https://plainsec.com/stories/656e9e57-fc96-477b-a13e-e4ad83dd6272/unc6240-bypasses-peoplesoft-waf-rules-again PlainSec en 2026-09-28T04:21:12Z ShinyHunters Reroute PeopleSoft Exploits Around WAFs https://plainsec.com/it/stories/656e9e57-fc96-477b-a13e-e4ad83dd6272/unc6240-bypasses-peoplesoft-waf-rules-again PlainSec it 2026-09-28T04:21:12Z Il bypass del WAF riapre la campagna su PeopleSoft https://plainsec.com/stories/35ab93e1-9a0f-4c2d-8500-d4822c5a58b3/storm-3168-used-azure-identities-to-wreck-tenants PlainSec en 2026-09-28T10:44:33Z JadePuffer Starts Targeting Azure Recovery Paths https://plainsec.com/it/stories/35ab93e1-9a0f-4c2d-8500-d4822c5a58b3/storm-3168-used-azure-identities-to-wreck-tenants PlainSec it 2026-09-28T10:44:33Z Azure, JadePuffer punta anche su backup e recovery https://plainsec.com/stories/dd8bd376-1907-4786-8c76-38952ce33667/gitlab-path-traversal-puts-servers-at-risk PlainSec en 2026-09-28T04:21:12Z GitLab Flaw Hits KEV Under Active Exploitation https://plainsec.com/it/stories/dd8bd376-1907-4786-8c76-38952ce33667/gitlab-path-traversal-puts-servers-at-risk PlainSec it 2026-09-28T04:21:12Z GitLab passa da advisory a emergenza operativa https://plainsec.com/stories/933701a5-4ac7-42b1-bc8b-6ef288c2f65b/fbi-portal-breach-exposed-personnel-dossiers PlainSec en 2026-09-28T20:58:37Z FBI Portal Breach Exposed Personnel Dossiers https://plainsec.com/it/stories/933701a5-4ac7-42b1-bc8b-6ef288c2f65b/fbi-portal-breach-exposed-personnel-dossiers PlainSec it 2026-09-28T20:58:37Z Dati FBI esposti, il rischio è sul personale https://plainsec.com/stories/459db3dc-8d6e-4eb3-a699-f7f7a4415247/roundcube-flaw-turns-mail-logins-into-server-control PlainSec en 2026-09-28T04:21:12Z Roundcube SQL Injection Hits Before Login https://plainsec.com/it/stories/459db3dc-8d6e-4eb3-a699-f7f7a4415247/roundcube-flaw-turns-mail-logins-into-server-control PlainSec it 2026-09-28T04:21:12Z Roundcube passa da abuso di account a compromissione pre-login https://plainsec.com/stories/6bb28d12-5494-4e1c-b5f5-559dcc3ff947/team-cymru-finds-ai-proxy-layer-hiding-abuse-origins PlainSec en 2026-09-28T16:29:59Z Team Cymru Finds AI Proxy Layer Hiding Abuse Origins https://plainsec.com/it/stories/6bb28d12-5494-4e1c-b5f5-559dcc3ff947/team-cymru-finds-ai-proxy-layer-hiding-abuse-origins PlainSec it 2026-09-28T16:29:59Z La proxy economy dell’AI nasconde l’origine degli abusi https://plainsec.com/stories/a2b5d009-167e-441c-a8d1-edcacdf01869/openai-agents-crossed-into-public-web-traffic PlainSec en 2026-09-28T04:21:12Z OpenAI Agents Crossed Into Public Web Traffic https://plainsec.com/it/stories/a2b5d009-167e-441c-a8d1-edcacdf01869/openai-agents-crossed-into-public-web-traffic PlainSec it 2026-09-28T04:21:12Z Agenti OpenAI trasformano le eval in un rischio operativo https://plainsec.com/stories/6b6348ca-ba20-472e-a045-0f023ed6324e/bitget-wallet-theft-exposes-custody-risk PlainSec en 2026-09-28T04:21:12Z Bitget’s Backend Became the Thief https://plainsec.com/it/stories/6b6348ca-ba20-472e-a045-0f023ed6324e/bitget-wallet-theft-exposes-custody-risk PlainSec it 2026-09-28T04:21:12Z Bitget, il backend che approva i prelievi è stato tradito https://plainsec.com/stories/c3e7e2c4-9bf8-4902-bb84-c79e36b3ff0c/shinyhunters-kept-going-after-dutch-arrest PlainSec en 2026-09-28T20:58:37Z ShinyHunters Kept Going After