https://plainsec.com/stories/0b8033de-62d4-4c4c-8bcd-e73fa1f0303d/miniorange-saml-flaws-hand-attackers-wordpress-admin PlainSec en 2026-08-26T04:21:23Z miniOrange SAML Bugs Now See PoC Scanning https://plainsec.com/it/stories/0b8033de-62d4-4c4c-8bcd-e73fa1f0303d/miniorange-saml-flaws-hand-attackers-wordpress-admin PlainSec it 2026-08-26T04:21:23Z Lo scan indiscriminato punta al cookie admin di WordPress https://plainsec.com/stories/2fd46b1a-01ab-4a39-9bed-1aca2f876d0c/cisa-red-team-exposes-alert-noise-and-siloed-response PlainSec en 2026-08-26T12:35:52Z CISA Quantifies the Water Utility PLC Exposure https://plainsec.com/it/stories/2fd46b1a-01ab-4a39-9bed-1aca2f876d0c/cisa-red-team-exposes-alert-noise-and-siloed-response PlainSec it 2026-08-26T12:35:52Z Più di 100 PLC esposti colpiti nel settore idrico https://plainsec.com/stories/098e45db-0f27-46aa-bdcc-c6739ca4f3ae/us-seizure-cuts-off-qtfy-s-hidden-traffic-layer PlainSec en 2026-08-26T20:59:49Z US Seizure Cuts Off QTFY’s Hidden Traffic Layer https://plainsec.com/it/stories/098e45db-0f27-46aa-bdcc-c6739ca4f3ae/us-seizure-cuts-off-qtfy-s-hidden-traffic-layer PlainSec it 2026-08-26T20:59:49Z Tagliata la copertura che mascherava le intrusioni cinesi https://plainsec.com/stories/c0ff07a3-b833-45cd-928f-0ca3da9d9454/boston-scientific-attack-snarls-global-device-shipments PlainSec en 2026-08-26T19:09:43Z Boston Scientific Outage Turns Into Supply Chain Delay https://plainsec.com/it/stories/c0ff07a3-b833-45cd-928f-0ca3da9d9454/boston-scientific-attack-snarls-global-device-shipments PlainSec it 2026-08-26T19:09:43Z Boston Scientific trasforma un outage in ritardi sulle forniture mediche https://plainsec.com/stories/d755c8e3-14a6-4fc2-af58-46adde88bcd2/teamcity-flaw-puts-build-servers-in-play PlainSec en 2026-08-26T04:21:23Z TeamCity Flaw Puts Build Servers in Play https://plainsec.com/it/stories/d755c8e3-14a6-4fc2-af58-46adde88bcd2/teamcity-flaw-puts-build-servers-in-play PlainSec it 2026-08-26T04:21:23Z TeamCity trasforma un bug in controllo della delivery https://plainsec.com/stories/db25fddd-3b2a-4696-ad31-1f09b9280f8a/gartner-says-ai-is-compressing-exploit-timelines PlainSec en 2026-08-26T15:49:59Z AI Discovery Is Flooding Vulnerability Backlogs https://plainsec.com/it/stories/db25fddd-3b2a-4696-ad31-1f09b9280f8a/gartner-says-ai-is-compressing-exploit-timelines PlainSec it 2026-08-26T15:49:59Z L’AI sta trasformando i bug in arretrato di exposure https://plainsec.com/stories/e00db9de-7ac2-4490-922b-d4ee0af53d86/novacookies-sells-microsoft-365-session-theft PlainSec en 2026-08-26T16:55:03Z NovaCookies Sells Microsoft 365 Session Theft https://plainsec.com/it/stories/e00db9de-7ac2-4490-922b-d4ee0af53d86/novacookies-sells-microsoft-365-session-theft PlainSec it 2026-08-26T16:55:03Z MFA aggirata come servizio in abbonamento https://plainsec.com/stories/835ca768-5396-4bab-ba8d-bcb9ef16060a/openai-report-logs-first-offensive-agent-collective PlainSec en 2026-08-26T20:59:49Z OpenAI Report Logs First Offensive Agent Collective https://plainsec.com/it/stories/835ca768-5396-4bab-ba8d-bcb9ef16060a/openai-report-logs-first-offensive-agent-collective PlainSec it 2026-08-26T20:59:49Z Un collettivo di agenti AI ha agito senza guida umana https://plainsec.com/stories/eed0406e-b55b-4308-8683-1c6dad17bef9/fbi-severs-qtfy-s-proxy-quartermaster-layer PlainSec en 2026-08-26T19:09:43Z FBI Severs QTFY’s Proxy Quartermaster Layer https://plainsec.com/it/stories/eed0406e-b55b-4308-8683-1c6dad17bef9/fbi-severs-qtfy-s-proxy-quartermaster-layer PlainSec it 2026-08-26T19:09:43Z Il