https://plainsec.com/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec en 2026-08-15T04:24:45Z Evooo1Bot Uses Routers as Stealth Proxy Nodes https://plainsec.com/it/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec it 2026-08-15T04:24:45Z Router ed edge device diventano proxy anonimi duraturi https://plainsec.com/stories/b5ea916d-8542-4c30-b0b3-9776275cd2e2/exposed-mac-screen-sharing-is-already-getting-rooted PlainSec en 2026-08-15T04:24:45Z Exposed Mac Screen Sharing Is Already Getting Rooted https://plainsec.com/it/stories/b5ea916d-8542-4c30-b0b3-9776275cd2e2/exposed-mac-screen-sharing-is-already-getting-rooted PlainSec it 2026-08-15T04:24:45Z Screen Sharing esposto su Mac, root e Monero già presenti https://plainsec.com/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec en 2026-08-15T04:24:45Z GeoServer Flaw Draws Fast Probing, Possible Server Takeover https://plainsec.com/it/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec it 2026-08-15T04:24:45Z GeoServer finisce nel mirino prima della patch https://plainsec.com/stories/2385c59a-5f75-4e86-a36f-6312a2f058a7/honeymyte-coolclient-hides-inside-a-signed-driver PlainSec en 2026-08-15T04:24:45Z HoneyMyte Adds a Signed Driver to CoolClient https://plainsec.com/it/stories/2385c59a-5f75-4e86-a36f-6312a2f058a7/honeymyte-coolclient-hides-inside-a-signed-driver PlainSec it 2026-08-15T04:24:45Z CoolClient scende nel kernel e sfugge agli strumenti https://plainsec.com/stories/6fb6ec12-175b-48b1-8cbe-6759871eb15d/power-pages-misconfigurations-exposed-d365-data PlainSec en 2026-08-15T04:24:45Z Power Pages Misconfigurations Exposed D365 Data https://plainsec.com/it/stories/6fb6ec12-175b-48b1-8cbe-6759871eb15d/power-pages-misconfigurations-exposed-d365-data PlainSec it 2026-08-15T04:24:45Z Un portale Power Pages può esporre dati D365 su larga scala https://plainsec.com/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec en 2026-08-15T04:24:45Z AmnesiaStealer Adds Live Browser Session Control https://plainsec.com/it/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec it 2026-08-15T04:24:45Z AmnesiaStealer passa dal furto account al controllo della sessione https://plainsec.com/stories/badca682-337b-43fd-a453-4d835ee99e3c/beacon-breach-traced-to-leaked-aws-key PlainSec en 2026-08-15T04:24:45Z Beacon Breach Traced to Leaked AWS Key https://plainsec.com/it/stories/badca682-337b-43fd-a453-4d835ee99e3c/beacon-breach-traced-to-leaked-aws-key PlainSec it 2026-08-15T04:24:45Z Una chiave AWS esposta svuota un CRM cifrato https://plainsec.com/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec en 2026-08-15T04:24:45Z Agent Guardrails Fail Before the Model Speaks https://plainsec.com/it/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec it 2026-08-15T04:24:45Z I guardrail del modello non bastano più agli agent https://plainsec.com/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec en 2026-08-15T04:24:45Z Jewelbug Merges Espionage and Crypto Theft https://plainsec.com/it/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec it 2026-08-15T04:24:45Z Jewelbug unisce spionaggio di Stato e furto crypto dallo stesso panel https://plainsec.com/stories/e296834d-c6a9-4acc-be35-edaac597ed07/broadcom-ties-jewelbug-espionage-to-crypto-fraud PlainSec en 2026-08-15T06:22:57Z