https://plainsec.com/stories/e8110123-1990-4b15-a500-3418f475d6c6/coldcard-patch-leaves-old-seeds-exposed PlainSec en 2026-08-02T04:26:26Z Coldcard Patch Leaves Old Seeds Exposed https://plainsec.com/stories/b905ab61-162a-491b-86a0-705279e1786a/hotel-wi-fi-becomes-a-cloud-access-trap PlainSec en 2026-08-02T04:26:26Z Hotel Wi‑Fi Becomes a Cloud Access Trap https://plainsec.com/stories/f18803f8-cb9b-4503-8bae-64bdc3b35e15/rails-image-upload-bug-exposes-server-secrets PlainSec en 2026-08-02T04:26:26Z Rails Image Upload Bug Exposes Server Secrets https://plainsec.com/stories/a6345617-b0c3-4e3b-92d7-c1859e390d54/ad-tag-compromise-turns-trusted-sites-into-stealers PlainSec en 2026-08-02T04:26:26Z Ad Tag Compromise Turns Trusted Sites Into Stealers https://plainsec.com/stories/a904cd70-0586-46e5-8fd3-9989f1e52eb2/ai-operator-leaked-its-own-attack-playbook PlainSec en 2026-08-01T18:34:41Z AI Operator Leaked Its Own Attack Playbook https://plainsec.com/stories/f2755dc3-0582-4ffd-af72-b2c57c9b81bd/plc-access-reaches-past-disruption-into-lockout PlainSec en 2026-08-01T18:34:41Z PLC Access Reaches Past Disruption Into Lockout https://plainsec.com/stories/5ca1f557-874b-4037-a78e-be3cb6ff4267/android-tv-boxes-now-double-as-residential-proxies PlainSec en 2026-08-01T18:34:41Z Android TV Boxes Now Double as Residential Proxies https://plainsec.com/stories/4424e2ba-9af3-41f1-a581-4e5e6943e2d6/one-carecloud-breach-reaches-thousands-of-practices PlainSec en 2026-08-01T18:34:41Z One CareCloud Breach Reaches Thousands of Practices https://plainsec.com/stories/e7f8cea0-bc3a-4a30-a4d3-92196defcf9d/cosmos-db-gateway-secret-breaks-tenant-boundaries PlainSec en 2026-08-01T18:34:41Z Cosmos DB Gateway Secret Breaks Tenant Boundaries https://plainsec.com/stories/f506b21d-dab0-4bb0-b0ae-d2cf65c8e683/a-rehearsed-npm-playbook-reached-major-packages PlainSec en 2026-08-01T18:34:41Z A Rehearsed npm Playbook Reached Major Packages https://plainsec.com/stories/b41afe6c-e77f-4672-835c-d36050de8e4b/hotel-wi-fi-becomes-the-first-trust-boundary PlainSec en 2026-08-01T18:34:41Z Hotel Wi‑Fi Becomes the First Trust Boundary https://plainsec.com/stories/2c389046-c769-417c-bf50-fef23e54a208/ai-eval-misconfigurations-reached-real-production-systems PlainSec en 2026-08-01T18:34:41Z AI Eval Misconfigurations Reached Real Production Systems https://plainsec.com/stories/4dc4baa7-13db-4f99-acc0-4334cfa192b1/chrome-bug-discovery-is-outrunning-release-cadence PlainSec en 2026-08-01T18:34:41Z Chrome Bug Discovery Is Outrunning Release Cadence https://plainsec.com/stories/1e0689f0-d47f-4d34-b26a-27fff9d062a0/sbom-baseline-expands-to-ai-and-saas PlainSec en 2026-08-01T18:34:41Z SBOM Baseline Expands to AI and SaaS https://plainsec.com/stories/f5d3120b-e24d-4572-ba9b-c323fe649409/memory-only-backdoors-evade-disk-based-hunting PlainSec en 2026-08-01T18:34:41Z Memory-Only Backdoors Evade Disk-Based Hunting https://plainsec.com/stories/4f18545c-94e3-4db9-9e59-b61754b70190/saml-login-bypass-opens-web-help-desk-admin-access PlainSec en 2026-08-01T18:34:41Z SAML Login Bypass Opens Web Help Desk Admin Access https://plainsec.com/stories/56f322d7-017c-40c7-993f-628699d966ce/github-mailboxes-hide-a-persistent-law-firm-foothold PlainSec en 2026-08-01T18:34:41Z GitHub Mailboxes Hide a Persistent Law Firm Foothold https://plainsec.com/stories/94cb3aa2-29f4-4028-b90e-9508d83796d7/owa-access-now-survives-resets-and-reimaging PlainSec en 2026-08-01T02:28:12Z OWA Access Now Survives Resets and Reimaging https://plainsec.com/stories/06953381-d204-4fac-9e06-6bff9bc5cce6/trusted-korean-pages-became-endpoint-compromise-paths PlainSec en 2026-08-01T02:28:12Z Trusted Korean Pages Became Endpoint Compromise Paths https://plainsec.com/stories/36e4565e-793b-4b06-8e9c-44f4bf9e3151/vcenter-flaws-expose-the-whole-virtual-estate PlainSec en 2026-08-01T02:28:12Z vCenter Flaws Expose the Whole Virtual Estate https://plainsec.com/stories/2d363362-21f1-4a95-ab75-81247d798908/gitlab-patch-cuts-across-review-and-release-controls PlainSec en 2026-08-01T02:28:12Z GitLab Patch Cuts Across Review and Release Controls https://plainsec.com/stories/bcf6cc60-52ca-4825-8c1b-c02f4f42a42e/teamcity-s-agent-channel-becomes-the-entry-point PlainSec en 2026-08-01T02:28:12Z TeamCity’s Agent Channel Becomes the Entry Point https://plainsec.com/stories/cab1695d-3b71-46de-8e4c-0539c6f4609a/microsoft-consent-pages-let-phishing-bypass-fake-login-checks PlainSec en 2026-08-01T02:28:12Z Microsoft Consent Pages Let Phishing Bypass Fake-Login Checks