https://plainsec.com/briefings/2026-08-13/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec en 2026-08-13T05:04:45Z Malicious LiteLLM Releases Leaked Cloud Secrets https://plainsec.com/it/briefings/2026-08-13/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec it 2026-08-13T05:04:45Z LiteLLM diventa un canale per rubare segreti cloud https://plainsec.com/briefings/2026-08-13/c7167701-3be8-45a9-ac4b-b773a6acb2f4/gunra-uses-fortinet-and-schneider-flaws-for-extortion PlainSec en 2026-08-13T05:04:45Z Gunra Shifts Ransomware to Perimeter Break-ins https://plainsec.com/it/briefings/2026-08-13/c7167701-3be8-45a9-ac4b-b773a6acb2f4/gunra-uses-fortinet-and-schneider-flaws-for-extortion PlainSec it 2026-08-13T05:04:45Z Gunra sposta il ransomware dal phishing al perimetro https://plainsec.com/briefings/2026-08-13/44eaa83b-6efb-4f87-aef6-a4b28d36ade1/cisa-orders-two-week-fix-for-exploited-windows-bug PlainSec en 2026-08-13T05:04:45Z CISA Orders Two-Week Fix for Exploited Windows Bug https://plainsec.com/it/briefings/2026-08-13/44eaa83b-6efb-4f87-aef6-a4b28d36ade1/cisa-orders-two-week-fix-for-exploited-windows-bug PlainSec it 2026-08-13T05:04:45Z La campagna di recruiting diventa la via per prendere Windows https://plainsec.com/briefings/2026-08-13/55e095d0-c669-4184-af19-2a8c47582c3e/private-apn-became-a-bridge-into-chp-controls PlainSec en 2026-08-13T05:04:45Z Sandworm Used Private APN to Reach CHP Controls https://plainsec.com/it/briefings/2026-08-13/55e095d0-c669-4184-af19-2a8c47582c3e/private-apn-became-a-bridge-into-chp-controls PlainSec it 2026-08-13T05:04:45Z Un private APN è diventato il ponte verso i controlli CHP https://plainsec.com/briefings/2026-08-13/91b3b595-c103-40fc-80d9-92870537da75/sonicwall-fixes-root-escalation-flaws-in-appliances PlainSec en 2026-08-13T05:04:45Z SonicWall GMS RCEs Hit Retired Management Platform https://plainsec.com/it/briefings/2026-08-13/91b3b595-c103-40fc-80d9-92870537da75/sonicwall-fixes-root-escalation-flaws-in-appliances PlainSec it 2026-08-13T05:04:45Z GMS ritirato, ma ancora esposto a due RCE critiche https://plainsec.com/briefings/2026-08-13/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec en 2026-08-13T05:04:45Z NetFoundry Survey Flags AI Control Gap https://plainsec.com/it/briefings/2026-08-13/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec it 2026-08-13T05:04:45Z L’AI allarga la superficie d’attacco più di quanto si veda https://plainsec.com/briefings/2026-08-13/51186764-75e7-4aca-94c9-3eb459809784/sap-august-patch-day-hits-mixed-landscapes PlainSec en 2026-08-13T05:04:45Z SAP Patch Day Mixes Open and Privileged Flaws https://plainsec.com/it/briefings/2026-08-13/51186764-75e7-4aca-94c9-3eb459809784/sap-august-patch-day-hits-mixed-landscapes PlainSec it 2026-08-13T05:04:45Z SAP divide l’esposizione tra bug senza login e bug di privilegio https://plainsec.com/briefings/2026-08-13/1e1dab3a-b4ad-4e04-bf4b-dd7e9b779476/ceva-breach-exposes-steam-and-retail-shipping-data PlainSec en 2026-08-13T05:04:45Z CEVA Breach Exposes Steam and Retail Shipping Data https://plainsec.com/it/briefings/2026-08-13/1e1dab3a-b4ad-4e04-bf4b-dd7e9b779476/ceva-breach-exposes-steam-and-retail-shipping-data PlainSec it 2026-08-13T05:04:45Z La