https://plainsec.com/stories/1b98725b-a422-44cf-b114-211ac3e237f0/doubloon-dredger-hijacks-notion-trust-for-token-theft PlainSec en 2026-08-24T15:00:53Z Doubloon Dredger Hijacks Notion Trust for Token Theft https://plainsec.com/it/stories/1b98725b-a422-44cf-b114-211ac3e237f0/doubloon-dredger-hijacks-notion-trust-for-token-theft PlainSec it 2026-08-24T15:00:53Z Notion fidato apre la strada ai token Microsoft https://plainsec.com/stories/956bf54b-e40f-48e2-a758-7ea24671eeb4/firefox-extension-ring-rotates-from-sports-to-theft PlainSec en 2026-08-24T16:25:01Z Firefox Extension Ring Keeps Stealing Wallet Secrets https://plainsec.com/it/stories/956bf54b-e40f-48e2-a758-7ea24671eeb4/firefox-extension-ring-rotates-from-sports-to-theft PlainSec it 2026-08-24T16:25:01Z Le estensioni Firefox usa-e-getta diventano un cache segreta di wallet https://plainsec.com/stories/636a64aa-782a-4162-8aa8-dae957e7744a/leaked-aws-keys-stay-live-for-years PlainSec en 2026-08-24T10:29:38Z Leaked AWS Keys Stay Live for Years https://plainsec.com/it/stories/636a64aa-782a-4162-8aa8-dae957e7744a/leaked-aws-keys-stay-live-for-years PlainSec it 2026-08-24T10:29:38Z Le chiavi AWS esposte restano vive per anni https://plainsec.com/stories/b2946647-5de5-42b6-bedd-3ffcde2a680e/apollo-confirms-cloud-breach-after-social-engineering PlainSec en 2026-08-24T04:25:42Z Apollo Confirms Cloud Breach, SSNs Exposed https://plainsec.com/it/stories/b2946647-5de5-42b6-bedd-3ffcde2a680e/apollo-confirms-cloud-breach-after-social-engineering PlainSec it 2026-08-24T04:25:42Z Apollo conferma il furto di SSN dal cloud https://plainsec.com/stories/4c251ddb-ceeb-4d2c-97b1-2e8eff6f3858/xz-utils-showed-build-inputs-are-part-of-the-attack-surface PlainSec en 2026-08-24T04:25:42Z XZ Utils Showed Build Inputs Are Part of the Attack Surface https://plainsec.com/it/stories/4c251ddb-ceeb-4d2c-97b1-2e8eff6f3858/xz-utils-showed-build-inputs-are-part-of-the-attack-surface PlainSec it 2026-08-24T04:25:42Z XZ Utils mostra che il bersaglio è la build https://plainsec.com/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec en 2026-08-24T04:25:42Z GitLab Exploitation Turns Repo History Into a Target https://plainsec.com/it/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec it 2026-08-24T04:25:42Z GitLab passa da disclosure a manipolazione silenziosa https://plainsec.com/stories/34d355df-d149-40ab-89e4-659a2523f46d/openai-slows-frontier-training-and-research-access PlainSec en 2026-08-24T04:25:42Z OpenAI Moves Model Security Into Runtime Containment https://plainsec.com/it/stories/34d355df-d149-40ab-89e4-659a2523f46d/openai-slows-frontier-training-and-research-access PlainSec it 2026-08-24T04:25:42Z OpenAI porta il controllo dentro il runtime dei model https://plainsec.com/stories/2ee230e7-641e-4a0c-81d7-779006c90433/citrix-netscaler-flaws-hit-gateway-trust-points PlainSec en 2026-08-24T04:25:42Z Citrix NetScaler Bypass Targets Trust Roles https://plainsec.com/it/stories/2ee230e7-641e-4a0c-81d7-779006c90433/citrix-netscaler-flaws-hit-gateway-trust-points PlainSec it 2026-08-24T04:25:42Z Il front door di NetScaler salta il login su