70-9d0c-1a6dcd76b10f/cryptopayment-gateway-flaw-exposes-stored-wallet-keys PlainSec it 2026-11-03T06:25:17Z Le chiavi dei wallet restano esposte dopo la rimozione del plugin https://plainsec.com/stories/ec0d34af-1fb7-4d10-9bef-34ef08c2ab45/binance-theft-linked-homebrew-malware-to-fake-interviews PlainSec en 2026-11-04T14:37:56Z Binance attackers used engineer hiring to reach wallet signing https://plainsec.com/it/stories/ec0d34af-1fb7-4d10-9bef-34ef08c2ab45/binance-theft-linked-homebrew-malware-to-fake-interviews PlainSec it 2026-11-04T14:37:56Z La bonifica di un endpoint non fermò il furto dai wallet https://plainsec.com/stories/36769b02-f3b5-4468-97b9-0ebd85666797/videostrong-built-xcpe-into-set-top-boxes-for-profit PlainSec en 2026-11-02T22:26:40Z Videostrong’s XCPE backdoor gave affiliates Android box access https://plainsec.com/it/stories/36769b02-f3b5-4468-97b9-0ebd85666797/videostrong-built-xcpe-into-set-top-boxes-for-profit PlainSec it 2026-11-02T22:26:40Z Videostrong avrebbe venduto ai criminali l’accesso ai set-top box https://plainsec.com/stories/71670d6b-416f-498c-b5bb-f687d3901025/outdated-btcpay-server-instances-face-hot-wallet-theft PlainSec en 2026-11-03T10:29:03Z Outdated BTCPay Server instances face hot-wallet theft https://plainsec.com/it/stories/71670d6b-416f-498c-b5bb-f687d3901025/outdated-btcpay-server-instances-face-hot-wallet-theft PlainSec it 2026-11-03T10:29:03Z Le istanze obsolete di BTCPay Server espongono i fondi degli hot wallet https://plainsec.com/stories/e9709a86-7886-4940-b72e-c654a99bc34b/supplier-attack-altered-blood-service-cold-rooms-at-three-sites PlainSec en 2026-11-04T18:31:58Z Supplier attack altered blood-service cold rooms at three sites https://plainsec.com/it/stories/e9709a86-7886-4940-b72e-c654a99bc34b/supplier-attack-altered-blood-service-cold-rooms-at-three-sites PlainSec it 2026-11-04T18:31:58Z Un attacco al fornitore altera il freddo del sangue in tre sedi https://plainsec.com/stories/c54ccfb0-287d-4cae-b748-f8941d5aa0c4/msecure-s-reset-advice-leaves-vault-exposure-unclear PlainSec en 2026-11-03T20:29:43Z mSecure’s reset advice leaves vault exposure unclear https://plainsec.com/it/stories/c54ccfb0-287d-4cae-b748-f8941d5aa0c4/msecure-s-reset-advice-leaves-vault-exposure-unclear PlainSec it 2026-11-03T20:29:43Z mSecure chiede di reimpostare gli accessi, ma tace sull’esposizione https://plainsec.com/stories/ac5145dd-4ada-4a33-b3af-ad129f452b6a/3am-ransomware-crossed-school-domains-from-an-unmanaged-host PlainSec en 2026-11-03T16:35:49Z 3AM ransomware crossed school domains with AI-like command work https://plainsec.com/it/stories/ac5145dd-4ada-4a33-b3af-ad129f452b6a/3am-ransomware-crossed-school-domains-from-an-unmanaged-host PlainSec it 2026-11-03T16:35:49Z Le credenziali hanno aperto le scuole; l’AI ha accelerato i comandi https://plainsec.com/stories/54f48169-48dd-4b72-ae09-8b5b49bb3139/end-of-life-eol-sonicwall-gms-multiple-vulnerabilities PlainSec en 2026-11-04T18:31:58Z SonicWall GMS flaws leave operators without a fix https://plainsec.com/it/stories/54f48169-48dd-4b72-ae09-8b5b49bb3139/end-of-life-eol-sonicwall-gms-multiple-vulnerabilities PlainSec it 2026-11-04T18:31:58Z GMS resta esposto: SonicWall non correggerà le due falle https://plainsec.com/stories/1c19974d-34ae-4bdd-b7db-90321bb3aa21/dameware-update-covers-flaws-beyond-its-own-code PlainSec en 2026-11-04T14:37:56Z Dameware update covers flaws beyond its own code https://plainsec.com/it/stories/1c19974d-34ae-4bdd-b7db-90321bb3aa21/dameware-update-covers-flaws-beyond-its-own-code