https://plainsec.com/briefings/2026-08-07/0a3899b7-d9e8-4400-b2c3-9523c94e540f/cisco-fixes-fleet-control-bugs-one-already-exploited PlainSec en 2026-08-07T20:24:39Z Cisco IOS XE Fixes Expose Broader Codebase Weaknesses https://plainsec.com/it/briefings/2026-08-07/0a3899b7-d9e8-4400-b2c3-9523c94e540f/cisco-fixes-fleet-control-bugs-one-already-exploited PlainSec it 2026-08-07T20:24:39Z Cisco chiude sette falle diverse in IOS XE https://plainsec.com/briefings/2026-08-07/eb85fb54-5a74-4cad-820a-f9a2793f99a9/sharepoint-patches-didn-t-clear-bit-s-breach PlainSec en 2026-08-07T20:24:39Z SharePoint Patches Didn’t Clear BIT’s Breach https://plainsec.com/it/briefings/2026-08-07/eb85fb54-5a74-4cad-820a-f9a2793f99a9/sharepoint-patches-didn-t-clear-bit-s-breach PlainSec it 2026-08-07T20:24:39Z SharePoint patch non basta: compromessi 200 account del BIT https://plainsec.com/briefings/2026-08-07/02df72b4-361c-4ea1-819d-0ed3bc2b0b72/container-escape-turns-old-linux-bug-into-host-risk PlainSec en 2026-08-07T20:24:39Z Container Escape Turns Old Linux Bug into Host Risk https://plainsec.com/it/briefings/2026-08-07/02df72b4-361c-4ea1-819d-0ed3bc2b0b72/container-escape-turns-old-linux-bug-into-host-risk PlainSec it 2026-08-07T20:24:39Z Un bug di Linux può far uscire da un container al root dell’host https://plainsec.com/briefings/2026-08-07/895450bb-290f-423e-a53c-6a0480be5ed3/malicious-python-releases-reach-developer-secrets-at-startup PlainSec en 2026-08-07T20:24:39Z Malicious Python Releases Reach Developer Secrets at Startup https://plainsec.com/it/briefings/2026-08-07/895450bb-290f-423e-a53c-6a0480be5ed3/malicious-python-releases-reach-developer-secrets-at-startup PlainSec it 2026-08-07T20:24:39Z La trust chain dei developer diventa un canale per rubare segreti https://plainsec.com/briefings/2026-08-07/dbab77a6-bbbe-41a2-8eb7-cd7468a2ea27/npm-worm-now-spreads-through-stolen-tokens PlainSec en 2026-08-07T20:24:39Z npm Worm Now Spreads Through Stolen Tokens https://plainsec.com/it/briefings/2026-08-07/dbab77a6-bbbe-41a2-8eb7-cd7468a2ea27/npm-worm-now-spreads-through-stolen-tokens PlainSec it 2026-08-07T20:24:39Z ChainDrop diventa un worm che si replica con token rubati https://plainsec.com/briefings/2026-08-07/6fc6b886-1a28-4ccb-bafc-673580cce6af/compromised-packages-become-reusable-intrusion-pipelines PlainSec en 2026-08-07T20:24:39Z Compromised Packages Become Reusable Intrusion Pipelines https://plainsec.com/it/briefings/2026-08-07/6fc6b886-1a28-4ccb-bafc-673580cce6af/compromised-packages-become-reusable-intrusion-pipelines PlainSec it 2026-08-07T20:24:39Z I package compromessi diventano broker di accesso riutilizzabili https://plainsec.com/briefings/2026-08-07/6c58dc9e-eae0-49f1-a9b6-d56283aa846c/agent-harness-bugs-expose-ci-secrets PlainSec en 2026-08-07T20:24:39Z Agent Harness Bugs Expose CI Secrets https://plainsec.com/it/briefings/2026-08-07/6c58dc9e-eae0-49f1-a9b6-d56283aa846c/agent-harness-bugs-expose-ci-secrets PlainSec it 2026-08-07T20:24:39Z Il rischio è nel harness, non nel model https://plainsec.com/briefings/2026-08-07/6327595b-f3e7-4930-b2ef-e76d83bc256d/imported-agents-become-server-commands-in-paperclip PlainSec en 2026-08-07T20:24:39Z Imported Agents Become Server Commands in Paperclip