Dutch Arrest https://plainsec.com/it/stories/c3e7e2c4-9bf8-4902-bb84-c79e36b3ff0c/shinyhunters-kept-going-after-dutch-arrest PlainSec it 2026-09-28T20:58:37Z L’arresto non ferma ShinyHunters, anzi accelera https://plainsec.com/stories/4dec7c3d-6993-4424-a342-31260fde9394/upguard-finds-supabase-databases-exposing-user-data PlainSec en 2026-09-28T20:58:37Z UpGuard Finds Supabase Databases Exposing User Data https://plainsec.com/it/stories/4dec7c3d-6993-4424-a342-31260fde9394/upguard-finds-supabase-databases-exposing-user-data PlainSec it 2026-09-28T20:58:37Z Migliaia di database Supabase restano pubblici per errore https://plainsec.com/stories/d8541b5e-cc98-4380-a046-b13389151ac9/hugging-face-study-shows-agents-chain-access-into-lateral-movement PlainSec en 2026-09-28T04:21:12Z Gemini Test Shows Prompts Don’t Stop Actions https://plainsec.com/it/stories/d8541b5e-cc98-4380-a046-b13389151ac9/hugging-face-study-shows-agents-chain-access-into-lateral-movement PlainSec it 2026-09-28T04:21:12Z I prompt non bastano quando l’agente può agire https://plainsec.com/stories/9982227b-5bb6-44f4-928e-914b2ba3ee04/carbonato-turns-exposed-docker-daemons-into-botnet-hosts PlainSec en 2026-09-28T13:00:58Z Carbonato Turns Exposed Docker Daemons into Botnet Hosts https://plainsec.com/it/stories/9982227b-5bb6-44f4-928e-914b2ba3ee04/carbonato-turns-exposed-docker-daemons-into-botnet-hosts PlainSec it 2026-09-28T13:00:58Z Docker esposti trasformati in controllo remoto per botnet https://plainsec.com/stories/0bfc92a0-bc14-45ac-addf-fe7decf9670a/infostealers-now-reach-developer-ai-sessions PlainSec en 2026-09-28T04:21:12Z Infostealers Now Reach Developer AI Sessions https://plainsec.com/it/stories/0bfc92a0-bc14-45ac-addf-fe7decf9670a/infostealers-now-reach-developer-ai-sessions PlainSec it 2026-09-28T04:21:12Z Gli infostealer allargano il furto ai token degli assistant AI https://plainsec.com/stories/e84514f7-5a34-4f6d-a7fc-a3a8fe0b246f/ncc-group-sees-record-august-ransomware-volume PlainSec en 2026-09-28T10:44:33Z NCC Group Sees Ransomware Shift Toward Industry https://plainsec.com/it/stories/e84514f7-5a34-4f6d-a7fc-a3a8fe0b246f/ncc-group-sees-record-august-ransomware-volume PlainSec it 2026-09-28T10:44:33Z Qilin guida il picco ransomware e sposta il baricentro https://plainsec.com/stories/d710f008-35b8-4b54-984b-66bc27ba98be/cisa-flags-certification-barriers-in-election-patching PlainSec en 2026-09-28T04:21:12Z CISA Flags Certification Barriers in Election Patching https://plainsec.com/it/stories/d710f008-35b8-4b54-984b-66bc27ba98be/cisa-flags-certification-barriers-in-election-patching PlainSec it 2026-09-28T04:21:12Z Piano CISA: la certificazione rallenta le patch https://plainsec.com/stories/8fd0db4f-eecf-411a-9a86-132e1225b758/tdengine-flaw-can-drop-telemetry-visibility PlainSec en 2026-09-28T04:21:12Z TDengine Flaw Can Drop Telemetry Visibility https://plainsec.com/it/stories/8fd0db4f-eecf-411a-9a86-132e1225b758/tdengine-flaw-can-drop-telemetry-visibility PlainSec it 2026-09-28T04:21:12Z Un pacchetto basta a far cadere la telemetria industriale https://plainsec.com/stories/6721938a-41a4-4c5c-96fc-0e4c5bf0b126/macsync-swaps-scripts-for-native-macos-binaries PlainSec en 2026-09-28T06:50:54Z MacSync Swaps Scripts for Native macOS Binaries