https://plainsec.com/stories/f05ca80b-5f6e-4c17-8996-f524cf2fd0d4/mlflow-webhook-test-ssrf-reached-internal-metadata PlainSec en 2026-08-19T04:29:31Z MLflow SSRF Is Already Harvesting Cloud Credentials https://plainsec.com/it/stories/f05ca80b-5f6e-4c17-8996-f524cf2fd0d4/mlflow-webhook-test-ssrf-reached-internal-metadata PlainSec it 2026-08-19T04:29:31Z MLflow diventa un proxy per rubare credenziali cloud https://plainsec.com/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec en 2026-08-19T04:29:31Z GitLab GraphQL Flaws Invite Fast State Changes https://plainsec.com/it/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec it 2026-08-19T04:29:31Z GitLab espone la scrittura anonima sulla GraphQL pubblica https://plainsec.com/stories/db636e44-6cb2-4eaa-94a4-22d0295c5c65/medusa-scales-ransomware-with-brokered-access PlainSec en 2026-08-19T04:29:31Z Medusa Scales Ransomware With Brokered Access https://plainsec.com/it/stories/db636e44-6cb2-4eaa-94a4-22d0295c5c65/medusa-scales-ransomware-with-brokered-access PlainSec it 2026-08-19T04:29:31Z Medusa trasforma la finestra di patch in attacco https://plainsec.com/stories/9c9ab7dc-f7d5-4968-bbeb-53a4a88df13b/cisa-confirms-windows-task-host-ransomware-exploitation PlainSec en 2026-08-19T04:29:31Z CISA Confirms Windows Task Host Ransomware Exploitation https://plainsec.com/it/stories/9c9ab7dc-f7d5-4968-bbeb-53a4a88df13b/cisa-confirms-windows-task-host-ransomware-exploitation PlainSec it 2026-08-19T04:29:31Z Ransomware sfrutta il Task Host di Windows per elevare i privilegi https://plainsec.com/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec en 2026-08-19T04:29:31Z Azure Tenant Dumps Expose the Org Chart https://plainsec.com/it/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec it 2026-08-19T04:29:31Z L’export del tenant diventa la mappa per il BEC https://plainsec.com/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec en 2026-08-19T04:29:31Z GeoTools Regression Reopens GeoServer SQL Injection https://plainsec.com/it/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec it 2026-08-19T04:29:31Z GeoTools riapre un vecchio buco in GeoServer https://plainsec.com/stories/17288618-7eed-4f82-8226-76b0dad10998/ait-gui-lets-browsers-send-spacecraft-commands PlainSec en 2026-08-19T04:29:31Z AIT-GUI Lets Browsers Send Spacecraft Commands https://plainsec.com/it/stories/17288618-7eed-4f82-8226-76b0dad10998/ait-gui-lets-browsers-send-spacecraft-commands PlainSec it 2026-08-19T04:29:31Z Un browser può far parlare la console di comando https://plainsec.com/stories/25e6bc32-45ce-46f6-afa2-3980be2b2cde/anthropic-and-epfl-map-agent-to-agent-prompt-spread PlainSec en 2026-08-19T04:29:31Z Anthropic and EPFL Map Agent-to-Agent Prompt Spread https://plainsec.com/it/stories/25e6bc32-45ce-46f6-afa2-3980be2b2cde/anthropic-and-epfl-map-agent-to-agent-prompt-spread PlainSec it 2026-08-19T04:29:31Z Un warning nel prompt ferma la propaganda tra agenti https://plainsec.com/stories/3d195d15-9353-47d1-a139-ca808a5926de/twinloot-hides-its-control-channel-in-microsoft-365 PlainSec en 2026-08-19T04:29:31Z TwinLoot Hides Its Control Channel in Microsoft 365 https://plainsec.com/it/stories/3d195d15-9353-47d1-a139-ca808a5926de/twinloot-hides-its-control-channel-in-microsoft-365 PlainSec it 2026-08-19T04:29:31Z Microsoft 365 diventa il canale di comando di TwinLoot https://plainsec.com/stories/6c19cb1f-cfea-4096-a57e-362612a86ff0/copilot-s-hidden-url-turned-clicks-into-prompts PlainSec en 2026-08-19T04:29:31Z Microsoft Copilot Patch Lands Amid Scope Dispute https://plainsec.com/it/stories/6c19cb1f-cfea-4096-a57e-362612a86ff0/copilot-s-hidden-url-turned-clicks-into-prompts PlainSec it 2026-08-19T04:29:31Z Copilot Personal: patch su una falla ancora contestata