https://plainsec.com/it/briefings/2026-08-07/6327595b-f3e7-4930-b2ef-e76d83bc256d/imported-agents-become-server-commands-in-paperclip PlainSec it 2026-08-07T20:24:39Z La fiducia negli agent importati diventa esecuzione sul server https://plainsec.com/briefings/2026-08-07/5c2b5980-c243-4953-a918-e7e3c0520458/one-terraform-state-leak-can-cross-cloud-boundaries PlainSec en 2026-08-07T20:24:39Z One Terraform State Leak Can Cross Cloud Boundaries https://plainsec.com/it/briefings/2026-08-07/5c2b5980-c243-4953-a918-e7e3c0520458/one-terraform-state-leak-can-cross-cloud-boundaries PlainSec it 2026-08-07T20:24:39Z Un file Terraform esposto apre la strada tra più cloud https://plainsec.com/briefings/2026-08-07/404a0b1a-851f-42d8-99d2-cdc105b57ff4/thousands-of-rockwell-plcs-are-still-publicly-reachable PlainSec en 2026-08-07T20:24:39Z Thousands of Rockwell PLCs Are Still Publicly Reachable https://plainsec.com/it/briefings/2026-08-07/404a0b1a-851f-42d8-99d2-cdc105b57ff4/thousands-of-rockwell-plcs-are-still-publicly-reachable PlainSec it 2026-08-07T20:24:39Z Migliaia di PLC Rockwell esposti diventano un piano di controllo riutilizzabile https://plainsec.com/briefings/2026-08-07/20e4184e-597b-484c-8517-8bc5d40d2d19/ai-fuzzing-finds-hundreds-of-http-desync-exposures PlainSec en 2026-08-07T20:24:39Z AI Fuzzing Finds Hundreds of HTTP Desync Exposures https://plainsec.com/it/briefings/2026-08-07/20e4184e-597b-484c-8517-8bc5d40d2d19/ai-fuzzing-finds-hundreds-of-http-desync-exposures PlainSec it 2026-08-07T20:24:39Z HTTP desync scoperto su scala industriale https://plainsec.com/briefings/2026-08-07/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec en 2026-08-07T20:24:39Z Agent Guardrails Fail Before the Model Speaks https://plainsec.com/it/briefings/2026-08-07/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec it 2026-08-07T20:24:39Z I guardrail del modello non bastano più agli agent https://plainsec.com/briefings/2026-08-07/ed78c53b-7a35-4e6c-a636-ac1babe91525/personal-phone-vishing-now-reaches-cloud-sessions PlainSec en 2026-08-07T20:24:39Z Redact Rebrand Hides the Same Extortion Playbook https://plainsec.com/it/briefings/2026-08-07/ed78c53b-7a35-4e6c-a636-ac1babe91525/personal-phone-vishing-now-reaches-cloud-sessions PlainSec it 2026-08-07T20:24:39Z Il rebrand non ferma la stessa operazione di extortion https://plainsec.com/briefings/2026-08-07/b451108b-dc02-484f-a7b0-5574e81608df/session-theft-bypasses-mfa-and-sign-in-alerts PlainSec en 2026-08-07T20:24:39Z Session Theft Bypasses MFA and Sign-In Alerts https://plainsec.com/it/briefings/2026-08-07/b451108b-dc02-484f-a7b0-5574e81608df/session-theft-bypasses-mfa-and-sign-in-alerts PlainSec it 2026-08-07T20:24:39Z Session Theft Bypasses MFA and Sign-In Alerts https://plainsec.com/briefings/2026-08-07/8a9b188d-38eb-45d2-b17f-6ad275128eea/ai-patches-still-need-human-eyes PlainSec en 2026-08-07T20:24:39Z AI Patches Still Need Human Eyes https://plainsec.com/it/briefings/2026-08-07/8a9b188d-38eb-45d2-b17f-6ad275128eea/ai-patches-still-need-human-eyes PlainSec it 2026-08-07T20:24:39Z Le patch AI sembrano giusti, ma lasciano varchi aperti https://plainsec.com/briefings/2026-08-07/f04da67d-ee9e-4514-9587-d4e8730d82a6/oracle-sql-injection-crosses-into-host-compromise PlainSec en 2026-08-07T20:24:39Z