https://plainsec.com/stories/f6fc03ac-29e8-4fd0-b3aa-389ed3926e14/terminalfix-turns-a-fake-captcha-into-network-access PlainSec en 2026-08-30T04:21:20Z TerminalFix Turns a Fake CAPTCHA Into Network Access https://plainsec.com/it/stories/f6fc03ac-29e8-4fd0-b3aa-389ed3926e14/terminalfix-turns-a-fake-captcha-into-network-access PlainSec it 2026-08-30T04:21:20Z Il CAPTCHA finto apre un varco persistente nella rete https://plainsec.com/stories/e4d754bc-8c05-4c66-89aa-67c05d126daa/avada-s-six-step-chain-exposes-wordpress-sites PlainSec en 2026-08-30T04:21:20Z WordPress Plugin Flaws Broaden Into Site Takeovers https://plainsec.com/it/stories/e4d754bc-8c05-4c66-89aa-67c05d126daa/avada-s-six-step-chain-exposes-wordpress-sites PlainSec it 2026-08-30T04:21:20Z Cinque plugin WordPress aprono la strada al takeover https://plainsec.com/stories/23a30ae8-59d1-420f-ad68-7abe6fbceb10/hasbro-breach-exposes-payroll-fraud-risk PlainSec en 2026-08-30T08:21:32Z Hasbro Breach Exposes Payroll Fraud Risk https://plainsec.com/it/stories/23a30ae8-59d1-420f-ad68-7abe6fbceb10/hasbro-breach-exposes-payroll-fraud-risk PlainSec it 2026-08-30T08:21:32Z I dati dei dipendenti Hasbro diventano un bersaglio per il payroll fraud https://plainsec.com/stories/ee24ce4c-4256-490c-947e-0e263138575b/openai-agent-swarm-turned-training-into-intrusion PlainSec en 2026-08-29T04:21:15Z OpenAI Agent Swarm Turned Training Into Intrusion https://plainsec.com/it/stories/ee24ce4c-4256-490c-947e-0e263138575b/openai-agent-swarm-turned-training-into-intrusion PlainSec it 2026-08-29T04:21:15Z Settecento agenti trasformano l’AI in una forza d’attacco https://plainsec.com/stories/9bb52006-8484-492f-a71e-92e8ed46da29/cosmos-evm-flaw-drained-six-chains PlainSec en 2026-08-29T04:21:15Z Cosmos EVM Flaw Drained Six Chains https://plainsec.com/it/stories/9bb52006-8484-492f-a71e-92e8ed46da29/cosmos-evm-flaw-drained-six-chains PlainSec it 2026-08-29T04:21:15Z Sei chain drenate dopo la falla condivisa di Cosmos EVM https://plainsec.com/stories/1e3eb59d-ae72-47fc-b98c-d926030f2135/mag-breach-exposes-travel-data-for-millions PlainSec en 2026-08-29T04:21:15Z MAG Breach Exposes Travel Data for Millions https://plainsec.com/it/stories/1e3eb59d-ae72-47fc-b98c-d926030f2135/mag-breach-exposes-travel-data-for-millions PlainSec it 2026-08-29T04:21:15Z Dati di viaggio rubati, phishing più credibile per milioni di passeggeri https://plainsec.com/stories/d3b223f7-a9d1-4ccc-a7c6-0390ef422c48/npm-provenance-could-not-save-openapi-codegen PlainSec en 2026-08-29T04:21:15Z npm Provenance Could Not Save OpenAPI Codegen https://plainsec.com/it/stories/d3b223f7-a9d1-4ccc-a7c6-0390ef422c48/npm-provenance-could-not-save-openapi-codegen PlainSec it 2026-08-29T04:21:15Z Provenance valida, package npm ancora malevolo https://plainsec.com/stories/7830af7b-0f1f-4215-85dd-c2000e007e5a/papercut-s-web-console-opened-the-copier-fleet PlainSec en 2026-08-29T04:21:15Z PaperCut’s Exploit Chain Splits Into Two CVEs https://plainsec.com/it/stories/7830af7b-0f1f-4215-85dd-c2000e007e5a/papercut-s-web-console-opened-the-copier-fleet PlainSec it 2026-08-29T04:21:15Z PaperCut passa ai CVE e i server esposti restano a rischio https://plainsec.com/stories/7bb565b8-642b-46f4-85dc-f714ad9836e3/zbt-firmware-backdoors-cross-brand-lines PlainSec en 2026-08-29T06:21:32Z ZBT Firmware Implants Expose White-Label Routers https://plainsec.com/it/stories/7bb565b8-642b-46f4-85dc-f714ad9836e3/zbt-firmware-backdoors-cross-brand-lines PlainSec it 2026-08-29T06:21:32Z La supply chain del firmware apre root sui router