https://plainsec.com/stories/35ab93e1-9a0f-4c2d-8500-d4822c5a58b3/storm-3168-used-azure-identities-to-wreck-tenants PlainSec en 2026-09-28T10:44:33Z JADEPUFFER Turns Azure Service Principals into Wrecking Keys https://plainsec.com/it/stories/35ab93e1-9a0f-4c2d-8500-d4822c5a58b3/storm-3168-used-azure-identities-to-wreck-tenants PlainSec it 2026-09-28T10:44:33Z JADEPUFFER passa dalla ricognizione alla distruzione in Azure https://plainsec.com/stories/dd8bd376-1907-4786-8c76-38952ce33667/gitlab-path-traversal-puts-servers-at-risk PlainSec en 2026-09-28T04:21:12Z GitLab Flaw Hits KEV Under Active Exploitation https://plainsec.com/it/stories/dd8bd376-1907-4786-8c76-38952ce33667/gitlab-path-traversal-puts-servers-at-risk PlainSec it 2026-09-28T04:21:12Z GitLab passa da advisory a emergenza operativa https://plainsec.com/stories/a2b5d009-167e-441c-a8d1-edcacdf01869/openai-agents-crossed-into-public-web-traffic PlainSec en 2026-09-28T04:21:12Z OpenAI Agents Crossed Into Public Web Traffic https://plainsec.com/it/stories/a2b5d009-167e-441c-a8d1-edcacdf01869/openai-agents-crossed-into-public-web-traffic PlainSec it 2026-09-28T04:21:12Z Agenti OpenAI trasformano le eval in un rischio operativo https://plainsec.com/stories/656e9e57-fc96-477b-a13e-e4ad83dd6272/unc6240-bypasses-peoplesoft-waf-rules-again PlainSec en 2026-09-28T04:21:12Z ShinyHunters Sidestep PeopleSoft WAF Rules https://plainsec.com/it/stories/656e9e57-fc96-477b-a13e-e4ad83dd6272/unc6240-bypasses-peoplesoft-waf-rules-again PlainSec it 2026-09-28T04:21:12Z Il WAF non basta più contro PeopleSoft https://plainsec.com/stories/459db3dc-8d6e-4eb3-a699-f7f7a4415247/roundcube-flaw-turns-mail-logins-into-server-control PlainSec en 2026-09-28T04:21:12Z Roundcube SQL Injection Hits Before Login https://plainsec.com/it/stories/459db3dc-8d6e-4eb3-a699-f7f7a4415247/roundcube-flaw-turns-mail-logins-into-server-control PlainSec it 2026-09-28T04:21:12Z Roundcube passa da abuso di account a compromissione pre-login https://plainsec.com/stories/6b6348ca-ba20-472e-a045-0f023ed6324e/bitget-wallet-theft-exposes-custody-risk PlainSec en 2026-09-28T04:21:12Z Bitget’s Backend Became the Thief https://plainsec.com/it/stories/6b6348ca-ba20-472e-a045-0f023ed6324e/bitget-wallet-theft-exposes-custody-risk PlainSec it 2026-09-28T04:21:12Z Bitget, il backend che approva i prelievi è stato tradito https://plainsec.com/stories/0bfc92a0-bc14-45ac-addf-fe7decf9670a/infostealers-now-reach-developer-ai-sessions PlainSec en 2026-09-28T04:21:12Z Infostealers Now Reach Developer AI Sessions https://plainsec.com/it/stories/0bfc92a0-bc14-45ac-addf-fe7decf9670a/infostealers-now-reach-developer-ai-sessions PlainSec it 2026-09-28T04:21:12Z Gli infostealer allargano il furto ai token degli assistant AI https://plainsec.com/stories/3316d19a-f376-4966-bb55-3e0207e11f8b/recorded-future-sees-russia-blending-cyber-and-physical-pressure PlainSec en 2026-09-28T04:21:12Z Recorded Future Sees Russia Blending Cyber and Physical Pressure https://plainsec.com/it/stories/3316d19a-f376-4966-bb55-3e0207e11f8b/recorded-future-sees-russia-blending-cyber-and-physical-pressure PlainSec it 2026-09-28T04:21:12Z La guerra ibrida russa si sposta su cyber, droni e disinformazione https://plainsec.com/stories/c5ac9382-9c99-4687-9728-c399cb4073f1/salesforce-agentforce-flaws-turn-leads-into-attackers PlainSec en 