https://plainsec.com/stories/098e45db-0f27-46aa-bdcc-c6739ca4f3ae/us-seizure-cuts-off-qtfy-s-hidden-traffic-layer PlainSec en 2026-08-27T04:21:40Z US Seizure Cuts Off QTFY’s Hidden Traffic Layer https://plainsec.com/it/stories/098e45db-0f27-46aa-bdcc-c6739ca4f3ae/us-seizure-cuts-off-qtfy-s-hidden-traffic-layer PlainSec it 2026-08-27T04:21:40Z Tagliata la copertura che mascherava le intrusioni cinesi https://plainsec.com/stories/7bbc0a8e-96b0-4efd-b570-413e40a3f5f2/teampcp-arrests-leave-the-secret-theft-intact PlainSec en 2026-08-27T14:52:28Z TeamPCP Arrests Shift the Case to Forensics https://plainsec.com/it/stories/7bbc0a8e-96b0-4efd-b570-413e40a3f5f2/teampcp-arrests-leave-the-secret-theft-intact PlainSec it 2026-08-27T14:52:28Z Gli arresti non chiudono la supply chain di TeamPCP https://plainsec.com/stories/c0ff07a3-b833-45cd-928f-0ca3da9d9454/boston-scientific-attack-snarls-global-device-shipments PlainSec en 2026-08-27T04:21:40Z Boston Scientific Outage Turns Into Supply Chain Delay https://plainsec.com/it/stories/c0ff07a3-b833-45cd-928f-0ca3da9d9454/boston-scientific-attack-snarls-global-device-shipments PlainSec it 2026-08-27T04:21:40Z Boston Scientific trasforma un outage in ritardi sulle forniture mediche https://plainsec.com/stories/835ca768-5396-4bab-ba8d-bcb9ef16060a/openai-report-logs-first-offensive-agent-collective PlainSec en 2026-08-27T04:21:40Z OpenAI’s Sandbox Escape Grew a Hidden Coordination Layer https://plainsec.com/it/stories/835ca768-5396-4bab-ba8d-bcb9ef16060a/openai-report-logs-first-offensive-agent-collective PlainSec it 2026-08-27T04:21:40Z Gli agenti di OpenAI hanno creato un canale segreto https://plainsec.com/stories/2fd46b1a-01ab-4a39-9bed-1aca2f876d0c/cisa-red-team-exposes-alert-noise-and-siloed-response PlainSec en 2026-08-27T04:21:40Z CISA Quantifies the Water Utility PLC Exposure https://plainsec.com/it/stories/2fd46b1a-01ab-4a39-9bed-1aca2f876d0c/cisa-red-team-exposes-alert-noise-and-siloed-response PlainSec it 2026-08-27T04:21:40Z Più di 100 PLC esposti colpiti nel settore idrico https://plainsec.com/stories/584dbd84-423a-4308-af74-91beb7fff766/iran-linked-attack-took-uk-generator-offline PlainSec en 2026-08-27T12:51:52Z UK Generator Case Points to a Wider OT Pattern https://plainsec.com/it/stories/584dbd84-423a-4308-af74-91beb7fff766/iran-linked-attack-took-uk-generator-offline PlainSec it 2026-08-27T12:51:52Z Il vero bersaglio è la lunga coda dell’OT esposto https://plainsec.com/stories/db25fddd-3b2a-4696-ad31-1f09b9280f8a/gartner-says-ai-is-compressing-exploit-timelines PlainSec en 2026-08-27T04:21:40Z AI Discovery Is Flooding Vulnerability Backlogs https://plainsec.com/it/stories/db25fddd-3b2a-4696-ad31-1f09b9280f8a/gartner-says-ai-is-compressing-exploit-timelines PlainSec it 2026-08-27T04:21:40Z L’AI sta trasformando i bug in arretrato di exposure https://plainsec.com/stories/e00db9de-7ac2-4490-922b-d4ee0af53d86/novacookies-sells-microsoft-365-session-theft PlainSec en 2026-08-27T04:21:40Z NovaCookies Sells Microsoft 365 Session Theft https://plainsec.com/it/stories/e00db9de-7ac2-4490-922b-d4ee0af53d86/novacookies-sells-microsoft-365-session-theft PlainSec it 2026-08-27T04:21:40Z MFA aggirata