https://plainsec.com/stories/dad8261b-8c20-43e4-bd8b-35ee86f60a5c/rapid7-says-ai-is-swamping-patch-triage PlainSec en 2026-08-19T04:29:31Z Rapid7 Says AI Is Swamping Patch Triage https://plainsec.com/it/stories/dad8261b-8c20-43e4-bd8b-35ee86f60a5c/rapid7-says-ai-is-swamping-patch-triage PlainSec it 2026-08-19T04:29:31Z L’AI allarga il divario tra disclosure e triage https://plainsec.com/stories/40203f24-dce8-49c5-8a7a-fcf61255337e/attackers-use-ai-to-rank-what-to-steal PlainSec en 2026-08-19T04:29:31Z Attackers Use AI to Rank What to Steal https://plainsec.com/it/stories/40203f24-dce8-49c5-8a7a-fcf61255337e/attackers-use-ai-to-rank-what-to-steal PlainSec it 2026-08-19T04:29:31Z L’AI diventa l’operatore dentro l’intrusione https://plainsec.com/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec en 2026-08-19T04:29:31Z City Forum Emerges as One Persistent Scraper https://plainsec.com/it/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec it 2026-08-19T04:29:31Z Un solo scraper tiene aperti i portal guest di Salesforce e ServiceNow https://plainsec.com/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec en 2026-08-19T04:29:31Z SafePal Order Leak Moves Into Resale https://plainsec.com/it/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec it 2026-08-19T04:29:31Z Dalla fuga di dati al mercato del phishing SafePal https://plainsec.com/stories/4721b482-4767-478d-9d72-322fdf2bf7fe/new-api-flaws-let-attackers-inflate-balance-reach-root PlainSec en 2026-08-19T04:29:31Z New API Flaws Let Attackers Inflate Balance, Reach Root https://plainsec.com/it/stories/4721b482-4767-478d-9d72-322fdf2bf7fe/new-api-flaws-let-attackers-inflate-balance-reach-root PlainSec it 2026-08-19T04:29:31Z New API espone saldo e account root con due bug critici https://plainsec.com/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec en 2026-08-18T04:27:09Z DGFiP Breach Ran Through Trusted Accounts https://plainsec.com/it/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec it 2026-08-18T04:27:09Z La sospensione degli account non ha fermato il furto in DGFiP https://plainsec.com/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec en 2026-08-18T04:27:09Z SAP Commerce Cloud Exploit Lands Days After Patch https://plainsec.com/it/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec it 2026-08-18T04:27:09Z SAP Commerce Cloud esposto senza credenziali rubate https://plainsec.com/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec en 2026-08-18T17:09:06Z Irregular’s Sandbox Mistake Hit a Real Domain https://plainsec.com/it/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec it 2026-08-18T17:09:06Z Un errore di naming trasforma la simulazione in attacco reale https://plainsec.com/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec en 2026-08-18T23:33:34Z Unisoc Modem Flaw Breaks the Android Boundary https://plainsec.com/it/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec it 2026-08-18T23:33:34Z Il modem diventa la via d’ingresso al kernel Android https://plainsec.com/stories/1ed9ee51-453c-47d2-ac0a-0c02de523870/clop-s-windchill-shell-knows-too-much PlainSec en 2026-08-19T02:22:27Z Clop’s Windchill Shell Knows Too Much https://plainsec.com/it/stories/1ed9ee51-453c-47d2-ac0a-0c02de523870/clop-s-windchill-shell-knows-too-much PlainSec it 2026-08-19T02:22:27Z Windchill diventa un estrattore di credenziali e file https://plainsec.com/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec en 2026-08-18T18:32:19Z Evooo1Bot Turns Edge CVEs Into Proxy Nodes https://plainsec.com/it/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec it 2026-08-18T18:32:19Z I gateway compromessi diventano proxy persistenti https://plainsec.com/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec en 2026-08-19T02:22:27Z Forminator Upload Flaw Can Run Attacker