fiducia nella consegna diventa il vero bersaglio https://plainsec.com/briefings/2026-08-13/0ec40398-efb6-4510-b8bf-edd034df8eae/greatness-uses-microsoft-login-pages-as-bait PlainSec en 2026-08-13T05:04:45Z Greatness Uses Microsoft Login Pages as Bait https://plainsec.com/it/briefings/2026-08-13/0ec40398-efb6-4510-b8bf-edd034df8eae/greatness-uses-microsoft-login-pages-as-bait PlainSec it 2026-08-13T05:04:45Z Un login Microsoft reale diventa il trucco per prendere un tenant https://plainsec.com/briefings/2026-08-13/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec en 2026-08-13T05:04:45Z Agent Guardrails Fail Before the Model Speaks https://plainsec.com/it/briefings/2026-08-13/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec it 2026-08-13T05:04:45Z I guardrail del modello non bastano più agli agent https://plainsec.com/briefings/2026-08-13/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec en 2026-08-13T05:04:45Z vCenter Exploits Left Reverse SSH Footholds Behind https://plainsec.com/it/briefings/2026-08-13/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec it 2026-08-13T05:04:45Z vCenter patchato, ma resta un foothold nascosto https://plainsec.com/briefings/2026-08-13/f8532985-0555-4caa-9ffa-dfb6ec1c182e/helix-claims-uber-freight-mailbox-theft PlainSec en 2026-08-13T05:04:45Z Helix Claims Uber Freight Mailbox Theft https://plainsec.com/it/briefings/2026-08-13/f8532985-0555-4caa-9ffa-dfb6ec1c182e/helix-claims-uber-freight-mailbox-theft PlainSec it 2026-08-13T05:04:45Z Il helpdesk diventa il varco per mail e cloud di Uber Freight https://plainsec.com/briefings/2026-08-13/891bef9d-1456-4b4f-8386-9fc3e2650ec4/seaweedfs-ssrf-exposes-internal-cloud-services PlainSec en 2026-08-13T06:21:32Z SeaweedFS SSRF Exposes Internal Cloud Services https://plainsec.com/it/briefings/2026-08-13/891bef9d-1456-4b4f-8386-9fc3e2650ec4/seaweedfs-ssrf-exposes-internal-cloud-services PlainSec it 2026-08-13T06:21:32Z SeaweedFS espone metadata cloud tramite SSRF https://plainsec.com/briefings/2026-08-13/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec en 2026-08-13T06:21:32Z City-Forum Reads Portal Data Through Guest Accounts https://plainsec.com/it/briefings/2026-08-13/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec it 2026-08-13T06:21:32Z Portali Salesforce e ServiceNow letti via guest per 17 mesi https://plainsec.com/briefings/2026-08-13/ee2b3cff-27f8-41fb-aa22-a0978f95e239/adobe-campaign-classic-gets-a-trust-breaking-flaw-cluster PlainSec en 2026-08-13T05:04:45Z Adobe Broadens Fixes Across Three Product Lines https://plainsec.com/it/briefings/2026-08-13/ee2b3cff-27f8-41fb-aa22-a0978f95e239/adobe-campaign-classic-gets-a-trust-breaking-flaw-cluster PlainSec it 2026-08-13T05:04:45Z Adobe chiude una falla multiprodotto in ColdFusion, Commerce e Campaign Classic https://plainsec.com/briefings/2026-08-13/f531a9db-eb46-484e-bd57-2aed35c33f45/737-chrome-extensions-routed-browsing-through-one-proxy PlainSec en 2026-08-13T05:04:45Z 737 Chrome Extensions Routed Browsing Through One Proxy https://plainsec.com/it/briefings/2026-08-13/f531a9db-eb46-484e-bd57-2aed35c33f45/737-chrome-extensions-routed-browsing-through-one-proxy PlainSec it 2026-08-13T05:04:45Z 737 estensioni Chrome