come servizio in abbonamento https://plainsec.com/stories/4aefcbbe-f346-4a71-98fd-771ccdd092e7/spark-rat-campaign-used-opswat-driver-to-blind-defenses PlainSec en 2026-08-27T14:52:28Z Spark RAT Campaign Used OPSWAT Driver to Blind Defenses https://plainsec.com/it/stories/4aefcbbe-f346-4a71-98fd-771ccdd092e7/spark-rat-campaign-used-opswat-driver-to-blind-defenses PlainSec it 2026-08-27T14:52:28Z Un driver firmato spegne le difese prima di Spark RAT https://plainsec.com/stories/32471829-ae65-4560-92bb-170b830c524e/qualys-maps-the-hugging-face-agent-intrusion PlainSec en 2026-08-27T04:21:40Z Qualys Maps the Hugging Face Agent Intrusion https://plainsec.com/it/stories/32471829-ae65-4560-92bb-170b830c524e/qualys-maps-the-hugging-face-agent-intrusion PlainSec it 2026-08-27T04:21:40Z Un agente AI supera i controlli container e cloud https://plainsec.com/stories/2c518851-1f07-4062-a371-034c1b90c1f8/ubiquiti-fixes-unifi-control-plane-flaws-across-the-fleet PlainSec en 2026-08-27T06:56:55Z Ubiquiti Fixes UniFi Control-Plane Entry Points https://plainsec.com/it/stories/2c518851-1f07-4062-a371-034c1b90c1f8/ubiquiti-fixes-unifi-control-plane-flaws-across-the-fleet PlainSec it 2026-08-27T06:56:55Z UniFi espone la flotta a injection e bypass login https://plainsec.com/stories/d1375d8b-8bfd-48a0-809b-50f716d71630/reco-finds-shadow-ai-running-past-governance PlainSec en 2026-08-27T04:21:40Z Reco Finds Shadow AI Running Past Governance https://plainsec.com/it/stories/d1375d8b-8bfd-48a0-809b-50f716d71630/reco-finds-shadow-ai-running-past-governance PlainSec it 2026-08-27T04:21:40Z L’AI ombra eredita i permessi aziendali https://plainsec.com/stories/ae63bd68-e209-42d2-b565-5714a381c0e3/tortoiseshell-adds-ssh-tunneling-to-its-espionage-kit PlainSec en 2026-08-27T04:21:40Z Tortoiseshell Adds SSH Tunneling to Its Espionage Kit https://plainsec.com/it/stories/ae63bd68-e209-42d2-b565-5714a381c0e3/tortoiseshell-adds-ssh-tunneling-to-its-espionage-kit PlainSec it 2026-08-27T04:21:40Z Tortoiseshell allarga il suo accesso furtivo in Europa e Medio Oriente https://plainsec.com/stories/152861c1-b436-4bba-8422-0a8e1a0cb1d3/portswigger-ai-finds-new-desync-paths PlainSec en 2026-08-27T14:52:28Z PortSwigger AI Finds New Desync Paths https://plainsec.com/it/stories/152861c1-b436-4bba-8422-0a8e1a0cb1d3/portswigger-ai-finds-new-desync-paths PlainSec it 2026-08-27T14:52:28Z AI inventa nuovi desync contro siti reali https://plainsec.com/stories/fa641354-aec4-49fd-a65b-5b55f9ef1779/dofun-updaters-smuggled-malware-into-car-head-units PlainSec en 2026-08-27T04:21:40Z BadBox Reaches Car Head Units Through DoFun Updaters https://plainsec.com/it/stories/fa641354-aec4-49fd-a65b-5b55f9ef1779/dofun-updaters-smuggled-malware-into-car-head-units PlainSec it 2026-08-27T04:21:40Z BadBox passa dall'auto al canale di update fidato https://plainsec.com/stories/ee236799-3517-488a-8306-9e75895faf4b/atf-confirms-qilin-breach-as-major-incident PlainSec en 2026-08-27T14:52:28Z ATF Breach Exposed Investigation Targets https://plainsec.com/it/stories/ee236799-3517-488a-8306-9e75895faf4b/atf-confirms-qilin-breach-as-major-incident PlainSec it 2026-08-27T14:52:28Z Un sistema isolato dell'ATF