PlainSec it 2026-11-04T14:37:56Z La patch di Dameware corregge anche falle nei componenti esterni https://plainsec.com/stories/bbd03798-2faf-47a5-8db7-e53977d89fef/gorbag-s-winrar-lures-conceal-credential-theft PlainSec en 2026-11-03T14:32:15Z Gorbag shifts to WinRAR archives for quick credential theft https://plainsec.com/it/stories/bbd03798-2faf-47a5-8db7-e53977d89fef/gorbag-s-winrar-lures-conceal-credential-theft PlainSec it 2026-11-03T14:32:15Z Una falla già usata da RomCom apre la nuova fase di Gorbag https://plainsec.com/stories/774fdc5f-8d14-4750-b7f3-56f6ba19e3bc/brotli-flaw-leaves-three-unicon-products-exposed PlainSec en 2026-11-04T14:37:56Z Brotli flaw leaves three Unicon products exposed https://plainsec.com/it/stories/774fdc5f-8d14-4750-b7f3-56f6ba19e3bc/brotli-flaw-leaves-three-unicon-products-exposed PlainSec it 2026-11-04T14:37:56Z Una falla Brotli coinvolge tre componenti Unicon, non solo Scout https://plainsec.com/stories/a56aa7bd-16ec-4abe-9b28-ca17adbbd5f3/c3rb3r-ransomware-surge-puts-synology-nas-files-at-risk PlainSec en 2026-11-03T08:24:16Z Synology ransomware targets outdated DSM as flaw remains unknown https://plainsec.com/it/stories/a56aa7bd-16ec-4abe-9b28-ca17adbbd5f3/c3rb3r-ransomware-surge-puts-synology-nas-files-at-risk PlainSec it 2026-11-03T08:24:16Z Il ransomware colpisce i NAS Synology, ma la falla resta da identificare https://plainsec.com/stories/c930c1f0-0313-4b6d-8c6a-dee6b10164c0/slippynunchucks-uses-sogou-to-deliver-darkvigil PlainSec en 2026-11-04T14:37:56Z SlippyNunchucks uses Sogou to deliver DarkVigil https://plainsec.com/it/stories/c930c1f0-0313-4b6d-8c6a-dee6b10164c0/slippynunchucks-uses-sogou-to-deliver-darkvigil PlainSec it 2026-11-04T14:37:56Z Da QuickFox a Sogou, SlippyNunchucks amplia la diffusione di DarkVigil https://plainsec.com/stories/b0b5a815-c5ad-4947-aa45-caa580902b63/university-supercomputers-served-as-mining-targets-and-pivots PlainSec en 2026-11-04T16:30:46Z University supercomputers served as mining targets and pivots https://plainsec.com/it/stories/b0b5a815-c5ad-4947-aa45-caa580902b63/university-supercomputers-served-as-mining-targets-and-pivots PlainSec it 2026-11-04T16:30:46Z I supercomputer universitari coprivano anche le tracce degli intrusi https://plainsec.com/stories/bc128256-93f2-45fd-b77e-fbbce184e319/russian-linked-hackers-exploit-routine-ios-and-android-browsing PlainSec en 2026-11-04T10:24:24Z Russian-linked hackers exploit routine iOS and Android browsing https://plainsec.com/it/stories/bc128256-93f2-45fd-b77e-fbbce184e319/russian-linked-hackers-exploit-routine-ios-and-android-browsing PlainSec it 2026-11-04T10:24:24Z Otto falle note espongono chi naviga da iOS e Android https://plainsec.com/stories/247d4595-067c-430c-8430-8e80a1f01f38/m-ltiples-vulnerabilidades-en-fabric-composer-de-hpe PlainSec en 2026-11-04T14:37:56Z HPE Fabric Composer flaws expose admin access and code execution https://plainsec.com/it/stories/247d4595-067c-430c-8430-8e80a1f01f38/m-ltiples-vulnerabilidades-en-fabric-composer-de-hpe PlainSec it 2026-11-04T14:37:56Z Accesso amministrativo remoto e codice senza login in HPE Fabric Composer https://plainsec.com/stories/dc4fb6a2-7809-437c-af13-bb0eaf4ba965/barracuda-flaws-make-reachable-admin-interfaces-a-root-path PlainSec en 2026-11-04T08:24:45Z Barracuda flaws make reachable admin interfaces a root path https://plainsec.com/it/stories/dc4fb6a2-7809-437c-af13-bb0eaf4ba965/barracuda-flaws-make-reachable-admin-interfaces-a-root-path PlainSec it 2026-11-04T08:24:45Z Un'interfaccia esposta può trasformare