ruoli chiave https://plainsec.com/stories/fe2b317d-e6dc-4f2a-bce8-2acedc33400e/iran-linked-hackers-knock-uk-generator-offline-for-days PlainSec en 2026-08-24T15:00:53Z Iran-Linked Hackers Knock UK Generator Offline for Days https://plainsec.com/it/stories/fe2b317d-e6dc-4f2a-bce8-2acedc33400e/iran-linked-hackers-knock-uk-generator-offline-for-days PlainSec it 2026-08-24T15:00:53Z Quattro giorni di fermo in un piccolo generatore UK https://plainsec.com/stories/287ef7ed-0f09-4a19-830f-b2d71850aeb0/grok-followed-hidden-instructions-in-ciphertext-pages PlainSec en 2026-08-24T04:25:42Z Grok Followed Hidden Instructions in Ciphertext Pages https://plainsec.com/it/stories/287ef7ed-0f09-4a19-830f-b2d71850aeb0/grok-followed-hidden-instructions-in-ciphertext-pages PlainSec it 2026-08-24T04:25:42Z Grok aggirato con istruzioni cifrate nascoste https://plainsec.com/stories/fa641354-aec4-49fd-a65b-5b55f9ef1779/dofun-updaters-smuggled-malware-into-car-head-units PlainSec en 2026-08-24T04:25:42Z DoFun Updaters Smuggled Malware Into Car Head Units https://plainsec.com/it/stories/fa641354-aec4-49fd-a65b-5b55f9ef1779/dofun-updaters-smuggled-malware-into-car-head-units PlainSec it 2026-08-24T04:25:42Z L’aggiornamento della head unit diventa un canale per il botnet https://plainsec.com/stories/afeb6e07-6c25-42c0-8369-f026bb992bc8/sickkids-data-exposure-stays-outside-patient-systems PlainSec en 2026-08-24T04:25:42Z SickKids Data Exposure Stays Outside Patient Systems https://plainsec.com/it/stories/afeb6e07-6c25-42c0-8369-f026bb992bc8/sickkids-data-exposure-stays-outside-patient-systems PlainSec it 2026-08-24T04:25:42Z I dati HR di SickKids esposti, non i sistemi clinici https://plainsec.com/stories/9d9b1df9-0cfe-4287-9654-761cf31b473e/cisa-turns-logging-into-an-operating-blueprint PlainSec en 2026-08-24T12:45:24Z CISA Turns Logging into an Operating Blueprint https://plainsec.com/it/stories/9d9b1df9-0cfe-4287-9654-761cf31b473e/cisa-turns-logging-into-an-operating-blueprint PlainSec it 2026-08-24T12:45:24Z CISA sposta il logging da raccolta a governo operativo https://plainsec.com/stories/a283a891-94f7-4226-bab9-8545dd606c8a/cybersheath-survey-shows-sprs-scores-losing-trust PlainSec en 2026-08-24T08:30:40Z CyberSheath Survey Shows SPRS Scores Losing Trust https://plainsec.com/it/stories/a283a891-94f7-4226-bab9-8545dd606c8a/cybersheath-survey-shows-sprs-scores-losing-trust PlainSec it 2026-08-24T08:30:40Z I punteggi CMMC salgono, ma perde fiducia il loro valore https://plainsec.com/stories/bbe91675-c886-4d1d-8836-cec6b188f5b9/keycloak-reset-bypass-reaches-every-app-behind-sso PlainSec en 2026-08-24T15:00:53Z Keycloak Reset Bypass Reaches Every App Behind SSO https://plainsec.com/it/stories/bbe91675-c886-4d1d-8836-cec6b188f5b9/keycloak-reset-bypass-reaches-every-app-behind-sso PlainSec it 2026-08-24T15:00:53Z Keycloak trasforma il reset password in account takeover https://plainsec.com/stories/37456d94-b7aa-45f6-8116-98737eb71fe9/pen-test-partners-found-wi-fi-bridging-ot-segmentation PlainSec en 2026-08-24T16:25:01Z Pen Test Partners Found Wi-Fi Bridging OT Segmentation