proxy layer di QTFY esce di scena https://plainsec.com/stories/ae63bd68-e209-42d2-b565-5714a381c0e3/tortoiseshell-adds-ssh-tunneling-to-its-espionage-kit PlainSec en 2026-08-26T19:09:43Z Tortoiseshell Adds SSH Tunneling to Its Espionage Kit https://plainsec.com/it/stories/ae63bd68-e209-42d2-b565-5714a381c0e3/tortoiseshell-adds-ssh-tunneling-to-its-espionage-kit PlainSec it 2026-08-26T19:09:43Z Tortoiseshell allarga il suo accesso furtivo in Europa e Medio Oriente https://plainsec.com/stories/05c5f03c-f134-4b6d-a739-ea98ae1fd3af/tenable-and-sentinelone-find-vendor-level-repeat-pressure PlainSec en 2026-08-26T16:55:03Z Tenable and SentinelOne Find Vendor-Level Repeat Pressure https://plainsec.com/it/stories/05c5f03c-f134-4b6d-a739-ea98ae1fd3af/tenable-and-sentinelone-find-vendor-level-repeat-pressure PlainSec it 2026-08-26T16:55:03Z Gli edge vendor restano il punto di accesso condiviso https://plainsec.com/stories/c88c056f-6c88-4524-8980-177c00f99967/vivicta-ddos-knocks-norways-shared-services-offline PlainSec en 2026-08-26T04:21:23Z Vivicta DDoS Knocks Norway's Shared Services Offline https://plainsec.com/it/stories/c88c056f-6c88-4524-8980-177c00f99967/vivicta-ddos-knocks-norways-shared-services-offline PlainSec it 2026-08-26T04:21:23Z Un DDoS su Vivicta blocca 10 servizi pubblici norvegesi https://plainsec.com/stories/5c187193-4df2-4d28-8d4f-5b58131a91eb/anonymouskit-sells-voice-ai-iphone-unlocking PlainSec en 2026-08-26T08:23:25Z AnonyMousKIT Turns Lost iPhones Into Unlock Targets https://plainsec.com/it/stories/5c187193-4df2-4d28-8d4f-5b58131a91eb/anonymouskit-sells-voice-ai-iphone-unlocking PlainSec it 2026-08-26T08:23:25Z AnonyMousKIT industrializza il phishing per sbloccare iPhone rubati https://plainsec.com/stories/263d1791-febd-4c17-bd4d-4537731067e1/sharepoint-poc-lowers-the-bar-for-rce PlainSec en 2026-08-26T19:09:43Z SharePoint PoC Lowers the Bar for RCE https://plainsec.com/it/stories/263d1791-febd-4c17-bd4d-4537731067e1/sharepoint-poc-lowers-the-bar-for-rce PlainSec it 2026-08-26T19:09:43Z SharePoint diventa un bersaglio di massa con un PoC pubblico https://plainsec.com/stories/b47f2194-3423-4fa6-9609-94b9693597da/carhartt-leak-count-falls-to-12-9-million PlainSec en 2026-08-26T19:09:43Z Carhartt Leak Count Falls to 12.9 Million https://plainsec.com/it/stories/b47f2194-3423-4fa6-9609-94b9693597da/carhartt-leak-count-falls-to-12-9-million PlainSec it 2026-08-26T19:09:43Z Carhartt, il leak resta enorme ma il conteggio si dimezza https://plainsec.com/stories/d1375d8b-8bfd-48a0-809b-50f716d71630/reco-finds-shadow-ai-running-past-governance PlainSec en 2026-08-26T16:55:03Z Reco Finds Shadow AI Running Past Governance https://plainsec.com/it/stories/d1375d8b-8bfd-48a0-809b-50f716d71630/reco-finds-shadow-ai-running-past-governance PlainSec it 2026-08-26T16:55:03Z L’AI ombra eredita i permessi aziendali https://plainsec.com/stories/06d2f7e9-75b3-4f80-b529-9c16e81be76f/npm-mirrors-became-persistent-phishing-hosting PlainSec en 2026-08-26T04:21:23Z npm Mirrors Became Persistent Phishing Hosting https://plainsec.com/it/stories/06d2f7e9-75b3-4f80-b529-9c16e81be76f/npm-mirrors-became-persistent-phishing-hosting PlainSec it 2026-08-26T04:21:23Z npm e unpkg diventano infrastruttura di phishing persistente https://plainsec.com/stories/148565ab-e878-483a-8329-bb0538724c7f/cisa-s-red-team-split-exposed-soc-blind-spots PlainSec en 2026-08-26T08:23:25Z CISA’s Red Team Split Exposed SOC Blind Spots https://plainsec.com/it/stories/148565ab-e878-483a-8329-bb0538724c7f/cisa-s-red-team-split-exposed-soc-blind-spots