https://plainsec.com/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec en 2026-08-13T05:04:45Z vCenter Exploits Left Reverse SSH Footholds Behind https://plainsec.com/it/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec it 2026-08-13T05:04:45Z vCenter patchato, ma resta un foothold nascosto https://plainsec.com/stories/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec en 2026-08-13T05:04:45Z LiteLLM Breach Grew Into CI Secret Spill https://plainsec.com/it/stories/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec it 2026-08-13T05:04:45Z Un archivio da 153 GB allarga il caso LiteLLM https://plainsec.com/stories/c7167701-3be8-45a9-ac4b-b773a6acb2f4/gunra-uses-fortinet-and-schneider-flaws-for-extortion PlainSec en 2026-08-13T05:04:45Z Gunra Shifts Ransomware to Perimeter Break-ins https://plainsec.com/it/stories/c7167701-3be8-45a9-ac4b-b773a6acb2f4/gunra-uses-fortinet-and-schneider-flaws-for-extortion PlainSec it 2026-08-13T05:04:45Z Gunra sposta il ransomware dal phishing al perimetro https://plainsec.com/stories/12170079-2a02-4b64-8017-79bdbf8cea75/sharepoint-jwt-flaw-is-being-exploited PlainSec en 2026-08-13T09:16:12Z SharePoint JWT Flaw Is Being Exploited https://plainsec.com/it/stories/12170079-2a02-4b64-8017-79bdbf8cea75/sharepoint-jwt-flaw-is-being-exploited PlainSec it 2026-08-13T09:16:12Z File e permessi esposti dopo il bypass di SharePoint https://plainsec.com/stories/44eaa83b-6efb-4f87-aef6-a4b28d36ade1/cisa-orders-two-week-fix-for-exploited-windows-bug PlainSec en 2026-08-13T05:04:45Z CISA Orders Two-Week Fix for Exploited Windows Bug https://plainsec.com/it/stories/44eaa83b-6efb-4f87-aef6-a4b28d36ade1/cisa-orders-two-week-fix-for-exploited-windows-bug PlainSec it 2026-08-13T05:04:45Z La campagna di recruiting diventa la via per prendere Windows https://plainsec.com/stories/55e095d0-c669-4184-af19-2a8c47582c3e/private-apn-became-a-bridge-into-chp-controls PlainSec en 2026-08-13T05:04:45Z Sandworm Used Private APN to Reach CHP Controls https://plainsec.com/it/stories/55e095d0-c669-4184-af19-2a8c47582c3e/private-apn-became-a-bridge-into-chp-controls PlainSec it 2026-08-13T05:04:45Z Un private APN è diventato il ponte verso i controlli CHP https://plainsec.com/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec en 2026-08-13T05:04:45Z NetFoundry Survey Flags AI Control Gap https://plainsec.com/it/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec it 2026-08-13T05:04:45Z L’AI allarga la superficie d’attacco più di quanto si veda https://plainsec.com/stories/5c81f7c4-4035-464c-891d-b10d7956f9ae/akira-used-safe-mode-to-silence-edr PlainSec en 2026-08-13T10:28:04Z Akira Used Safe Mode to Silence EDR https://plainsec.com/it/stories/5c81f7c4-4035-464c-891d-b10d7956f9ae/akira-used-safe-mode-to-silence-edr PlainSec it 2026-08-13T10:28:04Z Safe Mode spegne EDR e Defender prima del ransomware https://plainsec.com/stories/a07aa44a-6beb-4a1b-92d3-1fa248628842/cisco-talos-finds-jwr-runs-live-phishing-sessions PlainSec en 2026-08-13T12:53:02Z Cisco Talos Finds JWR Runs Live Phishing Sessions https://plainsec.com/it/stories/a07aa44a-6beb-4a1b-92d3-1fa248628842/cisco-talos-finds-jwr-runs-live-phishing-sessions PlainSec it 2026-08-13T12:53:02Z Il phishing diventa una sessione viva, non un modulo rubato