https://plainsec.com/it/stories/37456d94-b7aa-45f6-8116-98737eb71fe9/pen-test-partners-found-wi-fi-bridging-ot-segmentation PlainSec it 2026-08-24T16:25:01Z Il Wi‑Fi di sala controllo ha rotto la segregazione OT https://plainsec.com/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec en 2026-08-24T04:25:42Z NCSC and Meta Show Approved AI Can Still Leak Data https://plainsec.com/it/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec it 2026-08-24T04:25:42Z Da shadow AI a agenti approvati che escono dal binario https://plainsec.com/stories/ad316e5d-c3b6-4215-a642-75dbc2b56c8a/agent-tesla-hides-in-emoji-laced-finance-lures PlainSec en 2026-08-24T12:45:24Z Agent Tesla Hides in Emoji-Laced Finance Lures https://plainsec.com/it/stories/ad316e5d-c3b6-4215-a642-75dbc2b56c8a/agent-tesla-hides-in-emoji-laced-finance-lures PlainSec it 2026-08-24T12:45:24Z Agent Tesla v4 passa nei filtri grazie agli emoji https://plainsec.com/stories/ca87b915-6da4-4704-b23a-8658e4610b79/check-point-finds-a-signed-windows-kernel-abuse-path PlainSec en 2026-08-24T06:31:21Z Check Point Finds a Signed Windows Kernel Abuse Path https://plainsec.com/it/stories/ca87b915-6da4-4704-b23a-8658e4610b79/check-point-finds-a-signed-windows-kernel-abuse-path PlainSec it 2026-08-24T06:31:21Z Un driver firmato da Microsoft può diventare un primitive kernel https://plainsec.com/stories/a21564c8-49c1-477c-8ea7-1d05af0ca702/omada-gateway-patches-span-many-models PlainSec en 2026-08-24T04:25:42Z Omada Gateway Patches Span Many Models https://plainsec.com/it/stories/a21564c8-49c1-477c-8ea7-1d05af0ca702/omada-gateway-patches-span-many-models PlainSec it 2026-08-24T04:25:42Z Molti modelli Omada, una patch per ciascuno https://plainsec.com/stories/f712f12e-0956-4934-9969-050fc0575251/rust-crates-hid-malware-in-build-scripts PlainSec en 2026-08-24T04:25:42Z North Korean Link Deepens Rust Build-Time Poisoning https://plainsec.com/it/stories/f712f12e-0956-4934-9969-050fc0575251/rust-crates-hid-malware-in-build-scripts PlainSec it 2026-08-24T04:25:42Z Compilare bastava per eseguire il backdoor nei crate Rust https://plainsec.com/stories/5b1bd3b9-132a-4c85-b15c-57495abeacf6/uat-10147-hides-spectre-inside-server-intrusions PlainSec en 2026-08-24T10:29:38Z UAT-10147 Hides SPECTRE Inside Server Intrusions https://plainsec.com/it/stories/5b1bd3b9-132a-4c85-b15c-57495abeacf6/uat-10147-hides-spectre-inside-server-intrusions PlainSec it 2026-08-24T10:29:38Z SPECTRE trasforma un server compromesso in una fonte di reddito https://plainsec.com/stories/5e750126-7a80-4e2a-b578-a6d412e66324/isolated-vm-flaw-breaks-the-sandbox-boundary PlainSec en 2026-08-24T06:31:21Z isolated-vm Flaw Breaks the Sandbox Boundary https://plainsec.com/it/stories/5e750126-7a80-4e2a-b578-a6d412e66324/isolated-vm-flaw-breaks-the-sandbox-boundary PlainSec it 2026-08-24T06:31:21Z Il confine dell’isolamento cede nel marshalling di isolated-vm https://plainsec.com/stories/221fe620-f03a-49c2-b731-f4159a20383c/atlassian-patches-multiple-high-severity-stack-flaws PlainSec en 2026-08-24T12:45:24Z Atlassian Fans One Library Fix Across Its Stack