PlainSec it 2026-08-26T08:23:25Z Due SOC, due esiti opposti sotto gli stessi attaccanti https://plainsec.com/stories/38b3687a-922c-40dc-8764-6974f1d1ddbf/google-chrome-patch-closes-five-high-severity-flaws PlainSec en 2026-08-26T12:35:52Z Chrome 152 Lands With 327 Security Fixes https://plainsec.com/it/stories/38b3687a-922c-40dc-8764-6974f1d1ddbf/google-chrome-patch-closes-five-high-severity-flaws PlainSec it 2026-08-26T12:35:52Z Chrome corregge 327 flaw, ma è una patch di routine https://plainsec.com/stories/42c2dcb3-b531-4e22-82fb-9758a168fdec/sponsored-search-drives-fake-codex-mac-malware PlainSec en 2026-08-26T04:21:23Z Sponsored Search Drives Fake Codex Mac Malware https://plainsec.com/it/stories/42c2dcb3-b531-4e22-82fb-9758a168fdec/sponsored-search-drives-fake-codex-mac-malware PlainSec it 2026-08-26T04:21:23Z La fiducia nel dominio ospite diventa parte dell’inganno https://plainsec.com/stories/d6c91ff8-57e5-4f9a-b751-e5457415e69c/global-crackdown-exposes-a-wide-cybercrime-pool PlainSec en 2026-08-26T04:21:23Z Interpol’s Black Axe Sweep Targeted the Money Trail https://plainsec.com/it/stories/d6c91ff8-57e5-4f9a-b751-e5457415e69c/global-crackdown-exposes-a-wide-cybercrime-pool PlainSec it 2026-08-26T04:21:23Z Tagliata la rete finanziaria dietro Black Axe https://plainsec.com/stories/091c0094-6c36-421b-8671-f7c55072df5c/paylogix-breach-spreads-past-one-vendor PlainSec en 2026-08-26T04:21:23Z Paylogix Breach Spreads Past One Vendor https://plainsec.com/it/stories/091c0094-6c36-421b-8671-f7c55072df5c/paylogix-breach-spreads-past-one-vendor PlainSec it 2026-08-26T04:21:23Z Un solo intermediario espone dati di stipendi e benefit https://plainsec.com/stories/fa516837-3eff-4abf-b742-67022beea1a6/siemens-iot2050-lets-node-red-accept-unsigned-flows PlainSec en 2026-08-26T04:21:23Z Siemens IoT2050 Lets Node-RED Accept Unsigned Flows https://plainsec.com/it/stories/fa516837-3eff-4abf-b742-67022beea1a6/siemens-iot2050-lets-node-red-accept-unsigned-flows PlainSec it 2026-08-26T04:21:23Z Node-RED senza autenticazione apre l’IoT2050 al controllo remoto https://plainsec.com/stories/a1f3060b-ef14-4d3b-9616-124204d33101/mirage2fa-steals-sessions-past-microsoft-365-mfa PlainSec en 2026-08-26T04:21:23Z Mirage2FA Steals Sessions Past Microsoft 365 MFA https://plainsec.com/it/stories/a1f3060b-ef14-4d3b-9616-124204d33101/mirage2fa-steals-sessions-past-microsoft-365-mfa PlainSec it 2026-08-26T04:21:23Z Mirage2FA Steals Sessions Past Microsoft 365 MFA https://plainsec.com/stories/ebfbbd81-e449-4d95-ae02-e09ed3b89662/claude-opus-4-6-found-booking-api-gap PlainSec en 2026-08-26T15:49:59Z Claude Opus 4.6 Found Booking API Gap https://plainsec.com/it/stories/ebfbbd81-e449-4d95-ae02-e09ed3b89662/claude-opus-4-6-found-booking-api-gap PlainSec it 2026-08-26T15:49:59Z L’agent salta le regole front-end e tocca le prenotazioni altrui https://plainsec.com/stories/abacf318-7169-48f8-b3d5-f4c227a2bf9c/weedhack-pushes-fake-minecraft-clients-to-search-top PlainSec en 2026-08-26T04:21:23Z WeedHack Survives the Takedown Through Trusted Links https://plainsec.com/it/stories/abacf318-7169-48f8-b3d5-f4c227a2bf9c/weedhack-pushes-fake-minecraft-clients-to-search-top PlainSec it 2026-08-26T04:21:23Z WeedHack sopravvive al takedown su Discord https://plainsec.com/stories/c2d639cc-e78c-4e30-9fe2-67693c0ed9b9/shinyhunters-leak-fueled-a-fake-security-pitch PlainSec en 2026-08-26T04:21:23Z ShinyHunters Leak Fueled a Fake Security Pitch https://plainsec.com/it/stories/c2d639cc-e78c-4e30-9fe2-67693c0ed9b9/shinyhunters-leak-fueled-a-fake-security-pitch