https://plainsec.com/stories/d1727c6a-20bb-4109-b9a1-eae6690d49df/defender-cloud-scan-opens-a-system-path PlainSec en 2026-08-13T12:53:02Z Defender Cloud Scan Opens a SYSTEM Path https://plainsec.com/it/stories/d1727c6a-20bb-4109-b9a1-eae6690d49df/defender-cloud-scan-opens-a-system-path PlainSec it 2026-08-13T12:53:02Z Defender torna a esporre SYSTEM dopo la patch RoguePlanet https://plainsec.com/stories/1e1dab3a-b4ad-4e04-bf4b-dd7e9b779476/ceva-breach-exposes-steam-and-retail-shipping-data PlainSec en 2026-08-13T14:39:11Z CEVA Breach Exposes Steam and Retail Shipping Data https://plainsec.com/it/stories/1e1dab3a-b4ad-4e04-bf4b-dd7e9b779476/ceva-breach-exposes-steam-and-retail-shipping-data PlainSec it 2026-08-13T14:39:11Z La fiducia nella consegna diventa il vero bersaglio https://plainsec.com/stories/033e486a-8465-4724-a0c6-3f12cb9a7f45/acro-s-portal-breaches-exposed-patch-and-alert-gaps PlainSec en 2026-08-13T16:27:53Z ICO Rebukes ACRO Over Patch Ownership Failures https://plainsec.com/it/stories/033e486a-8465-4724-a0c6-3f12cb9a7f45/acro-s-portal-breaches-exposed-patch-and-alert-gaps PlainSec it 2026-08-13T16:27:53Z Il fallimento di governance che ha tenuto aperto ACRO https://plainsec.com/stories/f8532985-0555-4caa-9ffa-dfb6ec1c182e/helix-claims-uber-freight-mailbox-theft PlainSec en 2026-08-13T05:04:45Z Helix Claims Uber Freight Mailbox Theft https://plainsec.com/it/stories/f8532985-0555-4caa-9ffa-dfb6ec1c182e/helix-claims-uber-freight-mailbox-theft PlainSec it 2026-08-13T05:04:45Z Il helpdesk diventa il varco per mail e cloud di Uber Freight https://plainsec.com/stories/91b3b595-c103-40fc-80d9-92870537da75/sonicwall-fixes-root-escalation-flaws-in-appliances PlainSec en 2026-08-13T16:27:53Z SonicWall GMS RCEs Hit Retired Management Platform https://plainsec.com/it/stories/91b3b595-c103-40fc-80d9-92870537da75/sonicwall-fixes-root-escalation-flaws-in-appliances PlainSec it 2026-08-13T16:27:53Z GMS ritirato, ma ancora esposto a due RCE critiche https://plainsec.com/stories/51186764-75e7-4aca-94c9-3eb459809784/sap-august-patch-day-hits-mixed-landscapes PlainSec en 2026-08-13T16:27:53Z SAP Patch Day Mixes Open and Privileged Flaws https://plainsec.com/it/stories/51186764-75e7-4aca-94c9-3eb459809784/sap-august-patch-day-hits-mixed-landscapes PlainSec it 2026-08-13T16:27:53Z SAP divide l’esposizione tra bug senza login e bug di privilegio https://plainsec.com/stories/a81d37b6-dfb8-4780-8868-eb3fed36d0d0/white-house-opens-door-to-vetted-offensive-cyber-firms PlainSec en 2026-08-13T14:39:11Z White House Opens Door to Vetted Offensive Cyber Firms https://plainsec.com/it/stories/a81d37b6-dfb8-4780-8868-eb3fed36d0d0/white-house-opens-door-to-vetted-offensive-cyber-firms PlainSec it 2026-08-13T14:39:11Z Gli Stati Uniti aprono agli operatori privati nelle offensive cyber https://plainsec.com/stories/891bef9d-1456-4b4f-8386-9fc3e2650ec4/seaweedfs-ssrf-exposes-internal-cloud-services PlainSec en 2026-08-13T16:27:53Z SeaweedFS SSRF Exposes Internal Cloud Services https://plainsec.com/it/stories/891bef9d-1456-4b4f-8386-9fc3e2650ec4/seaweedfs-ssrf-exposes-internal-cloud-services PlainSec it 2026-08-13T16:27:53Z SeaweedFS espone metadata cloud tramite SSRF https://plainsec.com/stories/688f31d8-a237-4f3a-95b0-f60051b8cfdc/fortinet-fixes-auth-paths-that-break-trust-boundaries PlainSec en 2026-08-13T16:27:53Z