Oracle SQL Injection Crosses Into Host Compromise https://plainsec.com/it/briefings/2026-08-07/f04da67d-ee9e-4514-9587-d4e8730d82a6/oracle-sql-injection-crosses-into-host-compromise PlainSec it 2026-08-07T20:24:39Z La SQL injection diventa compromissione dell'host Oracle https://plainsec.com/briefings/2026-08-07/a4735b09-4b4d-4af5-9583-ccc95ea5410c/shared-nat-is-not-a-safe-isolation-boundary PlainSec en 2026-08-07T20:24:39Z Shared NAT Is Not a Safe Isolation Boundary https://plainsec.com/it/briefings/2026-08-07/a4735b09-4b4d-4af5-9583-ccc95ea5410c/shared-nat-is-not-a-safe-isolation-boundary PlainSec it 2026-08-07T20:24:39Z La NAT non basta più come confine di isolamento https://plainsec.com/briefings/2026-08-07/5c40018f-d56c-4dbd-bf4d-4602b5f31356/wordpress-login-pages-become-browser-side-entry-points PlainSec en 2026-08-07T20:24:39Z WordPress Login Pages Become Browser-Side Entry Points https://plainsec.com/it/briefings/2026-08-07/5c40018f-d56c-4dbd-bf4d-4602b5f31356/wordpress-login-pages-become-browser-side-entry-points PlainSec it 2026-08-07T20:24:39Z La schermata di login di WordPress diventa un punto d’attacco https://plainsec.com/briefings/2026-08-07/a1b1cf53-f1d2-45fe-a64f-15a6a486176e/signed-coding-agents-can-hide-remote-access PlainSec en 2026-08-07T20:24:39Z Signed Coding Agents Can Hide Remote Access https://plainsec.com/it/briefings/2026-08-07/a1b1cf53-f1d2-45fe-a64f-15a6a486176e/signed-coding-agents-can-hide-remote-access PlainSec it 2026-08-07T20:24:39Z Gli agent di coding firmati nascondono tunnel e persistenza su macOS https://plainsec.com/briefings/2026-08-06/47752458-795e-452c-84da-8a286173f029/local-linux-users-can-reach-root-through-ovs-datapath PlainSec en 2026-08-07T02:54:12Z Local Linux Users Can Reach Root Through OVS Datapath https://plainsec.com/it/briefings/2026-08-06/47752458-795e-452c-84da-8a286173f029/local-linux-users-can-reach-root-through-ovs-datapath PlainSec it 2026-08-07T02:54:12Z La flotta Linux espone il root locale con OVSwrap https://plainsec.com/briefings/2026-08-06/91e21ff4-5565-40f3-bf09-264f007fdb9e/trusted-remote-admin-tools-become-stealth-persistence PlainSec en 2026-08-07T02:54:12Z Trusted Remote-Admin Tools Become Stealth Persistence https://plainsec.com/it/briefings/2026-08-06/91e21ff4-5565-40f3-bf09-264f007fdb9e/trusted-remote-admin-tools-become-stealth-persistence PlainSec it 2026-08-07T02:54:12Z ScreenConnect diventa copertura per accesso persistente https://plainsec.com/briefings/2026-08-06/7a33e9c4-bfc3-467a-a3f9-6eeac516614a/management-planes-are-exposing-the-keys-themselves PlainSec en 2026-08-07T02:54:12Z Management Planes Are Exposing the Keys Themselves https://plainsec.com/it/briefings/2026-08-06/7a33e9c4-bfc3-467a-a3f9-6eeac516614a/management-planes-are-exposing-the-keys-themselves PlainSec it 2026-08-07T02:54:12Z La fiducia tra tenant, agent e staff si rompe nelle console di gestione https://plainsec.com/briefings/2026-08-06/86a535d3-a2f8-481d-8cc3-23bd4332c2eb/leaked-n8n-tokens-became-live-access-keys PlainSec en 2026-08-07T02:54:12Z Leaked n8n Tokens Became Live Access Keys https://plainsec.com/it/briefings/2026-08-06/86a535d3-a2f8-481d-8cc3-23bd4332c2eb/leaked-n8n-tokens-became-live-access-keys PlainSec it 2026-08-07T02:54:12Z Token esposti