https://plainsec.com/it/stories/6721938a-41a4-4c5c-96fc-0e4c5bf0b126/macsync-swaps-scripts-for-native-macos-binaries PlainSec it 2026-09-28T06:50:54Z MacSync cambia pelle e sfugge ai controlli statici https://plainsec.com/stories/9bf4a4f1-0261-4bde-835c-56ca45408401/file-notifications-leak-activity-across-user-accounts PlainSec en 2026-09-28T14:43:30Z File Notifications Leak Activity Across User Accounts https://plainsec.com/it/stories/9bf4a4f1-0261-4bde-835c-56ca45408401/file-notifications-leak-activity-across-user-accounts PlainSec it 2026-09-28T14:43:30Z Le notifiche del sistema tradiscono l’attività tra account https://plainsec.com/stories/b545f331-dfcc-4835-9739-282f12d2b0ba/cloudflare-fixed-cross-tenant-storage-leakage PlainSec en 2026-09-28T04:21:12Z Cloudflare Fixed Cross-Tenant Storage Leakage https://plainsec.com/it/stories/b545f331-dfcc-4835-9739-282f12d2b0ba/cloudflare-fixed-cross-tenant-storage-leakage PlainSec it 2026-09-28T04:21:12Z Cloudflare chiude una falla che esponeva dati tra tenant https://plainsec.com/stories/dc1d1abc-d61a-4bb5-9faa-a7d68bc0b8c9/microsoft-titan-token-check-opened-admin-sql-access PlainSec en 2026-09-28T18:56:12Z Microsoft Titan Token Check Opened Admin SQL Access https://plainsec.com/it/stories/dc1d1abc-d61a-4bb5-9faa-a7d68bc0b8c9/microsoft-titan-token-check-opened-admin-sql-access PlainSec it 2026-09-28T18:56:12Z Un token falsificato apre l’admin su Titan https://plainsec.com/stories/c5ac9382-9c99-4687-9728-c399cb4073f1/salesforce-agentforce-flaws-turn-leads-into-attackers PlainSec en 2026-09-28T10:44:33Z Salesforce Agentforce Flaws Turn Leads Into Attackers https://plainsec.com/it/stories/c5ac9382-9c99-4687-9728-c399cb4073f1/salesforce-agentforce-flaws-turn-leads-into-attackers PlainSec it 2026-09-28T10:44:33Z Un lead pubblico diventa il canale di controllo di Agentforce https://plainsec.com/stories/3316d19a-f376-4966-bb55-3e0207e11f8b/recorded-future-sees-russia-blending-cyber-and-physical-pressure PlainSec en 2026-09-28T04:21:12Z Recorded Future Sees Russia Blending Cyber and Physical Pressure https://plainsec.com/it/stories/3316d19a-f376-4966-bb55-3e0207e11f8b/recorded-future-sees-russia-blending-cyber-and-physical-pressure PlainSec it 2026-09-28T04:21:12Z La guerra ibrida russa si sposta su cyber, droni e disinformazione https://plainsec.com/stories/f3e63b53-c0e1-4848-99da-a49cc8969a99/former-soldier-sentenced-in-carrier-credential-campaign PlainSec en 2026-09-28T14:43:30Z Former Soldier Sentenced in Carrier Credential Campaign https://plainsec.com/it/stories/f3e63b53-c0e1-4848-99da-a49cc8969a99/former-soldier-sentenced-in-carrier-credential-campaign PlainSec it 2026-09-28T14:43:30Z Una condanna chiude una campagna di furto credenziali tra carrier https://plainsec.com/stories/7e26529a-fe3e-46d2-b804-e007573e55ac/rydox-guilty-plea-confirms-a-disrupted-market PlainSec en 2026-09-28T04:21:12Z Rydox Plea Confirms a Real Marketplace Takedown https://plainsec.com/it/stories/7e26529a-fe3e-46d2-b804-e007573e55ac/rydox-guilty-plea-confirms-a-disrupted-market PlainSec it 2026-09-28T04:21:12Z Rydox finisce in aula: il sequestro chiude il market https://plainsec.com/stories/53596929-d845-44e4-be3c-643c2b7baf1d/fake-payroll-apps-hand-over-the-machine PlainSec en 2026-09-28T10:44:33Z Fake Payroll Apps Hand Over the Machine https://plainsec.com/it/stories/53596929-d845-44e4-be3c-643c2b7baf1d/fake-payroll-apps-hand-over-the-machine