espone i target delle indagini https://plainsec.com/stories/148565ab-e878-483a-8329-bb0538724c7f/cisa-s-red-team-split-exposed-soc-blind-spots PlainSec en 2026-08-27T04:21:40Z CISA’s Red Team Split Exposed SOC Blind Spots https://plainsec.com/it/stories/148565ab-e878-483a-8329-bb0538724c7f/cisa-s-red-team-split-exposed-soc-blind-spots PlainSec it 2026-08-27T04:21:40Z Due SOC, due esiti opposti sotto gli stessi attaccanti https://plainsec.com/stories/f1e199ad-4055-436c-9d7d-c5aa01eb9390/bulk-power-order-pushes-procurement-into-compliance-clock PlainSec en 2026-08-27T12:51:52Z Bulk-Power Order Pushes Procurement Into Compliance Clock https://plainsec.com/it/stories/f1e199ad-4055-436c-9d7d-c5aa01eb9390/bulk-power-order-pushes-procurement-into-compliance-clock PlainSec it 2026-08-27T12:51:52Z Il bulk-power entra in un conto alla rovescia normativo https://plainsec.com/stories/83c4ff22-e7de-4ca2-947e-a8cb3afa97f0/adobe-campaign-classic-flaws-reach-the-host PlainSec en 2026-08-27T11:11:16Z Adobe Campaign Classic Flaws Reach the Host https://plainsec.com/it/stories/83c4ff22-e7de-4ca2-947e-a8cb3afa97f0/adobe-campaign-classic-flaws-reach-the-host PlainSec it 2026-08-27T11:11:16Z Adobe Campaign Classic espone il server a execution locale https://plainsec.com/stories/38b3687a-922c-40dc-8764-6974f1d1ddbf/google-chrome-patch-closes-five-high-severity-flaws PlainSec en 2026-08-27T06:56:55Z Chrome 152 Lands With 327 Security Fixes https://plainsec.com/it/stories/38b3687a-922c-40dc-8764-6974f1d1ddbf/google-chrome-patch-closes-five-high-severity-flaws PlainSec it 2026-08-27T06:56:55Z Chrome corregge 327 flaw, ma è una patch di routine https://plainsec.com/stories/263d1791-febd-4c17-bd4d-4537731067e1/sharepoint-poc-lowers-the-bar-for-rce PlainSec en 2026-08-27T04:21:40Z SharePoint PoC Lowers the Bar for RCE https://plainsec.com/it/stories/263d1791-febd-4c17-bd4d-4537731067e1/sharepoint-poc-lowers-the-bar-for-rce PlainSec it 2026-08-27T04:21:40Z SharePoint diventa un bersaglio di massa con un PoC pubblico https://plainsec.com/stories/05c5f03c-f134-4b6d-a739-ea98ae1fd3af/tenable-and-sentinelone-find-vendor-level-repeat-pressure PlainSec en 2026-08-27T04:21:40Z Tenable and SentinelOne Find Vendor-Level Repeat Pressure https://plainsec.com/it/stories/05c5f03c-f134-4b6d-a739-ea98ae1fd3af/tenable-and-sentinelone-find-vendor-level-repeat-pressure PlainSec it 2026-08-27T04:21:40Z Gli edge vendor restano il punto di accesso condiviso https://plainsec.com/stories/b192bae1-d405-44d8-b310-c2ac3e97bc63/dark-caracal-unveils-a-harder-to-remove-spyware-stack PlainSec en 2026-08-27T12:51:52Z Dark Caracal Unveils a Harder-to-Remove Spyware Stack https://plainsec.com/it/stories/b192bae1-d405-44d8-b310-c2ac3e97bc63/dark-caracal-unveils-a-harder-to-remove-spyware-stack PlainSec it 2026-08-27T12:51:52Z GoCaracal porta l’accesso persistente dentro Dark Caracal https://plainsec.com/stories/bd04dc5c-73fe-412d-8fb3-96e34b12884c/meta-settlement-forces-youth-feature-overhaul PlainSec en 2026-08-27T06:56:55Z Meta Settlement Forces Youth-Feature Overhaul https://plainsec.com/it/stories/bd04dc5c-73fe-412d-8fb3-96e34b12884c/meta-settlement-forces-youth-feature-overhaul PlainSec it 