https://plainsec.com/briefings/2026-08-12/c7167701-3be8-45a9-ac4b-b773a6acb2f4/gunra-uses-fortinet-and-schneider-flaws-for-extortion PlainSec en 2026-08-12T04:31:47Z Gunra Shifts Ransomware to Perimeter Break-ins https://plainsec.com/it/briefings/2026-08-12/c7167701-3be8-45a9-ac4b-b773a6acb2f4/gunra-uses-fortinet-and-schneider-flaws-for-extortion PlainSec it 2026-08-12T04:31:47Z Gunra sposta il ransomware dal phishing al perimetro https://plainsec.com/briefings/2026-08-12/084d747f-4e15-4de7-aee0-fd95254a3451/kimwolf-v7-hides-ddos-traffic-behind-browsers PlainSec en 2026-08-12T04:31:47Z Kimwolf Offloads Break-ins From Its DDoS Core https://plainsec.com/it/briefings/2026-08-12/084d747f-4e15-4de7-aee0-fd95254a3451/kimwolf-v7-hides-ddos-traffic-behind-browsers PlainSec it 2026-08-12T04:31:47Z Kimwolf v7 sposta la propagazione fuori dal botnet https://plainsec.com/briefings/2026-08-12/55e095d0-c669-4184-af19-2a8c47582c3e/private-apn-became-a-bridge-into-chp-controls PlainSec en 2026-08-12T04:31:47Z Sandworm Used Private APN to Reach CHP Controls https://plainsec.com/it/briefings/2026-08-12/55e095d0-c669-4184-af19-2a8c47582c3e/private-apn-became-a-bridge-into-chp-controls PlainSec it 2026-08-12T04:31:47Z Un private APN è diventato il ponte verso i controlli CHP https://plainsec.com/briefings/2026-08-12/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec en 2026-08-12T10:40:09Z Malicious LiteLLM Releases Leaked Cloud Secrets https://plainsec.com/it/briefings/2026-08-12/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec it 2026-08-12T10:40:09Z LiteLLM diventa un canale per rubare segreti cloud https://plainsec.com/briefings/2026-08-12/44eaa83b-6efb-4f87-aef6-a4b28d36ade1/cisa-orders-two-week-fix-for-exploited-windows-bug PlainSec en 2026-08-12T16:36:18Z CISA Orders Two-Week Fix for Exploited Windows Bug https://plainsec.com/it/briefings/2026-08-12/44eaa83b-6efb-4f87-aef6-a4b28d36ade1/cisa-orders-two-week-fix-for-exploited-windows-bug PlainSec it 2026-08-12T16:36:18Z La campagna di recruiting diventa la via per prendere Windows https://plainsec.com/briefings/2026-08-12/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec en 2026-08-12T16:36:18Z City-Forum Reads Portal Data Through Guest Accounts https://plainsec.com/it/briefings/2026-08-12/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec it 2026-08-12T16:36:18Z Portali Salesforce e ServiceNow letti via guest per 17 mesi https://plainsec.com/briefings/2026-08-12/1e1dab3a-b4ad-4e04-bf4b-dd7e9b779476/ceva-breach-exposes-steam-and-retail-shipping-data PlainSec en 2026-08-12T04:31:47Z CEVA Breach Exposes Steam and Retail Shipping Data https://plainsec.com/it/briefings/2026-08-12/1e1dab3a-b4ad-4e04-bf4b-dd7e9b779476/ceva-breach-exposes-steam-and-retail-shipping-data PlainSec it 2026-08-12T04:31:47Z La fiducia nella consegna diventa il vero bersaglio https://plainsec.com/briefings/2026-08-12/58d4d80a-5e97-4a3d-b194-767041529e19/hostile-sims-gain-control-of-quectel-modems PlainSec en 2026-08-12T04:31:47Z Hostile SIMs Gain Control of Quectel Modems https://plainsec.com/it/briefings/2026-08-12/58d4d80a-5e97-4a3d-b194-767041529e19/hostile-sims-gain-control-of-quectel-modems PlainSec it 2026-08-12T04:31:47Z La SIM diventa una console sul modem dei dispositivi