trasformano il browser in un relay https://plainsec.com/briefings/2026-08-12/084d747f-4e15-4de7-aee0-fd95254a3451/kimwolf-v7-hides-ddos-traffic-behind-browsers PlainSec en 2026-08-12T04:31:47Z Kimwolf Offloads Break-ins From Its DDoS Core https://plainsec.com/it/briefings/2026-08-12/084d747f-4e15-4de7-aee0-fd95254a3451/kimwolf-v7-hides-ddos-traffic-behind-browsers PlainSec it 2026-08-12T04:31:47Z Kimwolf v7 sposta la propagazione fuori dal botnet https://plainsec.com/briefings/2026-08-12/74c41fd8-c96f-4487-a8af-f2a53542910e/zoom-annotation-flaw-let-attendees-hijack-peers PlainSec en 2026-08-13T00:27:40Z Zoom Fixes Four Annotation Flaws After Disclosure https://plainsec.com/it/briefings/2026-08-12/74c41fd8-c96f-4487-a8af-f2a53542910e/zoom-annotation-flaw-let-attendees-hijack-peers PlainSec it 2026-08-13T00:27:40Z Zoom chiude quattro falle nell’annotazione delle riunioni https://plainsec.com/briefings/2026-08-12/844a3091-5da3-4214-95b0-4b7b8ecd5eac/delta-fake-wi-fi-forced-mid-flight-shutdown PlainSec en 2026-08-12T22:29:07Z Delta Fake Wi-Fi Drew FBI Scrutiny https://plainsec.com/it/briefings/2026-08-12/844a3091-5da3-4214-95b0-4b7b8ecd5eac/delta-fake-wi-fi-forced-mid-flight-shutdown PlainSec it 2026-08-12T22:29:07Z Un falso hotspot in volo diventa caso federale https://plainsec.com/briefings/2026-08-12/58d4d80a-5e97-4a3d-b194-767041529e19/hostile-sims-gain-control-of-quectel-modems PlainSec en 2026-08-12T04:31:47Z Hostile SIMs Gain Control of Quectel Modems https://plainsec.com/it/briefings/2026-08-12/58d4d80a-5e97-4a3d-b194-767041529e19/hostile-sims-gain-control-of-quectel-modems PlainSec it 2026-08-12T04:31:47Z La SIM diventa una console sul modem dei dispositivi cellulari https://plainsec.com/briefings/2026-08-12/372e60c5-4ac7-493a-9d77-a142a9068f70/head-mare-turns-trueconf-updates-into-malware-delivery PlainSec en 2026-08-13T02:32:16Z Head Mare Turns TrueConf Updates Into Malware Delivery https://plainsec.com/it/briefings/2026-08-12/372e60c5-4ac7-493a-9d77-a142a9068f70/head-mare-turns-trueconf-updates-into-malware-delivery PlainSec it 2026-08-13T02:32:16Z Il canale di update di TrueConf diventa un vettore di malware https://plainsec.com/briefings/2026-08-12/c844f80d-09be-4236-95c4-e3cb59546d03/arista-velocloud-patch-reaches-a-trust-anchor PlainSec en 2026-08-12T20:41:55Z Arista VeloCloud Patch Reaches a Trust Anchor https://plainsec.com/it/briefings/2026-08-12/c844f80d-09be-4236-95c4-e3cb59546d03/arista-velocloud-patch-reaches-a-trust-anchor PlainSec it 2026-08-12T20:41:55Z La fiducia dell’orchestratore può essere riscritta senza login https://plainsec.com/briefings/2026-08-12/a0cc2895-9847-4128-bee1-56f84a1da851/fake-startup-showed-onboarding-s-real-access-gap PlainSec en 2026-08-12T22:29:07Z FBI Probe Validates North Korean Remote-Hire Threat https://plainsec.com/it/briefings/2026-08-12/a0cc2895-9847-4128-bee1-56f84a1da851/fake-startup-showed-onboarding-s-real-access-gap PlainSec it 2026-08-12T22:29:07Z Il rischio dell’onboarding remoto entra in un’indagine FBI https://plainsec.com/briefings/2026-08-11/2390d752-d189-42bb-9bc8-932c742b62a4/microsoft-patch-tuesday-fixes-active-windows-driver-exploit PlainSec en 2026-08-11T22:33:32Z Lazarus Ties Windows Zero-Day to Dream Job