2026-08-27T06:56:55Z Meta paga miliardi e cambia Facebook e Instagram per i minori https://plainsec.com/stories/c88c056f-6c88-4524-8980-177c00f99967/vivicta-ddos-knocks-norways-shared-services-offline PlainSec en 2026-08-27T04:21:40Z Vivicta DDoS Knocks Norway's Shared Services Offline https://plainsec.com/it/stories/c88c056f-6c88-4524-8980-177c00f99967/vivicta-ddos-knocks-norways-shared-services-offline PlainSec it 2026-08-27T04:21:40Z Un DDoS su Vivicta blocca 10 servizi pubblici norvegesi https://plainsec.com/stories/d2a51904-7520-4628-b793-15c6d442f776/gpt-5-6-cyber-broke-out-of-qemu-twice PlainSec en 2026-08-27T04:21:40Z GPT-5.6-Cyber Broke Out of QEMU Twice https://plainsec.com/it/stories/d2a51904-7520-4628-b793-15c6d442f776/gpt-5-6-cyber-broke-out-of-qemu-twice PlainSec it 2026-08-27T04:21:40Z Un agente AI ha rotto la VM tre volte https://plainsec.com/stories/e4d754bc-8c05-4c66-89aa-67c05d126daa/avada-s-six-step-chain-exposes-wordpress-sites PlainSec en 2026-08-27T04:21:40Z Avada’s Six-Step Chain Exposes WordPress Sites https://plainsec.com/it/stories/e4d754bc-8c05-4c66-89aa-67c05d126daa/avada-s-six-step-chain-exposes-wordpress-sites PlainSec it 2026-08-27T04:21:40Z Avada espone siti WordPress a un RCE a catena https://plainsec.com/stories/0b8033de-62d4-4c4c-8bcd-e73fa1f0303d/miniorange-saml-flaws-hand-attackers-wordpress-admin PlainSec en 2026-08-26T04:21:23Z miniOrange SAML Bugs Now See PoC Scanning https://plainsec.com/it/stories/0b8033de-62d4-4c4c-8bcd-e73fa1f0303d/miniorange-saml-flaws-hand-attackers-wordpress-admin PlainSec it 2026-08-26T04:21:23Z Lo scan indiscriminato punta al cookie admin di WordPress https://plainsec.com/stories/d755c8e3-14a6-4fc2-af58-46adde88bcd2/teamcity-flaw-puts-build-servers-in-play PlainSec en 2026-08-26T04:21:23Z TeamCity Flaw Puts Build Servers in Play https://plainsec.com/it/stories/d755c8e3-14a6-4fc2-af58-46adde88bcd2/teamcity-flaw-puts-build-servers-in-play PlainSec it 2026-08-26T04:21:23Z TeamCity trasforma un bug in controllo della delivery https://plainsec.com/stories/fa516837-3eff-4abf-b742-67022beea1a6/siemens-iot2050-lets-node-red-accept-unsigned-flows PlainSec en 2026-08-26T04:21:23Z Siemens IoT2050 Lets Node-RED Accept Unsigned Flows https://plainsec.com/it/stories/fa516837-3eff-4abf-b742-67022beea1a6/siemens-iot2050-lets-node-red-accept-unsigned-flows PlainSec it 2026-08-26T04:21:23Z Node-RED senza autenticazione apre l’IoT2050 al controllo remoto https://plainsec.com/stories/b96bb49f-487c-48dd-8adb-67730f00c29f/nemoclaw-s-local-model-api-stays-reachable PlainSec en 2026-08-26T04:21:23Z NemoClaw’s Local Model API Stays Reachable https://plainsec.com/it/stories/b96bb49f-487c-48dd-8adb-67730f00c29f/nemoclaw-s-local-model-api-stays-reachable PlainSec it 2026-08-26T04:21:23Z Una pagina web può avvelenare il modello locale di NemoClaw https://plainsec.com/stories/d6c91ff8-57e5-4f9a-b751-e5457415e69c/global-crackdown-exposes-a-wide-cybercrime-pool PlainSec en 2026-08-26T04:21:23Z Interpol’s Black Axe Sweep Targeted the Money Trail https://plainsec.com/it/stories/d6c91ff8-57e5-4f9a-b751-e5457415e69c/global-crackdown-exposes-a-wide-cybercrime-pool PlainSec it 2026-08-26T04:21:23Z Tagliata la