PHP https://plainsec.com/it/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec it 2026-08-19T02:22:27Z La form di WordPress può diventare un webshell host https://plainsec.com/stories/702ba5e9-6823-4932-b37d-6afc356103fc/anthropic-tests-show-claude-agents-sabotaging-peers PlainSec en 2026-08-18T00:34:58Z Anthropic Tests Show Claude Agents Sabotaging Peers https://plainsec.com/it/stories/702ba5e9-6823-4932-b37d-6afc356103fc/anthropic-tests-show-claude-agents-sabotaging-peers PlainSec it 2026-08-18T00:34:58Z Claude agenti contro Claude: il rischio interno emerge https://plainsec.com/stories/f000ca9f-a99b-4898-960c-8ee812c9cb8d/mcp-connectors-hide-a-high-value-trust-boundary PlainSec en 2026-08-17T13:39:09Z MCP Connectors Hide a High-Value Trust Boundary https://plainsec.com/it/stories/f000ca9f-a99b-4898-960c-8ee812c9cb8d/mcp-connectors-hide-a-high-value-trust-boundary PlainSec it 2026-08-17T13:39:09Z MCP trasforma i connector AI in un archivio di segreti privilegiati https://plainsec.com/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec en 2026-08-17T08:34:49Z vCenter Exploits Left Reverse SSH Footholds Behind https://plainsec.com/it/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec it 2026-08-17T08:34:49Z vCenter patchato, ma resta un foothold nascosto https://plainsec.com/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec en 2026-08-17T19:16:51Z AmnesiaStealer Adds Live Browser Session Control https://plainsec.com/it/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec it 2026-08-17T19:16:51Z AmnesiaStealer passa dal furto account al controllo della sessione https://plainsec.com/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec en 2026-08-17T15:02:03Z Agent Guardrails Fail Before the Model Speaks https://plainsec.com/it/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec it 2026-08-17T15:02:03Z I guardrail del modello non bastano più agli agent https://plainsec.com/stories/1bcd3645-4ab1-4838-9ed9-dc11ecc7c858/certighost-lets-a-domain-user-impersonate-a-dc PlainSec en 2026-08-18T02:23:13Z Certighost Lets a Domain User Impersonate a DC https://plainsec.com/it/stories/1bcd3645-4ab1-4838-9ed9-dc11ecc7c858/certighost-lets-a-domain-user-impersonate-a-dc PlainSec it 2026-08-18T02:23:13Z La CA di dominio diventa un oracle di fiducia https://plainsec.com/stories/47d99a45-561f-475d-a393-3e49994933f9/germany-brazil-arrest-seven-in-clone-card-fraud-case PlainSec en 2026-08-18T02:23:13Z Germany, Brazil Arrest Seven in Clone-Card Fraud Case https://plainsec.com/it/stories/47d99a45-561f-475d-a393-3e49994933f9/germany-brazil-arrest-seven-in-clone-card-fraud-case PlainSec it 2026-08-18T02:23:13Z Raffica di arresti in un caso di frode bancaria transfrontaliera https://plainsec.com/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec en 2026-08-18T02:23:13Z Jewelbug Merges Espionage and Crypto Theft https://plainsec.com/it/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec it 2026-08-18T02:23:13Z Jewelbug unisce spionaggio di Stato e furto crypto dallo stesso panel https://plainsec.com/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec en 2026-08-18T02:23:13Z WindRelay and SpyNote Fueled a 13-Minute Call Scam https://plainsec.com/it/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec it 2026-08-18T02:23:13Z Una chiamata da 13 minuti basta per clonare una carta https://plainsec.com/stories/9dff98a1-ea40-4cdc-8841-ad9f2b47f186/flashpoint-shows-infostealers-now-run-at-machine-speed PlainSec en 2026-08-18T02:23:13Z Flashpoint Shows Infostealers Now Run at Machine Speed https://plainsec.com/it/stories/9dff98a1-ea40-4cdc-8841-ad9f2b47f186/flashpoint-shows-infostealers-now-run-at-machine-speed PlainSec it 2026-08-18T02:23:13Z I log rubati diventano un motore di accesso automatico