trasformano n8n in accesso vivo https://plainsec.com/briefings/2026-08-06/780d4288-38cf-47c2-80d9-b6fbad518a2c/omada-onboarding-flaws-can-hand-over-entire-fleets PlainSec en 2026-08-07T02:54:12Z Omada’s Provisioning Plane Is the Real Attack Surface https://plainsec.com/it/briefings/2026-08-06/780d4288-38cf-47c2-80d9-b6fbad518a2c/omada-onboarding-flaws-can-hand-over-entire-fleets PlainSec it 2026-08-07T02:54:12Z Omada trasforma il provisioning fidato in via d’ingresso https://plainsec.com/briefings/2026-08-06/3dd4f761-984f-43d8-8759-1d7d900c2a91/quickfox-loader-targets-only-chosen-windows-hosts PlainSec en 2026-08-07T02:54:12Z QuickFox Loader Targets Only Chosen Windows Hosts https://plainsec.com/it/briefings/2026-08-06/3dd4f761-984f-43d8-8759-1d7d900c2a91/quickfox-loader-targets-only-chosen-windows-hosts PlainSec it 2026-08-07T02:54:12Z QuickFox diventa un filtro per colpire pochi host scelti https://plainsec.com/briefings/2026-08-06/3f8e2de3-ca0e-4879-b9db-4d5b9ad70242/cloaked-mac-lures-beat-content-based-detection PlainSec en 2026-08-07T02:54:12Z Cloaked Mac Lures Beat Content-Based Detection https://plainsec.com/it/briefings/2026-08-06/3f8e2de3-ca0e-4879-b9db-4d5b9ad70242/cloaked-mac-lures-beat-content-based-detection PlainSec it 2026-08-07T02:54:12Z I crawler vedono meno della metà del clickfix su macOS https://plainsec.com/briefings/2026-08-06/e96f0a7c-3ce7-4724-8e46-bd1b5a0eb189/jenkins-control-plane-leaves-secrets-exposed PlainSec en 2026-08-07T02:54:12Z Jenkins Control Plane Leaves Secrets Exposed https://plainsec.com/it/briefings/2026-08-06/e96f0a7c-3ce7-4724-8e46-bd1b5a0eb189/jenkins-control-plane-leaves-secrets-exposed PlainSec it 2026-08-07T02:54:12Z Jenkins espone il controller attraverso plugin e workspace fidati https://plainsec.com/briefings/2026-08-06/ddc5f061-b19c-4ce2-beea-8703c6f98634/ai-agents-can-carry-poisoned-trust-across-runs PlainSec en 2026-08-07T02:54:12Z AI Agents Can Carry Poisoned Trust Across Runs https://plainsec.com/it/briefings/2026-08-06/ddc5f061-b19c-4ce2-beea-8703c6f98634/ai-agents-can-carry-poisoned-trust-across-runs PlainSec it 2026-08-07T02:54:12Z Gli agenti lasciano istruzioni e si fanno trascinare tra servizi https://plainsec.com/briefings/2026-08-06/f77c85b0-329a-4ec4-8b69-19ffd2332407/one-stolen-login-opened-165-snowflake-customers PlainSec en 2026-08-07T02:54:12Z Snowflake Plea Locks In Identity-Layer Blast Radius https://plainsec.com/it/briefings/2026-08-06/f77c85b0-329a-4ec4-8b69-19ffd2332407/one-stolen-login-opened-165-snowflake-customers PlainSec it 2026-08-07T02:54:12Z Snowflake: il vero varco era l’identità, non la piattaforma https://plainsec.com/briefings/2026-08-06/ba9842df-9b2e-452e-9bac-5d7c7a211b11/embedded-mongodb-leaves-zenon-users-exposed PlainSec en 2026-08-07T02:54:12Z Embedded MongoDB Leaves Zenon Users Exposed https://plainsec.com/it/briefings/2026-08-06/ba9842df-9b2e-452e-9bac-5d7c7a211b11/embedded-mongodb-leaves-zenon-users-exposed PlainSec it 2026-08-07T02:54:12Z Zenon espone il MongoDB integrato, non solo l’applicazione https://plainsec.com/briefings/2026-08-05/066f2b57-b743-48ae-a29a-c09e1a74aa95/sma1000-access-turned-into-ransomware-fuel PlainSec en 2026-08-06T02:27:28Z SMA1000 Access Turned Into Ransomware Fuel