PlainSec it 2026-08-26T04:21:23Z La disclosure del breach diventa munizione per l’impersonazione https://plainsec.com/stories/bbe91675-c886-4d1d-8836-cec6b188f5b9/keycloak-reset-bypass-reaches-every-app-behind-sso PlainSec en 2026-08-26T04:21:23Z Keycloak Reset Bypass Now Means Account Takeover https://plainsec.com/it/stories/bbe91675-c886-4d1d-8836-cec6b188f5b9/keycloak-reset-bypass-reaches-every-app-behind-sso PlainSec it 2026-08-26T04:21:23Z Keycloak rompe il presupposto del reset via email https://plainsec.com/stories/4fe51fff-036c-49ed-8ac5-54e0be3f8570/recruittrap-filters-for-corporate-mobile-credentials PlainSec en 2026-08-26T12:35:52Z RecruitTrap Filters for Corporate Mobile Credentials https://plainsec.com/it/stories/4fe51fff-036c-49ed-8ac5-54e0be3f8570/recruittrap-filters-for-corporate-mobile-credentials PlainSec it 2026-08-26T12:35:52Z RecruitTrap filtra gli account aziendali dai telefoni https://plainsec.com/stories/b96bb49f-487c-48dd-8adb-67730f00c29f/nemoclaw-s-local-model-api-stays-reachable PlainSec en 2026-08-26T04:21:23Z NemoClaw’s Local Model API Stays Reachable https://plainsec.com/it/stories/b96bb49f-487c-48dd-8adb-67730f00c29f/nemoclaw-s-local-model-api-stays-reachable PlainSec it 2026-08-26T04:21:23Z Una pagina web può avvelenare il modello locale di NemoClaw https://plainsec.com/stories/ddf389e0-86b1-40e5-8522-ed2f87d0b803/us-sanctions-mabna-wallets-raises-crypto-exposure PlainSec en 2026-08-26T06:40:08Z US Sanctions Mabna Wallets, Raises Crypto Exposure https://plainsec.com/it/stories/ddf389e0-86b1-40e5-8522-ed2f87d0b803/us-sanctions-mabna-wallets-raises-crypto-exposure PlainSec it 2026-08-26T06:40:08Z Le sanzioni USA allargano il rischio alle wallet crypto di Mabna https://plainsec.com/stories/7c6f7e90-a077-4af1-b2aa-77eaf2ce1e4f/google-cloud-split-its-patch-duty-in-two PlainSec en 2026-08-26T10:33:34Z Google Cloud Split Its Patch Duty in Two https://plainsec.com/it/stories/7c6f7e90-a077-4af1-b2aa-77eaf2ce1e4f/google-cloud-split-its-patch-duty-in-two PlainSec it 2026-08-26T10:33:34Z Google separa la falla del cloud dal rischio nei workload clienti https://plainsec.com/stories/52e52f7d-e88d-4b35-a230-72d7d489cf0a/furuno-s-fa-50-has-no-fix-path-left PlainSec en 2026-08-26T08:23:25Z Furuno’s FA-50 Has No Fix Path Left https://plainsec.com/it/stories/52e52f7d-e88d-4b35-a230-72d7d489cf0a/furuno-s-fa-50-has-no-fix-path-left PlainSec it 2026-08-26T08:23:25Z Un transponder Furuno non si può patchare https://plainsec.com/stories/39d60a3b-3388-4822-87fb-9efce6eff3bb/microsoft-s-22-cloud-fixes-shrink-local-patch-work PlainSec en 2026-08-25T04:27:49Z Defender flaw now has a PoC and federal clock https://plainsec.com/it/stories/39d60a3b-3388-4822-87fb-9efce6eff3bb/microsoft-s-22-cloud-fixes-shrink-local-patch-work PlainSec it 2026-08-25T04:27:49Z ShieldBreak trasforma Defender in un varco di privilegi https://plainsec.com/stories/9d9b1df9-0cfe-4287-9654-761cf31b473e/cisa-turns-logging-into-an-operating-blueprint PlainSec en 2026-08-25T04:27:49Z CISA Turns Logging into an Operating Blueprint https://plainsec.com/it/stories/9d9b1df9-0cfe-4287-9654-761cf31b473e/cisa-turns-logging-into-an-operating-blueprint PlainSec it 2026-08-25T04:27:49Z CISA sposta il logging da raccolta a governo operativo https://plainsec.com/stories/55baac47-4f09-442f-8712-1e912f39784d/wordlistloader-and-synkloader-abuse-trusted-surfaces PlainSec en 2026-08-25T04:27:49Z WordlistLoader and SynkLoader Abuse Trusted Surfaces https://plainsec.com/it/stories/55baac47-4f09-442f-8712-1e912f39784d/wordlistloader-and-synkloader-abuse-trusted-surfaces