gli appliance Barracuda in accesso root https://plainsec.com/stories/c7a24f05-f34b-4201-b6a8-a0ab5eef3489/brotli-flaw-leaves-bundled-runtimes-exposed-after-patching PlainSec en 2026-11-03T08:24:16Z Brotli flaw leaves bundled runtimes exposed after patching https://plainsec.com/it/stories/c7a24f05-f34b-4201-b6a8-a0ab5eef3489/brotli-flaw-leaves-bundled-runtimes-exposed-after-patching PlainSec it 2026-11-03T08:24:16Z La patch al sistema non basta: Brotli resta nei runtime https://plainsec.com/stories/cbead4cb-c265-4fca-bf28-fb77be000f43/fortinet-flags-linux-kernel-remote-code-execution-flaw PlainSec en 2026-11-02T20:31:28Z Red Hat fixes leave Ubuntu kernels in testing https://plainsec.com/it/stories/cbead4cb-c265-4fca-bf28-fb77be000f43/fortinet-flags-linux-kernel-remote-code-execution-flaw PlainSec it 2026-11-02T20:31:28Z Le patch Linux arrivano a velocità diverse tra Red Hat e Ubuntu https://plainsec.com/stories/614df295-1730-44d8-93d4-8b7d86b3a6a0/rsync-3-5-2-closes-unauthenticated-cpu-exhaustion-flaw PlainSec en 2026-11-04T08:24:45Z rsync 3.5.2 closes unauthenticated CPU exhaustion flaw https://plainsec.com/it/stories/614df295-1730-44d8-93d4-8b7d86b3a6a0/rsync-3-5-2-closes-unauthenticated-cpu-exhaustion-flaw PlainSec it 2026-11-04T08:24:45Z Pochi client senza account possono saturare la CPU dei server rsync https://plainsec.com/stories/1f65a662-50cc-4f4b-b2e4-89cac0f6dc12/control-web-panel-flaws-let-unauthenticated-requests-reach-root PlainSec en 2026-11-04T02:24:21Z Control Web Panel flaws let unauthenticated requests reach root https://plainsec.com/it/stories/1f65a662-50cc-4f4b-b2e4-89cac0f6dc12/control-web-panel-flaws-let-unauthenticated-requests-reach-root PlainSec it 2026-11-04T02:24:21Z La vecchia patch lascia Control Web Panel esposto fino a root https://plainsec.com/stories/9754e781-023e-4127-b160-a667995bb5e5/ai-could-make-uk-infrastructure-s-old-weaknesses-easier-to-exploit PlainSec en 2026-11-03T20:29:43Z AI could speed ransomware against UK critical infrastructure https://plainsec.com/it/stories/9754e781-023e-4127-b160-a667995bb5e5/ai-could-make-uk-infrastructure-s-old-weaknesses-easier-to-exploit PlainSec it 2026-11-03T20:29:43Z Le falle tollerate possono esporre le infrastrutture entro il 2028 https://plainsec.com/stories/fa541d0b-609a-445d-a1fb-597f075b60f3/googles-november-android-bulletin-spans-225-vulnerabilities PlainSec en 2026-11-03T14:32:15Z Android's November patches leave 97 fixes for later https://plainsec.com/it/stories/fa541d0b-609a-445d-a1fb-597f075b60f3/googles-november-android-bulletin-spans-225-vulnerabilities PlainSec it 2026-11-03T14:32:15Z Il livello Android di novembre lascia fuori 97 correzioni https://plainsec.com/stories/dc954841-11d2-472d-8fb8-00b15c4aeb79/volt-typhoon-routes-zero-day-attacks-through-rotating-devices PlainSec en 2026-11-03T12:27:36Z Volt Typhoon routes zero-day attacks through rotating devices https://plainsec.com/it/stories/dc954841-11d2-472d-8fb8-00b15c4aeb79/volt-typhoon-routes-zero-day-attacks-through-rotating-devices PlainSec it 2026-11-03T12:27:36Z Gli attacchi di Volt Typhoon passano da dispositivi di terzi https://plainsec.com/stories/365f28f0-7158-4e40-899e-f852940bd9bb/google-cloud-sdk-clients-may-trust-compromised-ca-roots PlainSec en 2026-11-03T06:25:17Z Google Cloud SDK clients may trust compromised CA roots https://plainsec.com/it/stories/365f28f0-7158-4e40-899e-f852940bd9bb/google-cloud-sdk-clients-may-trust-compromised-ca-roots PlainSec it 2026-11-03T06:25:17Z La revoca non basta: i client possono ancora fidarsi delle CA