Fortinet Fixes Auth Paths That Break Trust Boundaries https://plainsec.com/it/stories/688f31d8-a237-4f3a-95b0-f60051b8cfdc/fortinet-fixes-auth-paths-that-break-trust-boundaries PlainSec it 2026-08-13T16:27:53Z Fortinet corregge un login spurio su FortiWeb e FortiManager https://plainsec.com/stories/084d747f-4e15-4de7-aee0-fd95254a3451/kimwolf-v7-hides-ddos-traffic-behind-browsers PlainSec en 2026-08-12T04:31:47Z Kimwolf Offloads Break-ins From Its DDoS Core https://plainsec.com/it/stories/084d747f-4e15-4de7-aee0-fd95254a3451/kimwolf-v7-hides-ddos-traffic-behind-browsers PlainSec it 2026-08-12T04:31:47Z Kimwolf v7 sposta la propagazione fuori dal botnet https://plainsec.com/stories/74c41fd8-c96f-4487-a8af-f2a53542910e/zoom-annotation-flaw-let-attendees-hijack-peers PlainSec en 2026-08-13T00:27:40Z Zoom Fixes Four Annotation Flaws After Disclosure https://plainsec.com/it/stories/74c41fd8-c96f-4487-a8af-f2a53542910e/zoom-annotation-flaw-let-attendees-hijack-peers PlainSec it 2026-08-13T00:27:40Z Zoom chiude quattro falle nell’annotazione delle riunioni https://plainsec.com/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec en 2026-08-12T16:36:18Z City-Forum Reads Portal Data Through Guest Accounts https://plainsec.com/it/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec it 2026-08-12T16:36:18Z Portali Salesforce e ServiceNow letti via guest per 17 mesi https://plainsec.com/stories/844a3091-5da3-4214-95b0-4b7b8ecd5eac/delta-fake-wi-fi-forced-mid-flight-shutdown PlainSec en 2026-08-12T22:29:07Z Delta Fake Wi-Fi Drew FBI Scrutiny https://plainsec.com/it/stories/844a3091-5da3-4214-95b0-4b7b8ecd5eac/delta-fake-wi-fi-forced-mid-flight-shutdown PlainSec it 2026-08-12T22:29:07Z Un falso hotspot in volo diventa caso federale https://plainsec.com/stories/58d4d80a-5e97-4a3d-b194-767041529e19/hostile-sims-gain-control-of-quectel-modems PlainSec en 2026-08-12T04:31:47Z Hostile SIMs Gain Control of Quectel Modems https://plainsec.com/it/stories/58d4d80a-5e97-4a3d-b194-767041529e19/hostile-sims-gain-control-of-quectel-modems PlainSec it 2026-08-12T04:31:47Z La SIM diventa una console sul modem dei dispositivi cellulari https://plainsec.com/stories/372e60c5-4ac7-493a-9d77-a142a9068f70/head-mare-turns-trueconf-updates-into-malware-delivery PlainSec en 2026-08-13T02:32:16Z Head Mare Turns TrueConf Updates Into Malware Delivery https://plainsec.com/it/stories/372e60c5-4ac7-493a-9d77-a142a9068f70/head-mare-turns-trueconf-updates-into-malware-delivery PlainSec it 2026-08-13T02:32:16Z Il canale di update di TrueConf diventa un vettore di malware https://plainsec.com/stories/c844f80d-09be-4236-95c4-e3cb59546d03/arista-velocloud-patch-reaches-a-trust-anchor PlainSec en 2026-08-12T20:41:55Z Arista VeloCloud Patch Reaches a Trust Anchor https://plainsec.com/it/stories/c844f80d-09be-4236-95c4-e3cb59546d03/arista-velocloud-patch-reaches-a-trust-anchor PlainSec it 2026-08-12T20:41:55Z La fiducia dell’orchestratore può essere riscritta senza login https://plainsec.com/stories/a0cc2895-9847-4128-bee1-56f84a1da851/fake-startup-showed-onboarding-s-real-access-gap PlainSec en 2026-08-12T22:29:07Z FBI Probe Validates North Korean Remote-Hire Threat https://plainsec.com/it/stories/a0cc2895-9847-4128-bee1-56f84a1da851/fake-startup-showed-onboarding-s-real-access-gap PlainSec it 