PlainSec it 2026-08-25T04:27:49Z ClickFix e Teams trasformano fiducia in accesso rivendibile https://plainsec.com/stories/636a64aa-782a-4162-8aa8-dae957e7744a/leaked-aws-keys-stay-live-for-years PlainSec en 2026-08-25T04:27:49Z Leaked AWS Keys Stay Live for Years https://plainsec.com/it/stories/636a64aa-782a-4162-8aa8-dae957e7744a/leaked-aws-keys-stay-live-for-years PlainSec it 2026-08-25T04:27:49Z Le chiavi AWS esposte restano vive per anni https://plainsec.com/stories/1b98725b-a422-44cf-b114-211ac3e237f0/doubloon-dredger-hijacks-notion-trust-for-token-theft PlainSec en 2026-08-25T04:27:49Z Doubloon Dredger Hijacks Notion Trust for Token Theft https://plainsec.com/it/stories/1b98725b-a422-44cf-b114-211ac3e237f0/doubloon-dredger-hijacks-notion-trust-for-token-theft PlainSec it 2026-08-25T04:27:49Z Notion fidato apre la strada ai token Microsoft https://plainsec.com/stories/584dbd84-423a-4308-af74-91beb7fff766/iran-linked-attack-took-uk-generator-offline PlainSec en 2026-08-25T04:27:49Z Iran-Linked Attack Took UK Generator Offline https://plainsec.com/it/stories/584dbd84-423a-4308-af74-91beb7fff766/iran-linked-attack-took-uk-generator-offline PlainSec it 2026-08-25T04:27:49Z Un piccolo generatore inglese entra nella mappa iraniana https://plainsec.com/stories/956bf54b-e40f-48e2-a758-7ea24671eeb4/firefox-extension-ring-rotates-from-sports-to-theft PlainSec en 2026-08-25T04:27:49Z Firefox Extension Ring Keeps Stealing Wallet Secrets https://plainsec.com/it/stories/956bf54b-e40f-48e2-a758-7ea24671eeb4/firefox-extension-ring-rotates-from-sports-to-theft PlainSec it 2026-08-25T04:27:49Z Le estensioni Firefox usa-e-getta diventano un cache segreta di wallet https://plainsec.com/stories/b2946647-5de5-42b6-bedd-3ffcde2a680e/apollo-confirms-cloud-breach-after-social-engineering PlainSec en 2026-08-25T04:27:49Z Apollo Confirms Cloud Breach, SSNs Exposed https://plainsec.com/it/stories/b2946647-5de5-42b6-bedd-3ffcde2a680e/apollo-confirms-cloud-breach-after-social-engineering PlainSec it 2026-08-25T04:27:49Z Apollo conferma il furto di SSN dal cloud https://plainsec.com/stories/c219e6e9-c533-445f-a070-88b895bcdf67/tiktok-settles-children-s-privacy-case-for-400-million PlainSec en 2026-08-25T04:27:49Z TikTok Settles COPPA Suit, Cleans Up Legacy Liability https://plainsec.com/it/stories/c219e6e9-c533-445f-a070-88b895bcdf67/tiktok-settles-children-s-privacy-case-for-400-million PlainSec it 2026-08-25T04:27:49Z TikTok chiude il conto della privacy infantile https://plainsec.com/stories/8609005f-83c7-4591-828b-5cb78bf123e7/aliexpress-fingerprinting-broke-bluetooth-audio PlainSec en 2026-08-25T04:27:49Z AliExpress Fingerprinting Exposed Browser Audio Side Effects https://plainsec.com/it/stories/8609005f-83c7-4591-828b-5cb78bf123e7/aliexpress-fingerprinting-broke-bluetooth-audio PlainSec it 2026-08-25T04:27:49Z AliExpress usa WebAudio per fingerprinting e rompe il Bluetooth https://plainsec.com/stories/fa641354-aec4-49fd-a65b-5b55f9ef1779/dofun-updaters-smuggled-malware-into-car-head-units PlainSec en 2026-08-25T12:38:45Z BadBox Reaches Car Head Units Through DoFun Updaters https://plainsec.com/it/stories/fa641354-aec4-49fd-a65b-5b55f9ef1779/dofun-updaters-smuggled-malware-into-car-head-units PlainSec it 2026-08-25T12:38:45Z BadBox passa dall'auto al canale di update fidato https://plainsec.com/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec en 2026-08-25T10:40:03Z Microsoft Says AI Gateways Became the Control Plane https://plainsec.com/it/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec it 2026-08-25T10:40:03Z I gateway AI diventano la nuova control plane da difendere https://plainsec.com/stories/221fe620-f03a-49c2-b731-f4159a20383c/atlassian-patches-multiple-high-severity-stack-flaws PlainSec en 2026-08-25T06:28:53Z Atlassian Fans One Library Fix Across Its Stack https://plainsec.com/it/stories/221fe620-f03a-49c2-b731-f4159a20383c/atlassian-patches-multiple-high-severity-stack-flaws PlainSec it 2026-08-25T06:28:53Z Atlassian chiude 83 falle ereditate nelle sue app server https://plainsec.com/stories/b1260bcb-f008-4618-afbc-f78fb957a1c8/toxicpanda-2-0-turns-android-permissions-into-persistence PlainSec en 2026-08-25T06:28:53Z ToxicPanda 2.0 Turns Android Permissions Into Persistence https://plainsec.com/it/stories/b1260bcb-f008-4618-afbc-f78fb957a1c8/toxicpanda-2-0-turns-android-permissions-into-persistence PlainSec it 2026-08-25T06:28:53Z Android si scopre governato dai suoi stessi permessi https://plainsec.com/stories/515c4b7c-de44-4d8f-8bba-c126a40e3fad/compass-security-shows-passkey-ceremonies-can-be-hooked PlainSec en 2026-08-25T12:38:45Z Compass Security Shows Passkey Ceremonies Can Be Hooked https://plainsec.com/it/stories/515c4b7c-de44-4d8f-8bba-c126a40e3fad/compass-security-shows-passkey-ceremonies-can-be-hooked PlainSec it 2026-08-25T12:38:45Z I passkey si possono alterare dal browser https://plainsec.com/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec en 2026-08-25T04:27:49Z GitLab Exploitation Turns Repo History Into a Target https://plainsec.com/it/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec it 2026-08-25T04:27:49Z GitLab passa da disclosure a manipolazione silenziosa https://plainsec.com/stories/37456d94-b7aa-45f6-8116-98737eb71fe9/pen-test-partners-found-wi-fi-bridging-ot-segmentation PlainSec en 2026-08-25T06:28:53Z Pen Test Partners Found Wi-Fi Bridging OT Segmentation https://plainsec.com/it/stories/37456d94-b7aa-45f6-8116-98737eb71fe9/pen-test-partners-found-wi-fi-bridging-ot-segmentation PlainSec it 2026-08-25T06:28:53Z Il Wi‑Fi di sala controllo ha rotto la segregazione OT https://plainsec.com/stories/e81f8856-944a-4000-bbd3-29bbeb6f8708/fortiguard-flags-nginx-heap-overflow-in-appliances PlainSec en 2026-08-25T10:40:03Z FortiGuard Flags NGINX Heap Overflow in Appliances https://plainsec.com/it/stories/e81f8856-944a-4000-bbd3-29bbeb6f8708/fortiguard-flags-nginx-heap-overflow-in-appliances PlainSec it 2026-08-25T10:40:03Z La falla in NGINX si allarga agli appliance che lo incorporano https://plainsec.com/stories/a779398c-dc12-4be5-b602-4e1da59bdfc5/calix-router-flaw-punches-through-the-customer-edge PlainSec en 2026-08-25T10:40:03Z Calix Router Flaw Punches Through the Customer Edge https://plainsec.com/it/stories/a779398c-dc12-4be5-b602-4e1da59bdfc5/calix-router-flaw-punches-through-the-customer-edge PlainSec it 2026-08-25T10:40:03Z Una richiesta anonima apre un varco permanente nei router Calix https://plainsec.com/stories/5b1bd3b9-132a-4c85-b15c-57495abeacf6/uat-10147-hides-spectre-inside-server-intrusions PlainSec en 2026-08-25T08:37:44Z UAT-10147 Hides SPECTRE Inside Server Intrusions https://plainsec.com/it/stories/5b1bd3b9-132a-4c85-b15c-57495abeacf6/uat-10147-hides-spectre-inside-server-intrusions PlainSec it 2026-08-25T08:37:44Z SPECTRE trasforma un server compromesso in una fonte di reddito https://plainsec.com/stories/4c251ddb-ceeb-4d2c-97b1-2e8eff6f3858/xz-utils-showed-build-inputs-are-part-of-the-attack-surface PlainSec en 2026-08-24T04:25:42Z XZ Utils Showed Build Inputs Are Part of the Attack Surface