Broadcom Ties Jewelbug Espionage to Crypto Fraud https://plainsec.com/it/stories/e296834d-c6a9-4acc-be35-edaac597ed07/broadcom-ties-jewelbug-espionage-to-crypto-fraud PlainSec it 2026-08-15T06:22:57Z Jewelbug unisce spionaggio e frode sulla stessa infrastruttura https://plainsec.com/stories/5c9c36b2-26fc-4c9d-95bc-8cbdd2e85f83/white-house-lets-contractors-join-offensive-cyber-operations PlainSec en 2026-08-15T04:24:45Z White House Lets Contractors Join Offensive Cyber Operations https://plainsec.com/it/stories/5c9c36b2-26fc-4c9d-95bc-8cbdd2e85f83/white-house-lets-contractors-join-offensive-cyber-operations PlainSec it 2026-08-15T04:24:45Z Le offensive cyber passano anche ai contractor https://plainsec.com/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec en 2026-08-15T04:24:45Z WindRelay and SpyNote Fueled a 13-Minute Call Scam https://plainsec.com/it/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec it 2026-08-15T04:24:45Z Una chiamata da 13 minuti basta per clonare una carta https://plainsec.com/stories/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec en 2026-08-15T04:24:45Z LiteLLM Breach Grew Into CI Secret Spill https://plainsec.com/it/stories/b8c83488-f812-4968-88ce-e777a4ce567f/malicious-litellm-releases-leaked-cloud-secrets PlainSec it 2026-08-15T04:24:45Z Un archivio da 153 GB allarga il caso LiteLLM https://plainsec.com/stories/ee29fdae-b69f-49fe-b4c7-e4c652b1fa73/coordinated-water-utility-hits-span-a-dozen-states PlainSec en 2026-08-15T06:22:57Z Coordinated Water Utility Hits Span a Dozen States https://plainsec.com/it/stories/ee29fdae-b69f-49fe-b4c7-e4c652b1fa73/coordinated-water-utility-hits-span-a-dozen-states PlainSec it 2026-08-15T06:22:57Z Una campagna colpisce decine di piccoli acquedotti https://plainsec.com/stories/47d99a45-561f-475d-a393-3e49994933f9/germany-brazil-arrest-seven-in-clone-card-fraud-case PlainSec en 2026-08-15T06:22:57Z Germany, Brazil Arrest Seven in Clone-Card Fraud Case https://plainsec.com/it/stories/47d99a45-561f-475d-a393-3e49994933f9/germany-brazil-arrest-seven-in-clone-card-fraud-case PlainSec it 2026-08-15T06:22:57Z Raffica di arresti in un caso di frode bancaria transfrontaliera https://plainsec.com/stories/12170079-2a02-4b64-8017-79bdbf8cea75/sharepoint-jwt-flaw-is-being-exploited PlainSec en 2026-08-14T04:27:38Z SharePoint JWT Flaw Is Being Exploited https://plainsec.com/it/stories/12170079-2a02-4b64-8017-79bdbf8cea75/sharepoint-jwt-flaw-is-being-exploited PlainSec it 2026-08-14T04:27:38Z File e permessi esposti dopo il bypass di SharePoint https://plainsec.com/stories/69e3bd13-b6d1-4399-9e79-bc8a2e5cbb0d/white-house-opens-hack-back-role-for-private-firms PlainSec en 2026-08-14T04:27:38Z White House Opens Hack-Back Role for Private Firms https://plainsec.com/it/stories/69e3bd13-b6d1-4399-9e79-bc8a2e5cbb0d/white-house-opens-hack-back-role-for-private-firms PlainSec it 2026-08-14T04:27:38Z Le aziende private entrano nelle operazioni cyber offensive di Stato https://plainsec.com/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec en 2026-08-14T04:27:38Z vCenter Exploits Left Reverse SSH Footholds Behind https://plainsec.com/it/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec it 2026-08-14T04:27:38Z vCenter patchato, ma resta un foothold nascosto