white-label https://plainsec.com/stories/3cf1d636-162a-441c-8a84-6c68ac4c1000/gitea-docker-defaults-open-a-route-to-rce PlainSec en 2026-08-29T04:21:15Z Gitea Docker Defaults Open a Route to RCE https://plainsec.com/it/stories/3cf1d636-162a-441c-8a84-6c68ac4c1000/gitea-docker-defaults-open-a-route-to-rce PlainSec it 2026-08-29T04:21:15Z Gitea espone migliaia di istanze al code execution https://plainsec.com/stories/b6862585-cdf0-4cc9-ac0b-88aaabf60e36/metasploit-adds-forgejo-and-planyo-attack-modules PlainSec en 2026-08-29T16:21:20Z Metasploit Adds Forgejo and Planyo Attack Modules https://plainsec.com/it/stories/b6862585-cdf0-4cc9-ac0b-88aaabf60e36/metasploit-adds-forgejo-and-planyo-attack-modules PlainSec it 2026-08-29T16:21:20Z Metasploit abbassa la soglia per sfruttare bug web https://plainsec.com/stories/07295d51-6ac1-4577-bbd6-a39b3188dd8d/unitree-g1-edu-flaws-reach-root-over-ble PlainSec en 2026-08-29T04:21:15Z Unitree G1 EDU Flaws Reach Root Over BLE https://plainsec.com/it/stories/07295d51-6ac1-4577-bbd6-a39b3188dd8d/unitree-g1-edu-flaws-reach-root-over-ble PlainSec it 2026-08-29T04:21:15Z Il robot umanoide cede il controllo al BLE vicino https://plainsec.com/stories/ee236799-3517-488a-8306-9e75895faf4b/atf-confirms-qilin-breach-as-major-incident PlainSec en 2026-08-29T04:21:15Z ATF Confirms Isolated System Hit in Qilin Claim https://plainsec.com/it/stories/ee236799-3517-488a-8306-9e75895faf4b/atf-confirms-qilin-breach-as-major-incident PlainSec it 2026-08-29T04:21:15Z Un sistema isolato dell’ATF espone dati d’indagine https://plainsec.com/stories/7bbc0a8e-96b0-4efd-b570-413e40a3f5f2/teampcp-arrests-leave-the-secret-theft-intact PlainSec en 2026-08-29T06:21:32Z TeamPCP Arrests Open a Forensic Phase https://plainsec.com/it/stories/7bbc0a8e-96b0-4efd-b570-413e40a3f5f2/teampcp-arrests-leave-the-secret-theft-intact PlainSec it 2026-08-29T06:21:32Z TeamPCP passa dagli arresti alla fase forense https://plainsec.com/stories/148565ab-e878-483a-8329-bb0538724c7f/cisa-s-red-team-split-exposed-soc-blind-spots PlainSec en 2026-08-29T06:21:32Z CISA’s Red Team Split Exposed SOC Blind Spots https://plainsec.com/it/stories/148565ab-e878-483a-8329-bb0538724c7f/cisa-s-red-team-split-exposed-soc-blind-spots PlainSec it 2026-08-29T06:21:32Z Due SOC, due esiti opposti sotto gli stessi attaccanti https://plainsec.com/stories/da6e5e4d-6fc2-4aa0-a3fc-350c3ba6324d/givewp-flaw-lets-attackers-run-server-commands PlainSec en 2026-08-29T16:21:20Z GiveWP Flaw Lets Attackers Run Server Commands https://plainsec.com/it/stories/da6e5e4d-6fc2-4aa0-a3fc-350c3ba6324d/givewp-flaw-lets-attackers-run-server-commands PlainSec it 2026-08-29T16:21:20Z GiveWP apre il server da una semplice richiesta anonima https://plainsec.com/stories/83624499-61d3-4189-a889-16fb027e2023/tech-giants-push-defensive-ai-for-public-services PlainSec en 2026-08-29T06:21:32Z OpenAI-Led Coalition Pushes AI Defense Agenda https://plainsec.com/it/stories/83624499-61d3-4189-a889-16fb027e2023/tech-giants-push-defensive-ai-for-public-services PlainSec it 2026-08-29T06:21:32Z Le grandi aziende spingono la difesa AI per i servizi pubblici https://plainsec.com/stories/ecfeea11-4f12-4f34-9181-7f42ffc30912/unit-42-finds-rlhf-refusal-lives-in-a-thin-layer PlainSec en 2026-08-29T16:21:20Z Unit 42 Finds RLHF Refusal Lives in a Thin Layer https://plainsec.com/it/stories/ecfeea11-4f12-4f34-9181-7f42ffc30912/unit-42-finds-rlhf-refusal-lives-in-a-thin-layer PlainSec it 2026-08-29T16:21:20Z La safety di RLHF vive in uno strato sottilissimo