rete finanziaria dietro Black Axe https://plainsec.com/stories/5c187193-4df2-4d28-8d4f-5b58131a91eb/anonymouskit-sells-voice-ai-iphone-unlocking PlainSec en 2026-08-26T08:23:25Z AnonyMousKIT Turns Lost iPhones Into Unlock Targets https://plainsec.com/it/stories/5c187193-4df2-4d28-8d4f-5b58131a91eb/anonymouskit-sells-voice-ai-iphone-unlocking PlainSec it 2026-08-26T08:23:25Z AnonyMousKIT industrializza il phishing per sbloccare iPhone rubati https://plainsec.com/stories/b47f2194-3423-4fa6-9609-94b9693597da/carhartt-leak-count-falls-to-12-9-million PlainSec en 2026-08-26T19:09:43Z Carhartt Leak Count Falls to 12.9 Million https://plainsec.com/it/stories/b47f2194-3423-4fa6-9609-94b9693597da/carhartt-leak-count-falls-to-12-9-million PlainSec it 2026-08-26T19:09:43Z Carhartt, il leak resta enorme ma il conteggio si dimezza https://plainsec.com/stories/06d2f7e9-75b3-4f80-b529-9c16e81be76f/npm-mirrors-became-persistent-phishing-hosting PlainSec en 2026-08-26T04:21:23Z npm Mirrors Became Persistent Phishing Hosting https://plainsec.com/it/stories/06d2f7e9-75b3-4f80-b529-9c16e81be76f/npm-mirrors-became-persistent-phishing-hosting PlainSec it 2026-08-26T04:21:23Z npm e unpkg diventano infrastruttura di phishing persistente https://plainsec.com/stories/42c2dcb3-b531-4e22-82fb-9758a168fdec/sponsored-search-drives-fake-codex-mac-malware PlainSec en 2026-08-26T04:21:23Z Sponsored Search Drives Fake Codex Mac Malware https://plainsec.com/it/stories/42c2dcb3-b531-4e22-82fb-9758a168fdec/sponsored-search-drives-fake-codex-mac-malware PlainSec it 2026-08-26T04:21:23Z La fiducia nel dominio ospite diventa parte dell’inganno https://plainsec.com/stories/091c0094-6c36-421b-8671-f7c55072df5c/paylogix-breach-spreads-past-one-vendor PlainSec en 2026-08-26T04:21:23Z Paylogix Breach Spreads Past One Vendor https://plainsec.com/it/stories/091c0094-6c36-421b-8671-f7c55072df5c/paylogix-breach-spreads-past-one-vendor PlainSec it 2026-08-26T04:21:23Z Un solo intermediario espone dati di stipendi e benefit https://plainsec.com/stories/a1f3060b-ef14-4d3b-9616-124204d33101/mirage2fa-steals-sessions-past-microsoft-365-mfa PlainSec en 2026-08-26T04:21:23Z Mirage2FA Steals Sessions Past Microsoft 365 MFA https://plainsec.com/it/stories/a1f3060b-ef14-4d3b-9616-124204d33101/mirage2fa-steals-sessions-past-microsoft-365-mfa PlainSec it 2026-08-26T04:21:23Z Mirage2FA Steals Sessions Past Microsoft 365 MFA https://plainsec.com/stories/ebfbbd81-e449-4d95-ae02-e09ed3b89662/claude-opus-4-6-found-booking-api-gap PlainSec en 2026-08-26T15:49:59Z Claude Opus 4.6 Found Booking API Gap https://plainsec.com/it/stories/ebfbbd81-e449-4d95-ae02-e09ed3b89662/claude-opus-4-6-found-booking-api-gap PlainSec it 2026-08-26T15:49:59Z L’agent salta le regole front-end e tocca le prenotazioni altrui https://plainsec.com/stories/abacf318-7169-48f8-b3d5-f4c227a2bf9c/weedhack-pushes-fake-minecraft-clients-to-search-top PlainSec en 2026-08-26T04:21:23Z WeedHack Survives the Takedown Through Trusted Links https://plainsec.com/it/stories/abacf318-7169-48f8-b3d5-f4c227a2bf9c/weedhack-pushes-fake-minecraft-clients-to-search-top PlainSec it 2026-08-26T04:21:23Z WeedHack sopravvive al takedown su Discord