PlainSec it 2026-09-28T10:44:33Z Un falso desktop per paghe apre la strada alla diversione degli stipendi https://plainsec.com/stories/1afce114-55e0-4d4b-8bda-54a4a273dcc4/snowflake-credential-abuse-lands-soldier-70-month-sentence PlainSec en 2026-09-28T08:21:22Z Snowflake Case Ends With Sentence, Data Keeps Moving https://plainsec.com/it/stories/1afce114-55e0-4d4b-8bda-54a4a273dcc4/snowflake-credential-abuse-lands-soldier-70-month-sentence PlainSec it 2026-09-28T08:21:22Z Snowflake e AT&T, si chiude il caso del soldier hacker https://plainsec.com/stories/7f25fb45-0c0c-4854-ada0-cff21e458c5e/gemini-test-escaped-into-real-company-systems PlainSec en 2026-09-28T04:21:12Z Gemini Test Escaped Into Real Company Systems https://plainsec.com/it/stories/7f25fb45-0c0c-4854-ada0-cff21e458c5e/gemini-test-escaped-into-real-company-systems PlainSec it 2026-09-28T04:21:12Z Gemini esce dal test e tocca sistemi reali https://plainsec.com/stories/05dcb2d4-6ad3-4a82-a5b9-e2117715ed50/shinyhunters-hits-clops-leak-site-trust PlainSec en 2026-09-28T06:50:54Z ShinyHunters Raises the Cost of Cl0p's Leak-Site Breach https://plainsec.com/it/stories/05dcb2d4-6ad3-4a82-a5b9-e2117715ed50/shinyhunters-hits-clops-leak-site-trust PlainSec it 2026-09-28T06:50:54Z La faida tra gang espone i pagamenti delle vittime Cl0p https://plainsec.com/stories/0a9e31dc-2cf0-49cf-9de5-ba66ccd74868/lunex-uses-amd-driver-to-blind-edr PlainSec en 2026-09-27T04:46:35Z Lunex Uses AMD Driver to Blind EDR https://plainsec.com/it/stories/0a9e31dc-2cf0-49cf-9de5-ba66ccd74868/lunex-uses-amd-driver-to-blind-edr PlainSec it 2026-09-27T04:46:35Z Lunex spegne i controlli kernel prima di rubare credenziali https://plainsec.com/stories/8f8bafcd-b182-4bb6-a770-31d25dbf9e66/wraithtools-sells-botnet-to-drain-ai-credits PlainSec en 2026-09-27T14:50:52Z WraithTools Sells Botnet to Drain AI Credits https://plainsec.com/it/stories/8f8bafcd-b182-4bb6-a770-31d25dbf9e66/wraithtools-sells-botnet-to-drain-ai-credits PlainSec it 2026-09-27T14:50:52Z Un botnet commerciale trasforma le API AI in una bolletta https://plainsec.com/stories/777533ba-ab4e-4e42-9c0c-07578368f8e2/elementor-csrf-lets-attackers-mint-wordpress-admins PlainSec en 2026-09-27T12:54:18Z Elementor CSRF Lets Attackers Mint WordPress Admins https://plainsec.com/it/stories/777533ba-ab4e-4e42-9c0c-07578368f8e2/elementor-csrf-lets-attackers-mint-wordpress-admins PlainSec it 2026-09-27T12:54:18Z Elementor crea admin finti e tiene aperta la porta https://plainsec.com/stories/bb7a3201-07b7-4aae-ab88-b2bf36fc6252/remcontrol-uses-iptv-ads-to-reach-android-users PlainSec en 2026-09-26T10:21:17Z RemControl Uses Fake TVTap to Disarm Android Safety Checks https://plainsec.com/it/stories/bb7a3201-07b7-4aae-ab88-b2bf36fc6252/remcontrol-uses-iptv-ads-to-reach-android-users PlainSec it 2026-09-26T10:21:17Z Play Protect viene aggirato dal falso TVTap di RemControl https://plainsec.com/stories/610d68c8-9e3f-42c1-a326-0d309ef5034f/pamstealer-moves-payload-decryption-off-the-mac PlainSec en 2026-09-26T06:50:27Z PamStealer Moves Payload Decryption Off the Mac https://plainsec.com/it/stories/610d68c8-9e3f-42c1-a326-0d309ef5034f/pamstealer-moves-payload-decryption-off-the-mac PlainSec it 2026-09-26T06:50:27Z PamStealer sposta la chiave del payload sul server