cellulari https://plainsec.com/briefings/2026-08-12/372e60c5-4ac7-493a-9d77-a142a9068f70/head-mare-turns-trueconf-updates-into-malware-delivery PlainSec en 2026-08-12T04:31:47Z Head Mare Turns TrueConf Updates Into Malware Delivery https://plainsec.com/it/briefings/2026-08-12/372e60c5-4ac7-493a-9d77-a142a9068f70/head-mare-turns-trueconf-updates-into-malware-delivery PlainSec it 2026-08-12T04:31:47Z Il canale di update di TrueConf diventa un vettore di malware https://plainsec.com/briefings/2026-08-12/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec en 2026-08-12T13:00:15Z vCenter Exploits Left Reverse SSH Footholds Behind https://plainsec.com/it/briefings/2026-08-12/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec it 2026-08-12T13:00:15Z vCenter patchato, ma resta un foothold nascosto https://plainsec.com/briefings/2026-08-12/5c81f7c4-4035-464c-891d-b10d7956f9ae/akira-used-safe-mode-to-silence-edr PlainSec en 2026-08-12T18:34:35Z Akira Used Safe Mode to Silence EDR https://plainsec.com/it/briefings/2026-08-12/5c81f7c4-4035-464c-891d-b10d7956f9ae/akira-used-safe-mode-to-silence-edr PlainSec it 2026-08-12T18:34:35Z Safe Mode spegne EDR e Defender prima del ransomware https://plainsec.com/briefings/2026-08-12/f8532985-0555-4caa-9ffa-dfb6ec1c182e/helix-claims-uber-freight-mailbox-theft PlainSec en 2026-08-12T18:34:35Z Helix Claims Uber Freight Mailbox Theft https://plainsec.com/it/briefings/2026-08-12/f8532985-0555-4caa-9ffa-dfb6ec1c182e/helix-claims-uber-freight-mailbox-theft PlainSec it 2026-08-12T18:34:35Z Il helpdesk diventa il varco per mail e cloud di Uber Freight https://plainsec.com/briefings/2026-08-12/c844f80d-09be-4236-95c4-e3cb59546d03/arista-velocloud-patch-reaches-a-trust-anchor PlainSec en 2026-08-12T20:41:55Z Arista VeloCloud Patch Reaches a Trust Anchor https://plainsec.com/it/briefings/2026-08-12/c844f80d-09be-4236-95c4-e3cb59546d03/arista-velocloud-patch-reaches-a-trust-anchor PlainSec it 2026-08-12T20:41:55Z La fiducia dell’orchestratore può essere riscritta senza login https://plainsec.com/briefings/2026-08-12/891bef9d-1456-4b4f-8386-9fc3e2650ec4/seaweedfs-ssrf-exposes-internal-cloud-services PlainSec en 2026-08-12T20:41:55Z SeaweedFS SSRF Exposes Internal Cloud Services https://plainsec.com/it/briefings/2026-08-12/891bef9d-1456-4b4f-8386-9fc3e2650ec4/seaweedfs-ssrf-exposes-internal-cloud-services PlainSec it 2026-08-12T20:41:55Z SeaweedFS espone metadata cloud tramite SSRF https://plainsec.com/briefings/2026-08-12/91b3b595-c103-40fc-80d9-92870537da75/sonicwall-fixes-root-escalation-flaws-in-appliances PlainSec en 2026-08-12T22:29:07Z SonicWall GMS RCEs Hit Retired Management Platform https://plainsec.com/it/briefings/2026-08-12/91b3b595-c103-40fc-80d9-92870537da75/sonicwall-fixes-root-escalation-flaws-in-appliances PlainSec it 2026-08-12T22:29:07Z GMS ritirato, ma ancora esposto a due RCE critiche https://plainsec.com/briefings/2026-08-12/844a3091-5da3-4214-95b0-4b7b8ecd5eac/delta-fake-wi-fi-forced-mid-flight-shutdown PlainSec en 2026-08-12T22:29:07Z Delta Fake Wi-Fi Drew FBI Scrutiny https://plainsec.com/it/briefings/2026-08-12/844a3091-5da3-4214-95b0-4b7b8ecd5eac/delta-fake-wi-fi-forced-mid-flight-shutdown PlainSec it 2026-08-12T22:29:07Z Un falso hotspot in volo