https://plainsec.com/stories/c2d639cc-e78c-4e30-9fe2-67693c0ed9b9/shinyhunters-leak-fueled-a-fake-security-pitch PlainSec en 2026-08-26T04:21:23Z ShinyHunters Leak Fueled a Fake Security Pitch https://plainsec.com/it/stories/c2d639cc-e78c-4e30-9fe2-67693c0ed9b9/shinyhunters-leak-fueled-a-fake-security-pitch PlainSec it 2026-08-26T04:21:23Z La disclosure del breach diventa munizione per l’impersonazione https://plainsec.com/stories/bbe91675-c886-4d1d-8836-cec6b188f5b9/keycloak-reset-bypass-reaches-every-app-behind-sso PlainSec en 2026-08-26T04:21:23Z Keycloak Reset Bypass Now Means Account Takeover https://plainsec.com/it/stories/bbe91675-c886-4d1d-8836-cec6b188f5b9/keycloak-reset-bypass-reaches-every-app-behind-sso PlainSec it 2026-08-26T04:21:23Z Keycloak rompe il presupposto del reset via email https://plainsec.com/stories/4fe51fff-036c-49ed-8ac5-54e0be3f8570/recruittrap-filters-for-corporate-mobile-credentials PlainSec en 2026-08-26T12:35:52Z RecruitTrap Filters for Corporate Mobile Credentials https://plainsec.com/it/stories/4fe51fff-036c-49ed-8ac5-54e0be3f8570/recruittrap-filters-for-corporate-mobile-credentials PlainSec it 2026-08-26T12:35:52Z RecruitTrap filtra gli account aziendali dai telefoni https://plainsec.com/stories/ddf389e0-86b1-40e5-8522-ed2f87d0b803/us-sanctions-mabna-wallets-raises-crypto-exposure PlainSec en 2026-08-26T06:40:08Z US Sanctions Mabna Wallets, Raises Crypto Exposure https://plainsec.com/it/stories/ddf389e0-86b1-40e5-8522-ed2f87d0b803/us-sanctions-mabna-wallets-raises-crypto-exposure PlainSec it 2026-08-26T06:40:08Z Le sanzioni USA allargano il rischio alle wallet crypto di Mabna https://plainsec.com/stories/7c6f7e90-a077-4af1-b2aa-77eaf2ce1e4f/google-cloud-split-its-patch-duty-in-two PlainSec en 2026-08-26T10:33:34Z Google Cloud Split Its Patch Duty in Two https://plainsec.com/it/stories/7c6f7e90-a077-4af1-b2aa-77eaf2ce1e4f/google-cloud-split-its-patch-duty-in-two PlainSec it 2026-08-26T10:33:34Z Google separa la falla del cloud dal rischio nei workload clienti https://plainsec.com/stories/52e52f7d-e88d-4b35-a230-72d7d489cf0a/furuno-s-fa-50-has-no-fix-path-left PlainSec en 2026-08-26T08:23:25Z Furuno’s FA-50 Has No Fix Path Left https://plainsec.com/it/stories/52e52f7d-e88d-4b35-a230-72d7d489cf0a/furuno-s-fa-50-has-no-fix-path-left PlainSec it 2026-08-26T08:23:25Z Un transponder Furuno non si può patchare https://plainsec.com/stories/39d60a3b-3388-4822-87fb-9efce6eff3bb/microsoft-s-22-cloud-fixes-shrink-local-patch-work PlainSec en 2026-08-25T04:27:49Z Defender flaw now has a PoC and federal clock https://plainsec.com/it/stories/39d60a3b-3388-4822-87fb-9efce6eff3bb/microsoft-s-22-cloud-fixes-shrink-local-patch-work PlainSec it 2026-08-25T04:27:49Z ShieldBreak trasforma Defender in un varco di privilegi https://plainsec.com/stories/9d9b1df9-0cfe-4287-9654-761cf31b473e/cisa-turns-logging-into-an-operating-blueprint PlainSec en 2026-08-25T04:27:49Z CISA Turns Logging into an Operating Blueprint https://plainsec.com/it/stories/9d9b1df9-0cfe-4287-9654-761cf31b473e/cisa-turns-logging-into-an-operating-blueprint PlainSec it 2026-08-25T04:27:49Z CISA sposta il logging da raccolta a governo operativo