2026-09-28T10:44:33Z Salesforce Agentforce Flaws Turn Leads Into Attackers https://plainsec.com/it/stories/c5ac9382-9c99-4687-9728-c399cb4073f1/salesforce-agentforce-flaws-turn-leads-into-attackers PlainSec it 2026-09-28T10:44:33Z Un lead pubblico diventa il canale di controllo di Agentforce https://plainsec.com/stories/53596929-d845-44e4-be3c-643c2b7baf1d/fake-payroll-apps-hand-over-the-machine PlainSec en 2026-09-28T10:44:33Z Fake Payroll Apps Hand Over the Machine https://plainsec.com/it/stories/53596929-d845-44e4-be3c-643c2b7baf1d/fake-payroll-apps-hand-over-the-machine PlainSec it 2026-09-28T10:44:33Z Un falso desktop per paghe apre la strada alla diversione degli stipendi https://plainsec.com/stories/e84514f7-5a34-4f6d-a7fc-a3a8fe0b246f/ncc-group-sees-record-august-ransomware-volume PlainSec en 2026-09-28T10:44:33Z NCC Group Sees Ransomware Shift Toward Industry https://plainsec.com/it/stories/e84514f7-5a34-4f6d-a7fc-a3a8fe0b246f/ncc-group-sees-record-august-ransomware-volume PlainSec it 2026-09-28T10:44:33Z Qilin guida il picco ransomware e sposta il baricentro https://plainsec.com/stories/7e26529a-fe3e-46d2-b804-e007573e55ac/rydox-guilty-plea-confirms-a-disrupted-market PlainSec en 2026-09-28T04:21:12Z Rydox Plea Confirms a Real Marketplace Takedown https://plainsec.com/it/stories/7e26529a-fe3e-46d2-b804-e007573e55ac/rydox-guilty-plea-confirms-a-disrupted-market PlainSec it 2026-09-28T04:21:12Z Rydox finisce in aula: il sequestro chiude il market https://plainsec.com/stories/d8541b5e-cc98-4380-a046-b13389151ac9/hugging-face-study-shows-agents-chain-access-into-lateral-movement PlainSec en 2026-09-28T04:21:12Z Gemini Test Shows Prompts Don’t Stop Actions https://plainsec.com/it/stories/d8541b5e-cc98-4380-a046-b13389151ac9/hugging-face-study-shows-agents-chain-access-into-lateral-movement PlainSec it 2026-09-28T04:21:12Z I prompt non bastano quando l’agente può agire https://plainsec.com/stories/1afce114-55e0-4d4b-8bda-54a4a273dcc4/snowflake-credential-abuse-lands-soldier-70-month-sentence PlainSec en 2026-09-28T08:21:22Z Snowflake Credential Abuse Lands Soldier 70-Month Sentence https://plainsec.com/it/stories/1afce114-55e0-4d4b-8bda-54a4a273dcc4/snowflake-credential-abuse-lands-soldier-70-month-sentence PlainSec it 2026-09-28T08:21:22Z Credenziali Snowflake esposte, rubati i metadata di oltre 100 milioni di clienti AT&T https://plainsec.com/stories/d710f008-35b8-4b54-984b-66bc27ba98be/cisa-flags-certification-barriers-in-election-patching PlainSec en 2026-09-28T04:21:12Z CISA Flags Certification Barriers in Election Patching https://plainsec.com/it/stories/d710f008-35b8-4b54-984b-66bc27ba98be/cisa-flags-certification-barriers-in-election-patching PlainSec it 2026-09-28T04:21:12Z Piano CISA: la certificazione rallenta le patch https://plainsec.com/stories/b545f331-dfcc-4835-9739-282f12d2b0ba/cloudflare-fixed-cross-tenant-storage-leakage PlainSec en 2026-09-28T04:21:12Z Cloudflare Fixed Cross-Tenant Storage Leakage https://plainsec.com/it/stories/b545f331-dfcc-4835-9739-282f12d2b0ba/cloudflare-fixed-cross-tenant-storage-leakage PlainSec it 2026-09-28T04:21:12Z Cloudflare chiude una falla che esponeva dati tra tenant https://plainsec.com/stories/7f25fb45-0c0c-4854-ada0-cff21e458c5e/gemini-test-escaped-into-real-company-systems PlainSec en 2026-09-28T04:21:12Z Gemini Test Escaped Into Real Company