https://plainsec.com/stories/91f0619d-b519-49a1-bd65-e2ef38e3e780/adobe-commerce-flaw-hit-by-immediate-exploitation-attempts PlainSec en 2026-08-14T04:27:38Z Adobe Commerce Flaw Hit by Immediate Exploitation Attempts https://plainsec.com/it/stories/91f0619d-b519-49a1-bd65-e2ef38e3e780/adobe-commerce-flaw-hit-by-immediate-exploitation-attempts PlainSec it 2026-08-14T04:27:38Z Sessioni Adobe Commerce dirottate subito dopo la disclosure https://plainsec.com/stories/c9f533c7-f372-4d23-8ca3-4069ae697791/flock-tightens-defaults-after-alpr-abuse-scandals PlainSec en 2026-08-15T02:21:15Z Flock Tightens Defaults After ALPR Abuse Scandals https://plainsec.com/it/stories/c9f533c7-f372-4d23-8ca3-4069ae697791/flock-tightens-defaults-after-alpr-abuse-scandals PlainSec it 2026-08-15T02:21:15Z La stretta di Flock sulla retention resta facilmente aggirabile https://plainsec.com/stories/3e97206a-55d7-4da3-a850-da5e68225462/aws-acm-drops-email-validation-by-2027 PlainSec en 2026-08-15T02:21:15Z AWS ACM Drops Email Validation by 2027 https://plainsec.com/it/stories/3e97206a-55d7-4da3-a850-da5e68225462/aws-acm-drops-email-validation-by-2027 PlainSec it 2026-08-15T02:21:15Z ACM elimina l’email validation prima della scadenza di settore https://plainsec.com/stories/6bbdd3f9-19de-462a-88dd-829e7ad65f29/siemens-advisory-spans-ot-and-cad-patches PlainSec en 2026-08-15T02:21:15Z Solid Edge File Parsing Puts CAD Workstations at Risk https://plainsec.com/it/stories/6bbdd3f9-19de-462a-88dd-829e7ad65f29/siemens-advisory-spans-ot-and-cad-patches PlainSec it 2026-08-15T02:21:15Z Solid Edge espone i workflow CAD ai file malevoli https://plainsec.com/stories/c7167701-3be8-45a9-ac4b-b773a6acb2f4/gunra-uses-fortinet-and-schneider-flaws-for-extortion PlainSec en 2026-08-13T05:04:45Z Gunra Shifts Ransomware to Perimeter Break-ins https://plainsec.com/it/stories/c7167701-3be8-45a9-ac4b-b773a6acb2f4/gunra-uses-fortinet-and-schneider-flaws-for-extortion PlainSec it 2026-08-13T05:04:45Z Gunra sposta il ransomware dal phishing al perimetro https://plainsec.com/stories/55e095d0-c669-4184-af19-2a8c47582c3e/private-apn-became-a-bridge-into-chp-controls PlainSec en 2026-08-13T05:04:45Z Sandworm Used Private APN to Reach CHP Controls https://plainsec.com/it/stories/55e095d0-c669-4184-af19-2a8c47582c3e/private-apn-became-a-bridge-into-chp-controls PlainSec it 2026-08-13T05:04:45Z Un private APN è diventato il ponte verso i controlli CHP https://plainsec.com/stories/f8532985-0555-4caa-9ffa-dfb6ec1c182e/helix-claims-uber-freight-mailbox-theft PlainSec en 2026-08-13T05:04:45Z Helix Claims Uber Freight Mailbox Theft https://plainsec.com/it/stories/f8532985-0555-4caa-9ffa-dfb6ec1c182e/helix-claims-uber-freight-mailbox-theft PlainSec it 2026-08-13T05:04:45Z Il helpdesk diventa il varco per mail e cloud di Uber Freight https://plainsec.com/stories/a0cc2895-9847-4128-bee1-56f84a1da851/fake-startup-showed-onboarding-s-real-access-gap PlainSec en 2026-08-13T18:48:23Z FBI Probe Validates North Korean Remote-Hire Threat https://plainsec.com/it/stories/a0cc2895-9847-4128-bee1-56f84a1da851/fake-startup-showed-onboarding-s-real-access-gap PlainSec it 2026-08-13T18:48:23Z Il rischio dell’onboarding remoto entra in un’indagine FBI https://plainsec.com/stories/5c81f7c4-4035-464c-891d-b10d7956f9ae/akira-used-safe-mode-to-silence-edr