https://plainsec.com/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec en 2026-08-17T13:39:09Z SAP Commerce Cloud Exploit Lands Days After Patch https://plainsec.com/it/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec it 2026-08-17T13:39:09Z SAP Commerce Cloud esposto senza credenziali rubate https://plainsec.com/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec en 2026-08-17T16:47:27Z DGFiP Breach Ran Through Trusted Accounts https://plainsec.com/it/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec it 2026-08-17T16:47:27Z La sospensione degli account non ha fermato il furto in DGFiP https://plainsec.com/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec en 2026-08-17T05:19:58Z Evooo1Bot Turns Edge CVEs Into Proxy Nodes https://plainsec.com/it/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec it 2026-08-17T05:19:58Z I gateway compromessi diventano proxy persistenti https://plainsec.com/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec en 2026-08-17T10:39:49Z SafePal Order Leak Moves Into Resale https://plainsec.com/it/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec it 2026-08-17T10:39:49Z Dalla fuga di dati al mercato del phishing SafePal https://plainsec.com/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec en 2026-08-17T20:43:06Z Azure Tenant Dumps Expose the Org Chart https://plainsec.com/it/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec it 2026-08-17T20:43:06Z L’export del tenant diventa la mappa per il BEC https://plainsec.com/stories/f000ca9f-a99b-4898-960c-8ee812c9cb8d/mcp-connectors-hide-a-high-value-trust-boundary PlainSec en 2026-08-17T13:39:09Z MCP Connectors Hide a High-Value Trust Boundary https://plainsec.com/it/stories/f000ca9f-a99b-4898-960c-8ee812c9cb8d/mcp-connectors-hide-a-high-value-trust-boundary PlainSec it 2026-08-17T13:39:09Z MCP trasforma i connector AI in un archivio di segreti privilegiati https://plainsec.com/stories/8f43d879-cce0-4393-b6da-737aa6896b38/cavern-lets-operators-swap-c2-channels-on-the-fly PlainSec en 2026-08-17T20:43:06Z Cavern Lets Operators Swap C2 Channels on the Fly https://plainsec.com/it/stories/8f43d879-cce0-4393-b6da-737aa6896b38/cavern-lets-operators-swap-c2-channels-on-the-fly PlainSec it 2026-08-17T20:43:06Z Cavern cambia canale a ogni transazione https://plainsec.com/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec en 2026-08-17T08:34:49Z vCenter Exploits Left Reverse SSH Footholds Behind https://plainsec.com/it/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec it 2026-08-17T08:34:49Z vCenter patchato, ma resta un foothold nascosto https://plainsec.com/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec en 2026-08-17T19:16:51Z AmnesiaStealer Adds Live Browser Session Control https://plainsec.com/it/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec it 2026-08-17T19:16:51Z AmnesiaStealer passa dal furto account al controllo della sessione https://plainsec.com/stories/1bcd3645-4ab1-4838-9ed9-dc11ecc7c858/certighost-lets-a-domain-user-impersonate-a-dc PlainSec en 2026-08-17T19:16:51Z Certighost Lets a Domain User Impersonate a DC https://plainsec.com/it/stories/1bcd3645-4ab1-4838-9ed9-dc11ecc7c858/certighost-lets-a-domain-user-impersonate-a-dc PlainSec it 2026-08-17T19:16:51Z La CA di dominio diventa un oracle di fiducia https://plainsec.com/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec en 2026-08-17T15:02:03Z Agent Guardrails Fail Before the Model Speaks https://plainsec.com/it/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec it 2026-08-17T15:02:03Z I guardrail del modello non bastano più agli agent https://plainsec.com/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec en 2026-08-17T16:47:27Z WindRelay and SpyNote Fueled a 13-Minute Call Scam https://plainsec.com/it/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec it 2026-08-17T16:47:27Z Una chiamata da 13 minuti basta per clonare una carta https://plainsec.com/stories/5c9c36b2-26fc-4c9d-95bc-8cbdd2e85f83/white-house-lets-contractors-join-offensive-cyber-operations PlainSec en 2026-08-17T06:33:20Z White House Lets Contractors Join Offensive Cyber Operations https://plainsec.com/it/stories/5c9c36b2-26fc-4c9d-95bc-8cbdd2e85f83/white-house-lets-contractors-join-offensive-cyber-operations PlainSec it 2026-08-17T06:33:20Z Le offensive cyber passano anche ai contractor https://plainsec.com/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec en 2026-08-17T16:47:27Z User Profile Builder Bug Can Hand Out Admin Sessions https://plainsec.com/it/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec it 2026-08-17T16:47:27Z La falla che trasforma una registrazione fallita in admin https://plainsec.com/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec en 2026-08-17T20:43:06Z Irregular’s Test Setup Reached Real Targets https://plainsec.com/it/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec it 2026-08-17T20:43:06Z Il test per misurare i modelli è finito su un sito reale https://plainsec.com/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec en 2026-08-17T13:39:09Z Unisoc Modem Flaw Breaks the Android Boundary https://plainsec.com/it/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec it 2026-08-17T13:39:09Z Il modem diventa la via d’ingresso al kernel Android https://plainsec.com/stories/75161f1c-4fbc-4ca5-97d9-4be2b3dc2f6f/nist-rethinks-vulnerability-data-for-ai-speed PlainSec en 2026-08-17T20:43:06Z NIST Opens NVD Modernization With an Unseen AI Tool https://plainsec.com/it/stories/75161f1c-4fbc-4ca5-97d9-4be2b3dc2f6f/nist-rethinks-vulnerability-data-for-ai-speed PlainSec it 2026-08-17T20:43:06Z NVD verso l'AI, ma senza mostrare il sistema https://plainsec.com/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec en 2026-08-17T20:43:06Z AI Agents Move Supply-Chain Trust Up a Layer https://plainsec.com/it/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec it 2026-08-17T20:43:06Z Gli agenti AI spostano la trust decision nel supply chain https://plainsec.com/stories/9dff98a1-ea40-4cdc-8841-ad9f2b47f186/flashpoint-shows-infostealers-now-run-at-machine-speed PlainSec en 2026-08-17T20:43:06Z Flashpoint Shows Infostealers Now Run at Machine Speed https://plainsec.com/it/stories/9dff98a1-ea40-4cdc-8841-ad9f2b47f186/flashpoint-shows-infostealers-now-run-at-machine-speed PlainSec it 2026-08-17T20:43:06Z I log rubati diventano un motore di accesso automatico https://plainsec.com/stories/ee2b3cff-27f8-41fb-aa22-a0978f95e239/adobe-campaign-classic-gets-a-trust-breaking-flaw-cluster PlainSec en 2026-08-16T04:27:48Z SAP Data Hub Adapter Draws Fast Exploitation Pressure https://plainsec.com/it/stories/ee2b3cff-27f8-41fb-aa22-a0978f95e239/adobe-campaign-classic-gets-a-trust-breaking-flaw-cluster PlainSec it 2026-08-16T04:27:48Z Gli scanner arrivano subito dopo la patch SAP https://plainsec.com/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec en 2026-08-15T10:27:15Z GeoServer Flaw Draws Fast Probing, Possible Server Takeover https://plainsec.com/it/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec it 2026-08-15T10:27:15Z GeoServer finisce nel mirino prima della patch https://plainsec.com/stories/2385c59a-5f75-4e86-a36f-6312a2f058a7/honeymyte-coolclient-hides-inside-a-signed-driver PlainSec en 2026-08-15T10:27:15Z HoneyMyte Adds a Signed Driver to CoolClient https://plainsec.com/it/stories/2385c59a-5f75-4e86-a36f-6312a2f058a7/honeymyte-coolclient-hides-inside-a-signed-driver PlainSec it 2026-08-15T10:27:15Z CoolClient scende nel kernel e sfugge agli strumenti https://plainsec.com/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec en 2026-08-15T04:24:45Z Jewelbug Merges Espionage and Crypto Theft https://plainsec.com/it/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec it 2026-08-15T04:24:45Z Jewelbug unisce spionaggio di Stato e furto crypto dallo stesso panel https://plainsec.com/stories/6fb6ec12-175b-48b1-8cbe-6759871eb15d/power-pages-misconfigurations-exposed-d365-data PlainSec en 2026-08-15T04:24:45Z Power Pages Misconfigurations Exposed D365 Data https://plainsec.com/it/stories/6fb6ec12-175b-48b1-8cbe-6759871eb15d/power-pages-misconfigurations-exposed-d365-data PlainSec it 2026-08-15T04:24:45Z Un portale Power Pages può esporre dati D365 su larga scala https://plainsec.com/stories/badca682-337b-43fd-a453-4d835ee99e3c/beacon-breach-traced-to-leaked-aws-key PlainSec en 2026-08-15T04:24:45Z Beacon Breach Traced to Leaked AWS Key https://plainsec.com/it/stories/badca682-337b-43fd-a453-4d835ee99e3c/beacon-breach-traced-to-leaked-aws-key PlainSec it 2026-08-15T04:24:45Z Una chiave AWS esposta svuota un CRM cifrato https://plainsec.com/stories/ee29fdae-b69f-49fe-b4c7-e4c652b1fa73/coordinated-water-utility-hits-span-a-dozen-states PlainSec en 2026-08-15T22:23:04Z Coordinated Water Utility Hits Span a Dozen States https://plainsec.com/it/stories/ee29fdae-b69f-49fe-b4c7-e4c652b1fa73/coordinated-water-utility-hits-span-a-dozen-states PlainSec it 2026-08-15T22:23:04Z Una campagna colpisce decine di piccoli acquedotti https://plainsec.com/stories/3e97206a-55d7-4da3-a850-da5e68225462/aws-acm-drops-email-validation-by-2027 PlainSec en 2026-08-16T00:26:48Z AWS ACM Drops Email Validation by 2027 https://plainsec.com/it/stories/3e97206a-55d7-4da3-a850-da5e68225462/aws-acm-drops-email-validation-by-2027 PlainSec it 2026-08-16T00:26:48Z ACM elimina l’email validation prima della scadenza di settore https://plainsec.com/stories/cf462b3e-75a2-4ba4-838a-9cbc6cc199f5/apple-puts-spyware-warnings-on-the-lock-screen PlainSec en 2026-08-15T08:27:32Z Apple Puts Spyware Warnings on the Lock Screen https://plainsec.com/it/stories/cf462b3e-75a2-4ba4-838a-9cbc6cc199f5/apple-puts-spyware-warnings-on-the-lock-screen PlainSec it 2026-08-15T08:27:32Z Gli alert spyware di Apple arrivano sulla lock screen https://plainsec.com/stories/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec en 2026-08-15T04:24:45Z LiteLLM Breach Grew Into CI Secret Spill https://plainsec.com/it/stories/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec it 2026-08-15T04:24:45Z Un archivio da 153 GB allarga il caso LiteLLM