https://plainsec.com/it/briefings/2026-08-11/2390d752-d189-42bb-9bc8-932c742b62a4/microsoft-patch-tuesday-fixes-active-windows-driver-exploit PlainSec it 2026-08-11T22:33:32Z Lazarus porta il zero-day Windows dentro Operation Dream Job https://plainsec.com/briefings/2026-08-11/8b05db0b-ac9c-45a2-8b81-1377f606fdb9/deadlock-uses-decentralized-services-to-keep-extortion-alive PlainSec en 2026-08-11T04:34:28Z DeadLock Moves Extortion Behind Blockchain Pointers https://plainsec.com/it/briefings/2026-08-11/8b05db0b-ac9c-45a2-8b81-1377f606fdb9/deadlock-uses-decentralized-services-to-keep-extortion-alive PlainSec it 2026-08-11T04:34:28Z DeadLock sposta l’estorsione su Session e Polygon https://plainsec.com/briefings/2026-08-11/0f4302ca-10a5-40b0-bf0f-e0a06db912ac/internet-exposed-plcs-fuel-multistate-water-attacks PlainSec en 2026-08-11T04:34:28Z Internet-Exposed PLCs Fuel Multistate Water Attacks https://plainsec.com/it/briefings/2026-08-11/0f4302ca-10a5-40b0-bf0f-e0a06db912ac/internet-exposed-plcs-fuel-multistate-water-attacks PlainSec it 2026-08-11T04:34:28Z PLC esposti in acqua e reflui sotto attacco in più stati https://plainsec.com/briefings/2026-08-11/25aa766b-5c7c-4e5f-88a0-5989788fa64b/sandworm-lures-ukrainian-admins-through-fake-hiring PlainSec en 2026-08-12T00:31:38Z Sandworm Lures Ukrainian Admins Through Fake Hiring https://plainsec.com/it/briefings/2026-08-11/25aa766b-5c7c-4e5f-88a0-5989788fa64b/sandworm-lures-ukrainian-admins-through-fake-hiring PlainSec it 2026-08-12T00:31:38Z Recruiter finti per colpire gli amministratori IT https://plainsec.com/briefings/2026-08-11/c50e8f4f-11b7-4ab3-9ef2-2be8a50480e4/gunra-raas-turns-edge-access-into-extortion PlainSec en 2026-08-12T02:42:28Z Gunra RaaS Turns Edge Access Into Extortion https://plainsec.com/it/briefings/2026-08-11/c50e8f4f-11b7-4ab3-9ef2-2be8a50480e4/gunra-raas-turns-edge-access-into-extortion PlainSec it 2026-08-12T02:42:28Z Gunra cresce come RaaS e punta gli edge esposti https://plainsec.com/briefings/2026-08-11/94311345-a115-4263-afcb-8aace04b902b/openai-pushes-frontier-cyber-models-into-security-tools PlainSec en 2026-08-12T00:31:38Z OpenAI Puts Cyber AI in Partner Hands https://plainsec.com/it/briefings/2026-08-11/94311345-a115-4263-afcb-8aace04b902b/openai-pushes-frontier-cyber-models-into-security-tools PlainSec it 2026-08-12T00:31:38Z OpenAI sposta il cyber più capace nei partner approvati https://plainsec.com/briefings/2026-08-11/8c96cd4d-0df2-4dc7-8d1f-8795fc119a02/ghostjacking-turns-ai-telemetry-into-attack-commands PlainSec en 2026-08-11T15:46:05Z Ghostjacking Turns AI Telemetry Into Attack Commands https://plainsec.com/it/briefings/2026-08-11/8c96cd4d-0df2-4dc7-8d1f-8795fc119a02/ghostjacking-turns-ai-telemetry-into-attack-commands PlainSec it 2026-08-11T15:46:05Z I log diventano comandi per gli AI agent https://plainsec.com/briefings/2026-08-11/a94a5ade-a652-4e4f-ab5b-16016a952fad/openai-pauses-astra-over-cyber-capability-risk PlainSec en 2026-08-12T00:31:38Z OpenAI Pauses Astra Over Cyber Capability Risk https://plainsec.com/it/briefings/2026-08-11/a94a5ade-a652-4e4f-ab5b-16016a952fad/openai-pauses-astra-over-cyber-capability-risk PlainSec it 2026-08-12T00:31:38Z Astra viene trattato come software non fidato