https://plainsec.com/it/stories/221fe620-f03a-49c2-b731-f4159a20383c/atlassian-patches-multiple-high-severity-stack-flaws PlainSec it 2026-08-24T12:45:24Z Atlassian chiude 83 falle ereditate nelle sue app server https://plainsec.com/stories/e79b7f4d-559c-4e0a-8889-0a2c4e1542de/trojanized-npm-packages-load-redc2-on-import PlainSec en 2026-08-24T04:25:42Z Trojanized npm Packages Load RedC2 on Import https://plainsec.com/it/stories/e79b7f4d-559c-4e0a-8889-0a2c4e1542de/trojanized-npm-packages-load-redc2-on-import PlainSec it 2026-08-24T04:25:42Z Un import trasforma un pacchetto npm in backdoor Linux https://plainsec.com/stories/c1932610-2ae9-457b-b2d4-480ffc771377/black-kite-finds-ransomware-still-prefers-mid-market-manufacturers PlainSec en 2026-08-24T06:31:21Z Black Kite Finds Ransomware Still Prefers Mid-Market Manufacturers https://plainsec.com/it/stories/c1932610-2ae9-457b-b2d4-480ffc771377/black-kite-finds-ransomware-still-prefers-mid-market-manufacturers PlainSec it 2026-08-24T06:31:21Z Il ransomware si concentra ancora sui mid-market manifatturieri https://plainsec.com/stories/c035ed06-e750-4a52-be23-f034c3fc1470/cisco-secure-workload-needs-three-part-hardening PlainSec en 2026-08-24T08:30:40Z Cisco Secure Workload Gets Five-CVE Hardening Fix https://plainsec.com/it/stories/c035ed06-e750-4a52-be23-f034c3fc1470/cisco-secure-workload-needs-three-part-hardening PlainSec it 2026-08-24T08:30:40Z Cinque CVE in Cisco Secure Workload richiedono aggiornamenti coordinati https://plainsec.com/stories/9b074b15-9f5b-48de-9d7f-ac03b5a23aea/dgraph-alpha-rpc-lets-outsiders-replace-group-storage PlainSec en 2026-08-24T06:31:21Z Dgraph Alpha RPC Lets Outsiders Replace Group Storage https://plainsec.com/it/stories/9b074b15-9f5b-48de-9d7f-ac03b5a23aea/dgraph-alpha-rpc-lets-outsiders-replace-group-storage PlainSec it 2026-08-24T06:31:21Z Un RPC pubblico di Dgraph può cancellare e sostituire gruppi https://plainsec.com/stories/52e43485-7483-4e1a-b380-e77e5a6b1036/wyden-pushes-gao-to-audit-federal-spyware-use PlainSec en 2026-08-24T06:31:21Z Wyden Pushes GAO to Audit Federal Spyware Use https://plainsec.com/it/stories/52e43485-7483-4e1a-b380-e77e5a6b1036/wyden-pushes-gao-to-audit-federal-spyware-use PlainSec it 2026-08-24T06:31:21Z La vera posta in gioco è il vuoto di controllo sullo spyware federale https://plainsec.com/stories/882d133d-bfe7-4b8b-a04d-309881a62b35/ibm-websphere-advisory-mixes-login-bypass-and-dos PlainSec en 2026-08-24T06:31:21Z IBM WebSphere Advisory Mixes Login Bypass and DoS https://plainsec.com/it/stories/882d133d-bfe7-4b8b-a04d-309881a62b35/ibm-websphere-advisory-mixes-login-bypass-and-dos PlainSec it 2026-08-24T06:31:21Z WebSphere Liberty rompe il confine di autenticazione https://plainsec.com/stories/b1260bcb-f008-4618-afbc-f78fb957a1c8/toxicpanda-2-0-turns-android-permissions-into-persistence PlainSec en 2026-08-23T04:47:51Z ToxicPanda 2.0 Turns Android Permissions Into Persistence https://plainsec.com/it/stories/b1260bcb-f008-4618-afbc-f78fb957a1c8/toxicpanda-2-0-turns-android-permissions-into-persistence PlainSec it 2026-08-23T04:47:51Z Android si scopre governato dai suoi stessi permessi