https://plainsec.com/it/stories/4c251ddb-ceeb-4d2c-97b1-2e8eff6f3858/xz-utils-showed-build-inputs-are-part-of-the-attack-surface PlainSec it 2026-08-24T04:25:42Z XZ Utils mostra che il bersaglio è la build https://plainsec.com/stories/287ef7ed-0f09-4a19-830f-b2d71850aeb0/grok-followed-hidden-instructions-in-ciphertext-pages PlainSec en 2026-08-24T04:25:42Z Grok Followed Hidden Instructions in Ciphertext Pages https://plainsec.com/it/stories/287ef7ed-0f09-4a19-830f-b2d71850aeb0/grok-followed-hidden-instructions-in-ciphertext-pages PlainSec it 2026-08-24T04:25:42Z Grok aggirato con istruzioni cifrate nascoste https://plainsec.com/stories/34d355df-d149-40ab-89e4-659a2523f46d/openai-slows-frontier-training-and-research-access PlainSec en 2026-08-24T04:25:42Z OpenAI Moves Model Security Into Runtime Containment https://plainsec.com/it/stories/34d355df-d149-40ab-89e4-659a2523f46d/openai-slows-frontier-training-and-research-access PlainSec it 2026-08-24T04:25:42Z OpenAI porta il controllo dentro il runtime dei model https://plainsec.com/stories/2ee230e7-641e-4a0c-81d7-779006c90433/citrix-netscaler-flaws-hit-gateway-trust-points PlainSec en 2026-08-24T04:25:42Z Citrix NetScaler Bypass Targets Trust Roles https://plainsec.com/it/stories/2ee230e7-641e-4a0c-81d7-779006c90433/citrix-netscaler-flaws-hit-gateway-trust-points PlainSec it 2026-08-24T04:25:42Z Il front door di NetScaler salta il login su ruoli chiave https://plainsec.com/stories/a283a891-94f7-4226-bab9-8545dd606c8a/cybersheath-survey-shows-sprs-scores-losing-trust PlainSec en 2026-08-24T08:30:40Z CyberSheath Survey Shows SPRS Scores Losing Trust https://plainsec.com/it/stories/a283a891-94f7-4226-bab9-8545dd606c8a/cybersheath-survey-shows-sprs-scores-losing-trust PlainSec it 2026-08-24T08:30:40Z I punteggi CMMC salgono, ma perde fiducia il loro valore https://plainsec.com/stories/c035ed06-e750-4a52-be23-f034c3fc1470/cisco-secure-workload-needs-three-part-hardening PlainSec en 2026-08-24T08:30:40Z Cisco Secure Workload Gets Five-CVE Hardening Fix https://plainsec.com/it/stories/c035ed06-e750-4a52-be23-f034c3fc1470/cisco-secure-workload-needs-three-part-hardening PlainSec it 2026-08-24T08:30:40Z Cinque CVE in Cisco Secure Workload richiedono aggiornamenti coordinati https://plainsec.com/stories/afeb6e07-6c25-42c0-8369-f026bb992bc8/sickkids-data-exposure-stays-outside-patient-systems PlainSec en 2026-08-24T04:25:42Z SickKids Data Exposure Stays Outside Patient Systems https://plainsec.com/it/stories/afeb6e07-6c25-42c0-8369-f026bb992bc8/sickkids-data-exposure-stays-outside-patient-systems PlainSec it 2026-08-24T04:25:42Z I dati HR di SickKids esposti, non i sistemi clinici https://plainsec.com/stories/f712f12e-0956-4934-9969-050fc0575251/rust-crates-hid-malware-in-build-scripts PlainSec en 2026-08-24T04:25:42Z North Korean Link Deepens Rust Build-Time Poisoning https://plainsec.com/it/stories/f712f12e-0956-4934-9969-050fc0575251/rust-crates-hid-malware-in-build-scripts PlainSec it 2026-08-24T04:25:42Z Compilare bastava per eseguire il backdoor nei crate Rust https://plainsec.com/stories/9b074b15-9f5b-48de-9d7f-ac03b5a23aea/dgraph-alpha-rpc-lets-outsiders-replace-group-storage PlainSec en 2026-08-24T06:31:21Z Dgraph Alpha RPC Lets Outsiders Replace Group Storage https://plainsec.com/it/stories/9b074b15-9f5b-48de-9d7f-ac03b5a23aea/dgraph-alpha-rpc-lets-outsiders-replace-group-storage PlainSec it 2026-08-24T06:31:21Z Un RPC pubblico di Dgraph può cancellare e sostituire gruppi https://plainsec.com/stories/fe2b317d-e6dc-4f2a-bce8-2acedc33400e/iran-linked-hackers-knock-uk-generator-offline-for-days