diventa caso federale https://plainsec.com/briefings/2026-08-12/a0cc2895-9847-4128-bee1-56f84a1da851/fake-startup-showed-onboarding-s-real-access-gap PlainSec en 2026-08-12T22:29:07Z FBI Probe Validates North Korean Remote-Hire Threat https://plainsec.com/it/briefings/2026-08-12/a0cc2895-9847-4128-bee1-56f84a1da851/fake-startup-showed-onboarding-s-real-access-gap PlainSec it 2026-08-12T22:29:07Z Il rischio dell’onboarding remoto entra in un’indagine FBI https://plainsec.com/briefings/2026-08-12/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec en 2026-08-12T22:29:07Z NetFoundry Survey Flags AI Control Gap https://plainsec.com/it/briefings/2026-08-12/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec it 2026-08-12T22:29:07Z L’AI allarga la superficie d’attacco più di quanto si veda https://plainsec.com/briefings/2026-08-12/ffea8c8b-f758-4d26-b041-1c9a153cf358/semgreps-sha-pinning-rollout-exposed-ci-fragility PlainSec en 2026-08-12T22:29:07Z Semgrep's SHA Pinning Rollout Exposed CI Fragility https://plainsec.com/it/briefings/2026-08-12/ffea8c8b-f758-4d26-b041-1c9a153cf358/semgreps-sha-pinning-rollout-exposed-ci-fragility PlainSec it 2026-08-12T22:29:07Z I tag mutabili rompono la fiducia nei workflow GitHub Actions https://plainsec.com/briefings/2026-08-11/2390d752-d189-42bb-9bc8-932c742b62a4/microsoft-patch-tuesday-fixes-active-windows-driver-exploit PlainSec en 2026-08-11T22:33:32Z Lazarus Ties Windows Zero-Day to Dream Job https://plainsec.com/it/briefings/2026-08-11/2390d752-d189-42bb-9bc8-932c742b62a4/microsoft-patch-tuesday-fixes-active-windows-driver-exploit PlainSec it 2026-08-11T22:33:32Z Lazarus porta il zero-day Windows dentro Operation Dream Job https://plainsec.com/briefings/2026-08-11/8b05db0b-ac9c-45a2-8b81-1377f606fdb9/deadlock-uses-decentralized-services-to-keep-extortion-alive PlainSec en 2026-08-11T04:34:28Z DeadLock Moves Extortion Behind Blockchain Pointers https://plainsec.com/it/briefings/2026-08-11/8b05db0b-ac9c-45a2-8b81-1377f606fdb9/deadlock-uses-decentralized-services-to-keep-extortion-alive PlainSec it 2026-08-11T04:34:28Z DeadLock sposta l’estorsione su Session e Polygon https://plainsec.com/briefings/2026-08-11/0f4302ca-10a5-40b0-bf0f-e0a06db912ac/internet-exposed-plcs-fuel-multistate-water-attacks PlainSec en 2026-08-11T04:34:28Z Internet-Exposed PLCs Fuel Multistate Water Attacks https://plainsec.com/it/briefings/2026-08-11/0f4302ca-10a5-40b0-bf0f-e0a06db912ac/internet-exposed-plcs-fuel-multistate-water-attacks PlainSec it 2026-08-11T04:34:28Z PLC esposti in acqua e reflui sotto attacco in più stati https://plainsec.com/briefings/2026-08-11/74c41fd8-c96f-4487-a8af-f2a53542910e/zoom-annotation-flaw-let-attendees-hijack-peers PlainSec en 2026-08-11T22:33:32Z Zoom Fixes Four Annotation Flaws After Disclosure https://plainsec.com/it/briefings/2026-08-11/74c41fd8-c96f-4487-a8af-f2a53542910e/zoom-annotation-flaw-let-attendees-hijack-peers PlainSec it 2026-08-11T22:33:32Z Zoom chiude quattro falle nell’annotazione delle riunioni https://plainsec.com/briefings/2026-08-11/25aa766b-5c7c-4e5f-88a0-5989788fa64b/sandworm-lures-ukrainian-admins-through-fake-hiring PlainSec en 2026-08-12T00:31:38Z Sandworm Lures Ukrainian Admins Through Fake Hiring