https://plainsec.com/it/briefings/2026-08-05/066f2b57-b743-48ae-a29a-c09e1a74aa95/sma1000-access-turned-into-ransomware-fuel PlainSec it 2026-08-06T02:27:28Z SMA1000 diventa il punto di monetizzazione per INC https://plainsec.com/briefings/2026-08-05/03b71cab-dea5-475f-96d8-9e0f10422fd8/open-vsx-evil-twins-turn-developer-trust-into-recon PlainSec en 2026-08-06T02:27:28Z Open VSX Evil Twins Turn Developer Trust into Recon https://plainsec.com/it/briefings/2026-08-05/03b71cab-dea5-475f-96d8-9e0f10422fd8/open-vsx-evil-twins-turn-developer-trust-into-recon PlainSec it 2026-08-06T02:27:28Z Un marketplace fidato è stato usato per mappare i developer host https://plainsec.com/briefings/2026-08-05/4c699f51-3d35-4deb-8f30-ac45d110dd34/operator-trust-opens-tenable-sensor-proxy-to-code-execution PlainSec en 2026-08-06T02:27:28Z Operator Trust Opens Tenable Sensor Proxy to Code Execution https://plainsec.com/it/briefings/2026-08-05/4c699f51-3d35-4deb-8f30-ac45d110dd34/operator-trust-opens-tenable-sensor-proxy-to-code-execution PlainSec it 2026-08-06T02:27:28Z L’operatore diventa il punto debole di Tenable Sensor Proxy https://plainsec.com/briefings/2026-08-05/0fcf6412-bbb2-4fe3-bc6b-8df7aae1273e/ai-security-breaks-at-conversation-and-api-layers PlainSec en 2026-08-06T02:27:28Z AI Security Breaks at Conversation and API Layers https://plainsec.com/it/briefings/2026-08-05/0fcf6412-bbb2-4fe3-bc6b-8df7aae1273e/ai-security-breaks-at-conversation-and-api-layers PlainSec it 2026-08-06T02:27:28Z I controlli CASB e DLP non vedono il rischio semantico dell’AI https://plainsec.com/briefings/2026-08-05/3ce55ae5-cc17-4a17-ae12-fc70b2349d5d/chrome-passkeys-become-reusable-after-windows-malware PlainSec en 2026-08-06T02:27:28Z Chrome Passkeys Become Reusable After Windows Malware https://plainsec.com/it/briefings/2026-08-05/3ce55ae5-cc17-4a17-ae12-fc70b2349d5d/chrome-passkeys-become-reusable-after-windows-malware PlainSec it 2026-08-06T02:27:28Z Passkey riusabili dopo un malware su Windows https://plainsec.com/briefings/2026-08-05/217ea00e-308c-48cd-acd6-ec3d1329edae/device-code-phishing-goes-industrial-and-bypasses-passkeys PlainSec en 2026-08-06T02:27:28Z Device-Code Phishing Goes Industrial and Bypasses Passkeys https://plainsec.com/it/briefings/2026-08-05/217ea00e-308c-48cd-acd6-ec3d1329edae/device-code-phishing-goes-industrial-and-bypasses-passkeys PlainSec it 2026-08-06T02:27:28Z Il phishing sui device code è diventato industriale https://plainsec.com/briefings/2026-08-05/1dd10d10-dd91-4bd4-ad13-bf6eed5ed2b2/ai-security-turns-toward-rapid-response PlainSec en 2026-08-06T02:27:28Z AI Security Turns Toward Rapid Response https://plainsec.com/it/briefings/2026-08-05/1dd10d10-dd91-4bd4-ad13-bf6eed5ed2b2/ai-security-turns-toward-rapid-response PlainSec it 2026-08-06T02:27:28Z La Casa Bianca sceglie regole flessibili per l'AI https://plainsec.com/briefings/2026-08-05/57b3bc2d-4376-4c21-945c-cf2efb66714a/published-staff-contacts-raise-the-value-of-phishing PlainSec en 2026-08-06T02:27:28Z Published Staff Contacts Raise the Value of Phishing https://plainsec.com/it/briefings/2026-08-05/57b3bc2d-4376-4c21-945c-cf2efb66714a/published-staff-contacts-raise-the-value-of-phishing PlainSec it 2026-08-06T02:27:28Z Nomi e email pubbliche rendono credibili i phishing mirati