https://plainsec.com/stories/55baac47-4f09-442f-8712-1e912f39784d/wordlistloader-and-synkloader-abuse-trusted-surfaces PlainSec en 2026-08-25T04:27:49Z WordlistLoader and SynkLoader Abuse Trusted Surfaces https://plainsec.com/it/stories/55baac47-4f09-442f-8712-1e912f39784d/wordlistloader-and-synkloader-abuse-trusted-surfaces PlainSec it 2026-08-25T04:27:49Z ClickFix e Teams trasformano fiducia in accesso rivendibile https://plainsec.com/stories/636a64aa-782a-4162-8aa8-dae957e7744a/leaked-aws-keys-stay-live-for-years PlainSec en 2026-08-25T04:27:49Z Leaked AWS Keys Stay Live for Years https://plainsec.com/it/stories/636a64aa-782a-4162-8aa8-dae957e7744a/leaked-aws-keys-stay-live-for-years PlainSec it 2026-08-25T04:27:49Z Le chiavi AWS esposte restano vive per anni https://plainsec.com/stories/1b98725b-a422-44cf-b114-211ac3e237f0/doubloon-dredger-hijacks-notion-trust-for-token-theft PlainSec en 2026-08-25T04:27:49Z Doubloon Dredger Hijacks Notion Trust for Token Theft https://plainsec.com/it/stories/1b98725b-a422-44cf-b114-211ac3e237f0/doubloon-dredger-hijacks-notion-trust-for-token-theft PlainSec it 2026-08-25T04:27:49Z Notion fidato apre la strada ai token Microsoft https://plainsec.com/stories/956bf54b-e40f-48e2-a758-7ea24671eeb4/firefox-extension-ring-rotates-from-sports-to-theft PlainSec en 2026-08-25T04:27:49Z Firefox Extension Ring Keeps Stealing Wallet Secrets https://plainsec.com/it/stories/956bf54b-e40f-48e2-a758-7ea24671eeb4/firefox-extension-ring-rotates-from-sports-to-theft PlainSec it 2026-08-25T04:27:49Z Le estensioni Firefox usa-e-getta diventano un cache segreta di wallet https://plainsec.com/stories/b2946647-5de5-42b6-bedd-3ffcde2a680e/apollo-confirms-cloud-breach-after-social-engineering PlainSec en 2026-08-25T04:27:49Z Apollo Confirms Cloud Breach, SSNs Exposed https://plainsec.com/it/stories/b2946647-5de5-42b6-bedd-3ffcde2a680e/apollo-confirms-cloud-breach-after-social-engineering PlainSec it 2026-08-25T04:27:49Z Apollo conferma il furto di SSN dal cloud https://plainsec.com/stories/c219e6e9-c533-445f-a070-88b895bcdf67/tiktok-settles-children-s-privacy-case-for-400-million PlainSec en 2026-08-25T04:27:49Z TikTok Settles COPPA Suit, Cleans Up Legacy Liability https://plainsec.com/it/stories/c219e6e9-c533-445f-a070-88b895bcdf67/tiktok-settles-children-s-privacy-case-for-400-million PlainSec it 2026-08-25T04:27:49Z TikTok chiude il conto della privacy infantile https://plainsec.com/stories/8609005f-83c7-4591-828b-5cb78bf123e7/aliexpress-fingerprinting-broke-bluetooth-audio PlainSec en 2026-08-25T04:27:49Z AliExpress Fingerprinting Exposed Browser Audio Side Effects https://plainsec.com/it/stories/8609005f-83c7-4591-828b-5cb78bf123e7/aliexpress-fingerprinting-broke-bluetooth-audio PlainSec it 2026-08-25T04:27:49Z AliExpress usa WebAudio per fingerprinting e rompe il Bluetooth https://plainsec.com/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec en 2026-08-25T10:40:03Z Microsoft Broadens AI Gateway Abuse to Three Workloads https://plainsec.com/it/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec it 2026-08-25T10:40:03Z Gli AI gateway diventano il piano di controllo dell’attacco