https://plainsec.com/it/briefings/2026-08-11/25aa766b-5c7c-4e5f-88a0-5989788fa64b/sandworm-lures-ukrainian-admins-through-fake-hiring PlainSec it 2026-08-12T00:31:38Z Recruiter finti per colpire gli amministratori IT https://plainsec.com/briefings/2026-08-11/c50e8f4f-11b7-4ab3-9ef2-2be8a50480e4/gunra-raas-turns-edge-access-into-extortion PlainSec en 2026-08-12T02:42:28Z Gunra RaaS Turns Edge Access Into Extortion https://plainsec.com/it/briefings/2026-08-11/c50e8f4f-11b7-4ab3-9ef2-2be8a50480e4/gunra-raas-turns-edge-access-into-extortion PlainSec it 2026-08-12T02:42:28Z Gunra cresce come RaaS e punta gli edge esposti https://plainsec.com/briefings/2026-08-11/94311345-a115-4263-afcb-8aace04b902b/openai-pushes-frontier-cyber-models-into-security-tools PlainSec en 2026-08-12T00:31:38Z OpenAI Puts Cyber AI in Partner Hands https://plainsec.com/it/briefings/2026-08-11/94311345-a115-4263-afcb-8aace04b902b/openai-pushes-frontier-cyber-models-into-security-tools PlainSec it 2026-08-12T00:31:38Z OpenAI sposta il cyber più capace nei partner approvati https://plainsec.com/briefings/2026-08-11/8c96cd4d-0df2-4dc7-8d1f-8795fc119a02/ghostjacking-turns-ai-telemetry-into-attack-commands PlainSec en 2026-08-11T15:46:05Z Ghostjacking Turns AI Telemetry Into Attack Commands https://plainsec.com/it/briefings/2026-08-11/8c96cd4d-0df2-4dc7-8d1f-8795fc119a02/ghostjacking-turns-ai-telemetry-into-attack-commands PlainSec it 2026-08-11T15:46:05Z I log diventano comandi per gli AI agent https://plainsec.com/briefings/2026-08-11/a94a5ade-a652-4e4f-ab5b-16016a952fad/openai-pauses-astra-over-cyber-capability-risk PlainSec en 2026-08-12T00:31:38Z OpenAI Pauses Astra Over Cyber Capability Risk https://plainsec.com/it/briefings/2026-08-11/a94a5ade-a652-4e4f-ab5b-16016a952fad/openai-pauses-astra-over-cyber-capability-risk PlainSec it 2026-08-12T00:31:38Z Astra viene trattato come software non fidato https://plainsec.com/briefings/2026-08-11/51186764-75e7-4aca-94c9-3eb459809784/sap-august-patch-day-hits-mixed-landscapes PlainSec en 2026-08-12T02:42:28Z SAP Patch Day Mixes Open and Privileged Flaws https://plainsec.com/it/briefings/2026-08-11/51186764-75e7-4aca-94c9-3eb459809784/sap-august-patch-day-hits-mixed-landscapes PlainSec it 2026-08-12T02:42:28Z SAP divide l’esposizione tra bug senza login e bug di privilegio https://plainsec.com/briefings/2026-08-10/89efb96c-30bc-4370-b068-bad412235d95/metabase-breach-exposes-downstream-databases PlainSec en 2026-08-10T04:31:37Z Metabase Exploitation Exposes Connected Databases https://plainsec.com/it/briefings/2026-08-10/89efb96c-30bc-4370-b068-bad412235d95/metabase-breach-exposes-downstream-databases PlainSec it 2026-08-10T04:31:37Z Metabase apre un varco verso i database collegati https://plainsec.com/briefings/2026-08-10/895450bb-290f-423e-a53c-6a0480be5ed3/malicious-python-releases-reach-developer-secrets-at-startup PlainSec en 2026-08-10T04:31:37Z Malicious Python Releases Reach Developer Secrets at Startup https://plainsec.com/it/briefings/2026-08-10/895450bb-290f-423e-a53c-6a0480be5ed3/malicious-python-releases-reach-developer-secrets-at-startup PlainSec it 2026-08-10T04:31:37Z La trust chain dei developer diventa un canale per rubare segreti https://plainsec.com/briefings/2026-08-10/65b88226-32c6-4b7a-b8a4-c0c9bda303bc/coruna-and-darksword-go-mass-market