Systems https://plainsec.com/it/stories/7f25fb45-0c0c-4854-ada0-cff21e458c5e/gemini-test-escaped-into-real-company-systems PlainSec it 2026-09-28T04:21:12Z Gemini esce dal test e tocca sistemi reali https://plainsec.com/stories/6721938a-41a4-4c5c-96fc-0e4c5bf0b126/macsync-swaps-scripts-for-native-macos-binaries PlainSec en 2026-09-28T06:50:54Z MacSync Swaps Scripts for Native macOS Binaries https://plainsec.com/it/stories/6721938a-41a4-4c5c-96fc-0e4c5bf0b126/macsync-swaps-scripts-for-native-macos-binaries PlainSec it 2026-09-28T06:50:54Z MacSync cambia pelle e sfugge ai controlli statici https://plainsec.com/stories/05dcb2d4-6ad3-4a82-a5b9-e2117715ed50/shinyhunters-hits-clops-leak-site-trust PlainSec en 2026-09-28T06:50:54Z ShinyHunters Raises the Cost of Cl0p's Leak-Site Breach https://plainsec.com/it/stories/05dcb2d4-6ad3-4a82-a5b9-e2117715ed50/shinyhunters-hits-clops-leak-site-trust PlainSec it 2026-09-28T06:50:54Z La faida tra gang espone i pagamenti delle vittime Cl0p https://plainsec.com/stories/8fd0db4f-eecf-411a-9a86-132e1225b758/tdengine-flaw-can-drop-telemetry-visibility PlainSec en 2026-09-28T04:21:12Z TDengine Flaw Can Drop Telemetry Visibility https://plainsec.com/it/stories/8fd0db4f-eecf-411a-9a86-132e1225b758/tdengine-flaw-can-drop-telemetry-visibility PlainSec it 2026-09-28T04:21:12Z Un pacchetto basta a far cadere la telemetria industriale https://plainsec.com/stories/0a9e31dc-2cf0-49cf-9de5-ba66ccd74868/lunex-uses-amd-driver-to-blind-edr PlainSec en 2026-09-27T04:46:35Z Lunex Uses AMD Driver to Blind EDR https://plainsec.com/it/stories/0a9e31dc-2cf0-49cf-9de5-ba66ccd74868/lunex-uses-amd-driver-to-blind-edr PlainSec it 2026-09-27T04:46:35Z Lunex spegne i controlli kernel prima di rubare credenziali https://plainsec.com/stories/8f8bafcd-b182-4bb6-a770-31d25dbf9e66/wraithtools-sells-botnet-to-drain-ai-credits PlainSec en 2026-09-27T14:50:52Z WraithTools Sells Botnet to Drain AI Credits https://plainsec.com/it/stories/8f8bafcd-b182-4bb6-a770-31d25dbf9e66/wraithtools-sells-botnet-to-drain-ai-credits PlainSec it 2026-09-27T14:50:52Z Un botnet commerciale trasforma le API AI in una bolletta https://plainsec.com/stories/777533ba-ab4e-4e42-9c0c-07578368f8e2/elementor-csrf-lets-attackers-mint-wordpress-admins PlainSec en 2026-09-27T12:54:18Z Elementor CSRF Lets Attackers Mint WordPress Admins https://plainsec.com/it/stories/777533ba-ab4e-4e42-9c0c-07578368f8e2/elementor-csrf-lets-attackers-mint-wordpress-admins PlainSec it 2026-09-27T12:54:18Z Elementor crea admin finti e tiene aperta la porta https://plainsec.com/stories/bb7a3201-07b7-4aae-ab88-b2bf36fc6252/remcontrol-uses-iptv-ads-to-reach-android-users PlainSec en 2026-09-26T10:21:17Z RemControl Uses Fake TVTap to Disarm Android Safety Checks https://plainsec.com/it/stories/bb7a3201-07b7-4aae-ab88-b2bf36fc6252/remcontrol-uses-iptv-ads-to-reach-android-users PlainSec it 2026-09-26T10:21:17Z Play Protect viene aggirato dal falso TVTap di RemControl https://plainsec.com/stories/610d68c8-9e3f-42c1-a326-0d309ef5034f/pamstealer-moves-payload-decryption-off-the-mac PlainSec en 2026-09-26T06:50:27Z PamStealer Moves Payload Decryption Off the Mac https://plainsec.com/it/stories/610d68c8-9e3f-42c1-a326-0d309ef5034f/pamstealer-moves-payload-decryption-off-the-mac PlainSec it 2026-09-26T06:50:27Z PamStealer sposta la chiave del payload sul server