https://plainsec.com/stories/d0bb0dba-bd0c-43bb-b9f6-28c7e9c3c0e6/plc-campaign-spreads-beyond-one-utility-outage PlainSec en 2026-07-29T10:22:09Z PLC Campaign Spreads Beyond One Utility Outage https://plainsec.com/stories/2f0a3d34-928b-43a0-8bf4-444d251cacfe/ai-agents-can-break-out-without-prompt-help PlainSec en 2026-07-29T10:22:09Z AI Agents Can Break Out Without Prompt Help https://plainsec.com/stories/66113343-331a-4720-b836-b24c50dc33c1/imported-npm-betas-can-hand-over-node-hosts PlainSec en 2026-07-29T10:22:09Z Imported npm Betas Can Hand Over Node Hosts https://plainsec.com/stories/5343420b-1402-4b79-8fcc-eddfd150d548/gitea-writers-can-reach-rce-on-default-installs PlainSec en 2026-07-29T10:22:09Z Gitea Writers Can Reach RCE on Default Installs https://plainsec.com/stories/21eb343a-50a2-4d97-bc9d-4700cfecf151/public-exploit-turns-vbulletin-into-a-server-foothold PlainSec en 2026-07-29T10:22:09Z Public Exploit Turns vBulletin Into a Server Foothold https://plainsec.com/stories/1a29e2d0-bae1-4f89-8dad-c9cdf263afee/spring-boot-fat-jars-stay-exposed-after-fastjson-bypass PlainSec en 2026-07-29T10:22:09Z Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass https://plainsec.com/stories/5976dbff-58c8-4abf-a25e-282a52970a11/windchill-patch-window-became-cl0ps-entry-point PlainSec en 2026-07-29T10:22:09Z Windchill Patch Window Became Cl0p's Entry Point https://plainsec.com/stories/32cc2a7e-ab45-4c4c-949a-ae53af85d687/billing-vendor-breach-spreads-to-seven-providers PlainSec en 2026-07-29T10:22:09Z Billing Vendor Breach Spreads to Seven Providers https://plainsec.com/stories/702e3d90-0c2f-4422-b33d-0aa9cc5e31e9/infected-hosts-become-covert-operator-relays PlainSec en 2026-07-29T10:22:09Z Infected Hosts Become Covert Operator Relays https://plainsec.com/stories/ab82e01c-2593-4929-9030-7f5d301b7c7d/origin-breach-puts-millions-at-fraud-risk PlainSec en 2026-07-29T10:22:09Z Origin Breach Puts Millions at Fraud Risk https://plainsec.com/stories/bd3753cc-6eb8-4c87-9417-9b8fca8a328a/llms-now-find-new-crypto-flaws-before-launch PlainSec en 2026-07-29T10:22:09Z LLMs Now Find New Crypto Flaws Before Launch https://plainsec.com/stories/bcf6cc60-52ca-4825-8c1b-c02f4f42a42e/teamcity-s-agent-channel-becomes-the-entry-point PlainSec en 2026-07-29T10:22:09Z TeamCity’s Agent Channel Becomes the Entry Point https://plainsec.com/stories/9594d2ad-5226-4051-8b5a-0e1ad47936be/public-android-rat-builder-expands-china-credential-theft PlainSec en 2026-07-29T10:22:09Z Public Android RAT Builder Expands China Credential Theft https://plainsec.com/stories/c9a0bb58-06dc-40d1-b911-a0791189dbb3/bmcs-stay-crackable-before-login PlainSec en 2026-07-29T10:22:09Z BMCs Stay Crackable Before Login https://plainsec.com/stories/fc8f8a38-b290-447e-af7a-73f7db610f09/remote-kernel-bug-makes-apple-patch-set-more-serious PlainSec en 2026-07-29T10:22:09Z Remote Kernel Bug Makes Apple Patch Set More Serious https://plainsec.com/stories/3dcefb92-c96a-4274-b036-bcec26da3657/artifactory-patch-lands-but-the-exploit-path-is-unclear PlainSec en 2026-07-29T10:22:09Z Artifactory Patch Lands, But the Exploit Path Is Unclear https://plainsec.com/stories/6cbbb1f9-6522-4182-a2ae-55c2721d3c68/ai-agent-became-the-intruders-hands-on-operator PlainSec en 2026-07-29T02:20:50Z AI Agent Became the Intruder's Hands-On Operator https://plainsec.com/stories/57ca723f-e6d1-4019-8ef2-2c97d99495bc/kernel-version-alone-misses-this-local-root-exposure PlainSec en 2026-07-29T02:20:50Z Kernel Version Alone Misses This Local-Root Exposure https://plainsec.com/stories/40756b8b-7c05-486b-9e21-a53a504c45e6/ad-cs-trust-check-hands-users-domain-controller-power PlainSec en 2026-07-29T02:20:50Z AD CS Trust Check Hands Users Domain Controller Power https://plainsec.com/stories/aab3dc80-382e-4c61-8afd-ff8217a0a410/blockchain-relays-make-botnet-takedowns-harder PlainSec en 2026-07-29T02:20:50Z Blockchain Relays Make Botnet Takedowns Harder https://plainsec.com/stories/ee7d1c7a-1fc6-4817-854b-c2fc0a451682/dependabot-slows-the-poisoned-release-window PlainSec en 2026-07-29T02:20:50Z Dependabot Slows the Poisoned-Release Window https://plainsec.com/stories/f897bc70-c8a4-474b-9c65-162aedb8e596/crype-service-turns-stealth-into-a-commodity PlainSec en 2026-07-29T02:20:50Z Crype service turns stealth into a commodity https://plainsec.com/stories/35e78d9c-ee10-4e09-b54b-1e1db1e3018e/lockbit-fell-when-its-trust-broke PlainSec en 2026-07-28T02:21:59Z LockBit Fell When Its Trust Broke https://plainsec.com/stories/53e20727-6905-4de3-a2f9-33c9b90bb6d9/heapdump-scans-can-leak-backend-secrets PlainSec en 2026-07-28T02:21:59Z Heapdump Scans Can Leak Backend Secrets https://plainsec.com/stories/001d3707-990e-4a62-aa46-ce92a813609e/ransomware-now-kills-edr-first PlainSec en 2026-07-28T02:21:59Z Ransomware Now Kills EDR First https://plainsec.com/stories/0545c365-6fc8-4984-bbc3-faa33b504381/linux-rootkits-can-lie-to-live-response-tools PlainSec en 2026-07-28T02:21:59Z Linux Rootkits Can Lie to Live-Response Tools https://plainsec.com/stories/6fbbb85a-5a23-4a04-b571-78b46790d95c/serv-u-admin-roles-do-not-contain-blast-radius PlainSec en 2026-07-28T02:21:59Z Serv-U Admin Roles Do Not Contain Blast Radius https://plainsec.com/stories/4ac08445-cac2-4bbc-991b-e3ab9ae2bcdb/public-wi-fi-gateways-become-cross-tenant-phishing-points PlainSec en 2026-07-28T02:21:59Z Public Wi‑Fi Gateways Become Cross-Tenant Phishing Points https://plainsec.com/stories/86a00d8e-c876-4479-ae07-7a5d5450aa24/dependency-automation-gets-a-time-lock PlainSec en 2026-07-28T02:21:59Z Dependency Automation Gets a Time Lock https://plainsec.com/stories/0695a6e2-05bc-4cfa-b64d-e661612404e6/open-ai-security-moves-toward-self-hosted-control PlainSec en 2026-07-28T02:21:59Z Open AI Security Moves Toward Self-Hosted Control