PlainSec en 2026-08-10T20:32:56Z Coruna and DarkSword Go Mass-Market https://plainsec.com/it/briefings/2026-08-10/65b88226-32c6-4b7a-b8a4-c0c9bda303bc/coruna-and-darksword-go-mass-market PlainSec it 2026-08-10T20:32:56Z Le chain iOS da sorveglianza diventano un mercato di massa https://plainsec.com/briefings/2026-08-10/02df72b4-361c-4ea1-819d-0ed3bc2b0b72/container-escape-turns-old-linux-bug-into-host-risk PlainSec en 2026-08-10T04:31:37Z Container Escape Turns Old Linux Bug into Host Risk https://plainsec.com/it/briefings/2026-08-10/02df72b4-361c-4ea1-819d-0ed3bc2b0b72/container-escape-turns-old-linux-bug-into-host-risk PlainSec it 2026-08-10T04:31:37Z Un bug di Linux può far uscire da un container al root dell’host https://plainsec.com/briefings/2026-08-10/55a30714-7fcd-43d3-a9c0-0512e7e49336/cryptojs-randomness-bug-exposed-wallet-secrets PlainSec en 2026-08-10T22:39:23Z CryptoJS Randomness Bug Exposed Wallet Secrets https://plainsec.com/it/briefings/2026-08-10/55a30714-7fcd-43d3-a9c0-0512e7e49336/cryptojs-randomness-bug-exposed-wallet-secrets PlainSec it 2026-08-10T22:39:23Z crypto-js può aver generato segreti recuperabili offline https://plainsec.com/briefings/2026-08-10/4dc4baa7-13db-4f99-acc0-4334cfa192b1/chrome-bug-discovery-is-outrunning-release-cadence PlainSec en 2026-08-10T22:39:23Z Chrome Bug Discovery Is Outrunning Release Cadence https://plainsec.com/it/briefings/2026-08-10/4dc4baa7-13db-4f99-acc0-4334cfa192b1/chrome-bug-discovery-is-outrunning-release-cadence PlainSec it 2026-08-10T22:39:23Z La scoperta automatica corre più veloce delle patch di Chrome https://plainsec.com/briefings/2026-08-10/300dfb13-403a-43f3-80c6-c0e0ad9d7187/rovos-toggle-fails-as-a-data-boundary PlainSec en 2026-08-10T22:39:23Z Rovo's Toggle Fails as a Data Boundary https://plainsec.com/it/briefings/2026-08-10/300dfb13-403a-43f3-80c6-c0e0ad9d7187/rovos-toggle-fails-as-a-data-boundary PlainSec it 2026-08-10T22:39:23Z Rovo può trasformarsi in canale di esfiltrazione da Jira e Confluence https://plainsec.com/briefings/2026-08-10/eb85fb54-5a74-4cad-820a-f9a2793f99a9/sharepoint-patches-didn-t-clear-bit-s-breach PlainSec en 2026-08-10T04:31:37Z SharePoint Patches Didn’t Clear BIT’s Breach https://plainsec.com/it/briefings/2026-08-10/eb85fb54-5a74-4cad-820a-f9a2793f99a9/sharepoint-patches-didn-t-clear-bit-s-breach PlainSec it 2026-08-10T04:31:37Z SharePoint patch non basta: compromessi 200 account del BIT https://plainsec.com/briefings/2026-08-10/8a9b188d-38eb-45d2-b17f-6ad275128eea/ai-patches-still-need-human-eyes PlainSec en 2026-08-11T02:28:54Z AI Patches Still Need Human Eyes https://plainsec.com/it/briefings/2026-08-10/8a9b188d-38eb-45d2-b17f-6ad275128eea/ai-patches-still-need-human-eyes PlainSec it 2026-08-11T02:28:54Z Le patch AI sembrano giusti, ma lasciano varchi aperti https://plainsec.com/briefings/2026-08-10/844ef8dd-1052-4c8a-ae37-63ac706e42cf/clamav-crashes-can-blind-cisco-endpoint-scanning PlainSec en 2026-08-11T02:28:54Z Cisco's ClamAV Flaws Can Knock Out Endpoint Scanning https://plainsec.com/it/briefings/2026-08-10/844ef8dd-1052-4c8a-ae37-63ac706e42cf/clamav-crashes-can-blind-cisco-endpoint-scanning PlainSec it 2026-08-11T02:28:54Z ClamAV può mandare giù il controllo endpoint