PlainSec en 2026-08-24T15:00:53Z Iran-Linked Hackers Knock UK Generator Offline for Days https://plainsec.com/it/stories/fe2b317d-e6dc-4f2a-bce8-2acedc33400e/iran-linked-hackers-knock-uk-generator-offline-for-days PlainSec it 2026-08-24T15:00:53Z Quattro giorni di fermo in un piccolo generatore UK https://plainsec.com/stories/ad316e5d-c3b6-4215-a642-75dbc2b56c8a/agent-tesla-hides-in-emoji-laced-finance-lures PlainSec en 2026-08-24T12:45:24Z Agent Tesla Hides in Emoji-Laced Finance Lures https://plainsec.com/it/stories/ad316e5d-c3b6-4215-a642-75dbc2b56c8a/agent-tesla-hides-in-emoji-laced-finance-lures PlainSec it 2026-08-24T12:45:24Z Agent Tesla v4 passa nei filtri grazie agli emoji https://plainsec.com/stories/ca87b915-6da4-4704-b23a-8658e4610b79/check-point-finds-a-signed-windows-kernel-abuse-path PlainSec en 2026-08-24T06:31:21Z Check Point Finds a Signed Windows Kernel Abuse Path https://plainsec.com/it/stories/ca87b915-6da4-4704-b23a-8658e4610b79/check-point-finds-a-signed-windows-kernel-abuse-path PlainSec it 2026-08-24T06:31:21Z Un driver firmato da Microsoft può diventare un primitive kernel https://plainsec.com/stories/a21564c8-49c1-477c-8ea7-1d05af0ca702/omada-gateway-patches-span-many-models PlainSec en 2026-08-24T04:25:42Z Omada Gateway Patches Span Many Models https://plainsec.com/it/stories/a21564c8-49c1-477c-8ea7-1d05af0ca702/omada-gateway-patches-span-many-models PlainSec it 2026-08-24T04:25:42Z Molti modelli Omada, una patch per ciascuno https://plainsec.com/stories/5e750126-7a80-4e2a-b578-a6d412e66324/isolated-vm-flaw-breaks-the-sandbox-boundary PlainSec en 2026-08-24T06:31:21Z isolated-vm Flaw Breaks the Sandbox Boundary https://plainsec.com/it/stories/5e750126-7a80-4e2a-b578-a6d412e66324/isolated-vm-flaw-breaks-the-sandbox-boundary PlainSec it 2026-08-24T06:31:21Z Il confine dell’isolamento cede nel marshalling di isolated-vm https://plainsec.com/stories/e79b7f4d-559c-4e0a-8889-0a2c4e1542de/trojanized-npm-packages-load-redc2-on-import PlainSec en 2026-08-24T04:25:42Z Trojanized npm Packages Load RedC2 on Import https://plainsec.com/it/stories/e79b7f4d-559c-4e0a-8889-0a2c4e1542de/trojanized-npm-packages-load-redc2-on-import PlainSec it 2026-08-24T04:25:42Z Un import trasforma un pacchetto npm in backdoor Linux https://plainsec.com/stories/c1932610-2ae9-457b-b2d4-480ffc771377/black-kite-finds-ransomware-still-prefers-mid-market-manufacturers PlainSec en 2026-08-24T06:31:21Z Black Kite Finds Ransomware Still Prefers Mid-Market Manufacturers https://plainsec.com/it/stories/c1932610-2ae9-457b-b2d4-480ffc771377/black-kite-finds-ransomware-still-prefers-mid-market-manufacturers PlainSec it 2026-08-24T06:31:21Z Il ransomware si concentra ancora sui mid-market manifatturieri https://plainsec.com/stories/52e43485-7483-4e1a-b380-e77e5a6b1036/wyden-pushes-gao-to-audit-federal-spyware-use PlainSec en 2026-08-24T06:31:21Z Wyden Pushes GAO to Audit Federal Spyware Use https://plainsec.com/it/stories/52e43485-7483-4e1a-b380-e77e5a6b1036/wyden-pushes-gao-to-audit-federal-spyware-use PlainSec it 2026-08-24T06:31:21Z La vera posta in gioco è il vuoto di controllo sullo spyware federale https://plainsec.com/stories/882d133d-bfe7-4b8b-a04d-309881a62b35/ibm-websphere-advisory-mixes-login-bypass-and-dos PlainSec en 2026-08-24T06:31:21Z IBM WebSphere Advisory Mixes Login Bypass and DoS https://plainsec.com/it/stories/882d133d-bfe7-4b8b-a04d-309881a62b35/ibm-websphere-advisory-mixes-login-bypass-and-dos PlainSec it 2026-08-24T06:31:21Z WebSphere Liberty rompe il confine di autenticazione