2026-08-12T22:29:07Z Il rischio dell’onboarding remoto entra in un’indagine FBI https://plainsec.com/stories/2390d752-d189-42bb-9bc8-932c742b62a4/microsoft-patch-tuesday-fixes-active-windows-driver-exploit PlainSec en 2026-08-11T22:33:32Z Lazarus Ties Windows Zero-Day to Dream Job https://plainsec.com/it/stories/2390d752-d189-42bb-9bc8-932c742b62a4/microsoft-patch-tuesday-fixes-active-windows-driver-exploit PlainSec it 2026-08-11T22:33:32Z Lazarus porta il zero-day Windows dentro Operation Dream Job https://plainsec.com/stories/8b05db0b-ac9c-45a2-8b81-1377f606fdb9/deadlock-uses-decentralized-services-to-keep-extortion-alive PlainSec en 2026-08-11T04:34:28Z DeadLock Moves Extortion Behind Blockchain Pointers https://plainsec.com/it/stories/8b05db0b-ac9c-45a2-8b81-1377f606fdb9/deadlock-uses-decentralized-services-to-keep-extortion-alive PlainSec it 2026-08-11T04:34:28Z DeadLock sposta l’estorsione su Session e Polygon https://plainsec.com/stories/0f4302ca-10a5-40b0-bf0f-e0a06db912ac/internet-exposed-plcs-fuel-multistate-water-attacks PlainSec en 2026-08-11T04:34:28Z Internet-Exposed PLCs Fuel Multistate Water Attacks https://plainsec.com/it/stories/0f4302ca-10a5-40b0-bf0f-e0a06db912ac/internet-exposed-plcs-fuel-multistate-water-attacks PlainSec it 2026-08-11T04:34:28Z PLC esposti in acqua e reflui sotto attacco in più stati https://plainsec.com/stories/25aa766b-5c7c-4e5f-88a0-5989788fa64b/sandworm-lures-ukrainian-admins-through-fake-hiring PlainSec en 2026-08-12T00:31:38Z Sandworm Lures Ukrainian Admins Through Fake Hiring https://plainsec.com/it/stories/25aa766b-5c7c-4e5f-88a0-5989788fa64b/sandworm-lures-ukrainian-admins-through-fake-hiring PlainSec it 2026-08-12T00:31:38Z Recruiter finti per colpire gli amministratori IT https://plainsec.com/stories/c50e8f4f-11b7-4ab3-9ef2-2be8a50480e4/gunra-raas-turns-edge-access-into-extortion PlainSec en 2026-08-12T02:42:28Z Gunra RaaS Turns Edge Access Into Extortion https://plainsec.com/it/stories/c50e8f4f-11b7-4ab3-9ef2-2be8a50480e4/gunra-raas-turns-edge-access-into-extortion PlainSec it 2026-08-12T02:42:28Z Gunra cresce come RaaS e punta gli edge esposti https://plainsec.com/stories/94311345-a115-4263-afcb-8aace04b902b/openai-pushes-frontier-cyber-models-into-security-tools PlainSec en 2026-08-12T00:31:38Z OpenAI Puts Cyber AI in Partner Hands https://plainsec.com/it/stories/94311345-a115-4263-afcb-8aace04b902b/openai-pushes-frontier-cyber-models-into-security-tools PlainSec it 2026-08-12T00:31:38Z OpenAI sposta il cyber più capace nei partner approvati https://plainsec.com/stories/8c96cd4d-0df2-4dc7-8d1f-8795fc119a02/ghostjacking-turns-ai-telemetry-into-attack-commands PlainSec en 2026-08-11T15:46:05Z Ghostjacking Turns AI Telemetry Into Attack Commands https://plainsec.com/it/stories/8c96cd4d-0df2-4dc7-8d1f-8795fc119a02/ghostjacking-turns-ai-telemetry-into-attack-commands PlainSec it 2026-08-11T15:46:05Z I log diventano comandi per gli AI agent https://plainsec.com/stories/a94a5ade-a652-4e4f-ab5b-16016a952fad/openai-pauses-astra-over-cyber-capability-risk PlainSec en 2026-08-12T00:31:38Z OpenAI Pauses Astra Over Cyber Capability Risk https://plainsec.com/it/stories/a94a5ade-a652-4e4f-ab5b-16016a952fad/openai-pauses-astra-over-cyber-capability-risk PlainSec it 2026-08-12T00:31:38Z Astra viene trattato come software non fidato