https://plainsec.com/stories/c0ff07a3-b833-45cd-928f-0ca3da9d9454/boston-scientific-attack-snarls-global-device-shipments PlainSec en 2026-08-29T06:21:32Z Boston Scientific Outage Turns Into Supply Chain Delay https://plainsec.com/it/stories/c0ff07a3-b833-45cd-928f-0ca3da9d9454/boston-scientific-attack-snarls-global-device-shipments PlainSec it 2026-08-29T06:21:32Z Boston Scientific trasforma un outage in ritardi sulle forniture mediche https://plainsec.com/stories/bcbc1c04-8e9c-48df-ab4c-5cbf62a97122/cpanel-patch-leaves-some-builds-unclear PlainSec en 2026-08-29T14:27:06Z cPanel Patch Leaves Some Builds Unclear https://plainsec.com/it/stories/bcbc1c04-8e9c-48df-ab4c-5cbf62a97122/cpanel-patch-leaves-some-builds-unclear PlainSec it 2026-08-29T14:27:06Z cPanel corregge un bug che dà root ai clienti hosting https://plainsec.com/stories/b5e41513-a809-4852-a5a1-c2612d9d3d9a/claude-code-summary-request-opens-shell-access PlainSec en 2026-08-29T04:21:15Z Claude Code Summary Request Opens Shell Access https://plainsec.com/it/stories/b5e41513-a809-4852-a5a1-c2612d9d3d9a/claude-code-summary-request-opens-shell-access PlainSec it 2026-08-29T04:21:15Z Claude Code può passare da un riassunto a Bash https://plainsec.com/stories/451c4bb0-060a-4626-9c2e-ae32f5b34024/apt28-uses-word-lures-and-webhooks-for-hookedge PlainSec en 2026-08-29T04:21:15Z APT28 Uses Word Lures and Webhooks for HOOKEDGE https://plainsec.com/it/stories/451c4bb0-060a-4626-9c2e-ae32f5b34024/apt28-uses-word-lures-and-webhooks-for-hookedge PlainSec it 2026-08-29T04:21:15Z APT28 cambia strada: Word e webhook per restare dentro https://plainsec.com/stories/671c06b0-4e0b-4123-b05a-d516bd21e5f3/socket-finds-trusted-extensions-turned-malicious PlainSec en 2026-08-29T04:21:15Z Superior Weaponized Trusted Browser Extensions https://plainsec.com/it/stories/671c06b0-4e0b-4123-b05a-d516bd21e5f3/socket-finds-trusted-extensions-turned-malicious PlainSec it 2026-08-29T04:21:15Z Le estensioni fidate diventano il canale d’attacco https://plainsec.com/stories/94197a5f-722e-46c6-bd60-2a2f288e3de1/mckesson-breach-hits-third-party-apps PlainSec en 2026-08-29T06:21:32Z McKesson Breach Hits Third-Party Apps https://plainsec.com/it/stories/94197a5f-722e-46c6-bd60-2a2f288e3de1/mckesson-breach-hits-third-party-apps PlainSec it 2026-08-29T06:21:32Z McKesson scopre un varco nei sistemi dei partner https://plainsec.com/stories/584dbd84-423a-4308-af74-91beb7fff766/iran-linked-attack-took-uk-generator-offline PlainSec en 2026-08-28T04:21:08Z UK Generator Case Points to a Wider OT Pattern https://plainsec.com/it/stories/584dbd84-423a-4308-af74-91beb7fff766/iran-linked-attack-took-uk-generator-offline PlainSec it 2026-08-28T04:21:08Z Il vero bersaglio è la lunga coda dell’OT esposto https://plainsec.com/stories/454bb927-878d-4964-b1e5-80e8ef5a1039/wiz-flags-ai-gateways-as-a-new-attack-plane PlainSec en 2026-08-28T04:21:08Z Wiz Flags AI Gateways as a New Attack Plane https://plainsec.com/it/stories/454bb927-878d-4964-b1e5-80e8ef5a1039/wiz-flags-ai-gateways-as-a-new-attack-plane PlainSec it 2026-08-28T04:21:08Z AI infrastruttura sotto pressione per credenziali e tool interni https://plainsec.com/stories/098e45db-0f27-46aa-bdcc-c6739ca4f3ae/us-seizure-cuts-off-qtfy-s-hidden-traffic-layer PlainSec en 2026-08-28T04:21:08Z US Seizure Cuts Off QTFY’s Hidden Traffic Layer https://plainsec.com/it/stories/098e45db-0f27-46aa-bdcc-c6739ca4f3ae/us-seizure-cuts-off-qtfy-s-hidden-traffic-layer PlainSec it 2026-08-28T04:21:08Z Tagliata la copertura che mascherava le intrusioni cinesi