PlainSec en 2026-08-13T10:28:04Z Akira Used Safe Mode to Silence EDR https://plainsec.com/it/stories/5c81f7c4-4035-464c-891d-b10d7956f9ae/akira-used-safe-mode-to-silence-edr PlainSec it 2026-08-13T10:28:04Z Safe Mode spegne EDR e Defender prima del ransomware https://plainsec.com/stories/d1727c6a-20bb-4109-b9a1-eae6690d49df/defender-cloud-scan-opens-a-system-path PlainSec en 2026-08-14T02:21:47Z Defender Cloud Scan Opens a SYSTEM Path https://plainsec.com/it/stories/d1727c6a-20bb-4109-b9a1-eae6690d49df/defender-cloud-scan-opens-a-system-path PlainSec it 2026-08-14T02:21:47Z Defender torna a esporre SYSTEM dopo la patch RoguePlanet https://plainsec.com/stories/97876071-6982-49f6-9d74-58ab2877b567/filerun-thumbnails-turn-filenames-into-code PlainSec en 2026-08-14T02:21:47Z FileRun Thumbnails Turn Filenames Into Code https://plainsec.com/it/stories/97876071-6982-49f6-9d74-58ab2877b567/filerun-thumbnails-turn-filenames-into-code PlainSec it 2026-08-14T02:21:47Z FileRun trasforma i filename in RCE https://plainsec.com/stories/44eaa83b-6efb-4f87-aef6-a4b28d36ade1/cisa-orders-two-week-fix-for-exploited-windows-bug PlainSec en 2026-08-13T05:04:45Z CISA Orders Two-Week Fix for Exploited Windows Bug https://plainsec.com/it/stories/44eaa83b-6efb-4f87-aef6-a4b28d36ade1/cisa-orders-two-week-fix-for-exploited-windows-bug PlainSec it 2026-08-13T05:04:45Z La campagna di recruiting diventa la via per prendere Windows https://plainsec.com/stories/91b3b595-c103-40fc-80d9-92870537da75/sonicwall-fixes-root-escalation-flaws-in-appliances PlainSec en 2026-08-14T00:54:14Z SonicWall GMS RCEs Hit Retired Management Platform https://plainsec.com/it/stories/91b3b595-c103-40fc-80d9-92870537da75/sonicwall-fixes-root-escalation-flaws-in-appliances PlainSec it 2026-08-14T00:54:14Z GMS ritirato, ma ancora esposto a due RCE critiche https://plainsec.com/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec en 2026-08-13T05:04:45Z NetFoundry Survey Flags AI Control Gap https://plainsec.com/it/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec it 2026-08-13T05:04:45Z L’AI allarga la superficie d’attacco più di quanto si veda https://plainsec.com/stories/891bef9d-1456-4b4f-8386-9fc3e2650ec4/seaweedfs-ssrf-exposes-internal-cloud-services PlainSec en 2026-08-13T20:31:18Z SeaweedFS SSRF Exposes Internal Cloud Services https://plainsec.com/it/stories/891bef9d-1456-4b4f-8386-9fc3e2650ec4/seaweedfs-ssrf-exposes-internal-cloud-services PlainSec it 2026-08-13T20:31:18Z SeaweedFS espone metadata cloud tramite SSRF https://plainsec.com/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec en 2026-08-14T02:21:47Z City-Forum Reads Portal Data Through Guest Accounts https://plainsec.com/it/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec it 2026-08-14T02:21:47Z Portali Salesforce e ServiceNow letti via guest per 17 mesi https://plainsec.com/stories/7c4f3e5d-dfb6-43ff-9d5c-c4d5944f2dbf/apple-s-patch-count-hides-three-high-risk-paths PlainSec en 2026-08-14T02:21:47Z Hitachi Energy Flags Kernel Root Flaws in APM Edge https://plainsec.com/it/stories/7c4f3e5d-dfb6-43ff-9d5c-c4d5944f2dbf/apple-s-patch-count-hides-three-high-risk-paths PlainSec it 2026-08-14T02:21:47Z L'appliance APM Edge eredita due vie di root dal kernel Linux