https://plainsec.com/stories/221fe620-f03a-49c2-b731-f4159a20383c/atlassian-patches-multiple-high-severity-stack-flaws PlainSec en 2026-08-25T06:28:53Z Atlassian Fans One Library Fix Across Its Stack https://plainsec.com/it/stories/221fe620-f03a-49c2-b731-f4159a20383c/atlassian-patches-multiple-high-severity-stack-flaws PlainSec it 2026-08-25T06:28:53Z Atlassian chiude 83 falle ereditate nelle sue app server https://plainsec.com/stories/b1260bcb-f008-4618-afbc-f78fb957a1c8/toxicpanda-2-0-turns-android-permissions-into-persistence PlainSec en 2026-08-25T06:28:53Z ToxicPanda 2.0 Turns Android Permissions Into Persistence https://plainsec.com/it/stories/b1260bcb-f008-4618-afbc-f78fb957a1c8/toxicpanda-2-0-turns-android-permissions-into-persistence PlainSec it 2026-08-25T06:28:53Z Android si scopre governato dai suoi stessi permessi https://plainsec.com/stories/515c4b7c-de44-4d8f-8bba-c126a40e3fad/compass-security-shows-passkey-ceremonies-can-be-hooked PlainSec en 2026-08-25T12:38:45Z Compass Security Shows Passkey Ceremonies Can Be Hooked https://plainsec.com/it/stories/515c4b7c-de44-4d8f-8bba-c126a40e3fad/compass-security-shows-passkey-ceremonies-can-be-hooked PlainSec it 2026-08-25T12:38:45Z I passkey si possono alterare dal browser https://plainsec.com/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec en 2026-08-25T04:27:49Z GitLab Exploitation Turns Repo History Into a Target https://plainsec.com/it/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec it 2026-08-25T04:27:49Z GitLab passa da disclosure a manipolazione silenziosa https://plainsec.com/stories/37456d94-b7aa-45f6-8116-98737eb71fe9/pen-test-partners-found-wi-fi-bridging-ot-segmentation PlainSec en 2026-08-25T06:28:53Z Pen Test Partners Found Wi-Fi Bridging OT Segmentation https://plainsec.com/it/stories/37456d94-b7aa-45f6-8116-98737eb71fe9/pen-test-partners-found-wi-fi-bridging-ot-segmentation PlainSec it 2026-08-25T06:28:53Z Il Wi‑Fi di sala controllo ha rotto la segregazione OT https://plainsec.com/stories/e81f8856-944a-4000-bbd3-29bbeb6f8708/fortiguard-flags-nginx-heap-overflow-in-appliances PlainSec en 2026-08-25T10:40:03Z FortiGuard Flags NGINX Heap Overflow in Appliances https://plainsec.com/it/stories/e81f8856-944a-4000-bbd3-29bbeb6f8708/fortiguard-flags-nginx-heap-overflow-in-appliances PlainSec it 2026-08-25T10:40:03Z La falla in NGINX si allarga agli appliance che lo incorporano https://plainsec.com/stories/a779398c-dc12-4be5-b602-4e1da59bdfc5/calix-router-flaw-punches-through-the-customer-edge PlainSec en 2026-08-25T10:40:03Z Calix Router Flaw Punches Through the Customer Edge https://plainsec.com/it/stories/a779398c-dc12-4be5-b602-4e1da59bdfc5/calix-router-flaw-punches-through-the-customer-edge PlainSec it 2026-08-25T10:40:03Z Una richiesta anonima apre un varco permanente nei router Calix https://plainsec.com/stories/5b1bd3b9-132a-4c85-b15c-57495abeacf6/uat-10147-hides-spectre-inside-server-intrusions PlainSec en 2026-08-25T08:37:44Z UAT-10147 Hides SPECTRE Inside Server Intrusions https://plainsec.com/it/stories/5b1bd3b9-132a-4c85-b15c-57495abeacf6/uat-10147-hides-spectre-inside-server-intrusions PlainSec it 2026-08-25T08:37:44Z SPECTRE trasforma un server compromesso in una fonte di reddito