https://plainsec.com/stories/eba2b776-e7a3-40c7-bd6c-f4ec6c5c0554/langflow-faces-two-paths-to-host-takeover PlainSec en 2026-08-28T18:30:42Z Langflow Faces Two Paths to Host Takeover https://plainsec.com/it/stories/eba2b776-e7a3-40c7-bd6c-f4ec6c5c0554/langflow-faces-two-paths-to-host-takeover PlainSec it 2026-08-28T18:30:42Z Langflow sotto tiro da due percorsi indipendenti https://plainsec.com/stories/f1e199ad-4055-436c-9d7d-c5aa01eb9390/bulk-power-order-pushes-procurement-into-compliance-clock PlainSec en 2026-08-28T04:21:08Z Bulk-Power Order Pushes Procurement Into Compliance Clock https://plainsec.com/it/stories/f1e199ad-4055-436c-9d7d-c5aa01eb9390/bulk-power-order-pushes-procurement-into-compliance-clock PlainSec it 2026-08-28T04:21:08Z Il bulk-power entra in un conto alla rovescia normativo https://plainsec.com/stories/32d2c98b-163c-42c2-9e69-73558863f073/cisa-flags-fuel-boss-shared-php-exposure PlainSec en 2026-08-28T04:21:08Z CISA Flags Fuel-Boss Shared PHP Exposure https://plainsec.com/it/stories/32d2c98b-163c-42c2-9e69-73558863f073/cisa-flags-fuel-boss-shared-php-exposure PlainSec it 2026-08-28T04:21:08Z La stessa runtime vulnerabile espone tutta la linea Fuel-Boss https://plainsec.com/stories/4aefcbbe-f346-4a71-98fd-771ccdd092e7/spark-rat-campaign-used-opswat-driver-to-blind-defenses PlainSec en 2026-08-28T04:21:08Z Spark RAT Campaign Used OPSWAT Driver to Blind Defenses https://plainsec.com/it/stories/4aefcbbe-f346-4a71-98fd-771ccdd092e7/spark-rat-campaign-used-opswat-driver-to-blind-defenses PlainSec it 2026-08-28T04:21:08Z Un driver firmato spegne le difese prima di Spark RAT https://plainsec.com/stories/ca3b96cd-092b-49fe-ad85-1bc0e52e7515/oauth2-proxy-poc-exposes-login-bypass-risk PlainSec en 2026-08-28T04:21:08Z OAuth2 Proxy PoC Exposes Login Bypass Risk https://plainsec.com/it/stories/ca3b96cd-092b-49fe-ad85-1bc0e52e7515/oauth2-proxy-poc-exposes-login-bypass-risk PlainSec it 2026-08-28T04:21:08Z OAuth2 Proxy espone login bypass con un PoC pubblico https://plainsec.com/stories/b192bae1-d405-44d8-b310-c2ac3e97bc63/dark-caracal-unveils-a-harder-to-remove-spyware-stack PlainSec en 2026-08-28T04:21:08Z Dark Caracal Unveils a Harder-to-Remove Spyware Stack https://plainsec.com/it/stories/b192bae1-d405-44d8-b310-c2ac3e97bc63/dark-caracal-unveils-a-harder-to-remove-spyware-stack PlainSec it 2026-08-28T04:21:08Z GoCaracal porta l’accesso persistente dentro Dark Caracal https://plainsec.com/stories/dcc5054e-8e60-450d-8b12-208189100b51/unit-42-sees-ai-speeding-attacker-campaigns PlainSec en 2026-08-28T04:21:08Z Unit 42 Sees AI Speeding Attacker Campaigns https://plainsec.com/it/stories/dcc5054e-8e60-450d-8b12-208189100b51/unit-42-sees-ai-speeding-attacker-campaigns PlainSec it 2026-08-28T04:21:08Z L’AI sta già accorciando la finestra d’attacco https://plainsec.com/stories/835ca768-5396-4bab-ba8d-bcb9ef16060a/openai-report-logs-first-offensive-agent-collective PlainSec en 2026-08-28T06:24:31Z OpenAI’s Agent Test Turned Into a Coordinated Breach https://plainsec.com/it/stories/835ca768-5396-4bab-ba8d-bcb9ef16060a/openai-report-logs-first-offensive-agent-collective PlainSec it 2026-08-28T06:24:31Z Gli agenti hanno trasformato Artifactory in una regia nascosta https://plainsec.com/stories/af38a775-3875-426d-a040-7cc010c20031/cisa-flags-ase2000-test-set-trust-flaws PlainSec en 2026-08-28T12:53:26Z CISA Flags ASE2000 Test Set Trust Flaws https://plainsec.com/it/stories/af38a775-3875-426d-a040-7cc010c20031/cisa-flags-ase2000-test-set-trust-flaws PlainSec it 2026-08-28T12:53:26Z ASE2000 V2 espone la fiducia nei controlli TLS