https://plainsec.com/stories/71e5f1cf-efd3-4e09-9db5-e34590521dee/malicious-composer-themes-turned-sites-into-iphone-spyware PlainSec en 2026-08-31T16:54:38Z Malicious Composer themes turned sites into iPhone spyware https://plainsec.com/it/stories/71e5f1cf-efd3-4e09-9db5-e34590521dee/malicious-composer-themes-turned-sites-into-iphone-spyware PlainSec it 2026-08-31T16:54:38Z Temi Composer trojanizzati trasformano i siti in spyware per iPhone https://plainsec.com/stories/7830af7b-0f1f-4215-85dd-c2000e007e5a/papercut-s-web-console-opened-the-copier-fleet PlainSec en 2026-08-31T04:21:16Z PaperCut’s Exploit Chain Splits Into Two CVEs https://plainsec.com/it/stories/7830af7b-0f1f-4215-85dd-c2000e007e5a/papercut-s-web-console-opened-the-copier-fleet PlainSec it 2026-08-31T04:21:16Z PaperCut passa ai CVE e i server esposti restano a rischio https://plainsec.com/stories/45ba8192-91ab-4acd-aedf-37a94c624257/fire-ant-moves-into-cisco-router-control-planes PlainSec en 2026-08-31T11:00:31Z Fire Ant Pushes Deeper Into Trust Infrastructure https://plainsec.com/it/stories/45ba8192-91ab-4acd-aedf-37a94c624257/fire-ant-moves-into-cisco-router-control-planes PlainSec it 2026-08-31T11:00:31Z Fire Ant entra nei router e rende opachi i log https://plainsec.com/stories/55a09d72-8c4d-4c16-8c7e-ad5be4c49790/claude-sessions-stolen-to-burn-paid-usage PlainSec en 2026-08-31T12:28:08Z Claude Sessions Stolen to Burn Paid Usage https://plainsec.com/it/stories/55a09d72-8c4d-4c16-8c7e-ad5be4c49790/claude-sessions-stolen-to-burn-paid-usage PlainSec it 2026-08-31T12:28:08Z Claude viene prosciugato da sessioni rubate sui PC infetti https://plainsec.com/stories/098e45db-0f27-46aa-bdcc-c6739ca4f3ae/us-seizure-cuts-off-qtfy-s-hidden-traffic-layer PlainSec en 2026-08-31T08:25:51Z US Seizure Cuts Off QTFY’s Hidden Traffic Layer https://plainsec.com/it/stories/098e45db-0f27-46aa-bdcc-c6739ca4f3ae/us-seizure-cuts-off-qtfy-s-hidden-traffic-layer PlainSec it 2026-08-31T08:25:51Z Tagliata la copertura che mascherava le intrusioni cinesi https://plainsec.com/stories/1e3eb59d-ae72-47fc-b98c-d926030f2135/mag-breach-exposes-travel-data-for-millions PlainSec en 2026-08-31T04:21:16Z FulcrumSec Turns MAG Breach Into Leak Threat https://plainsec.com/it/stories/1e3eb59d-ae72-47fc-b98c-d926030f2135/mag-breach-exposes-travel-data-for-millions PlainSec it 2026-08-31T04:21:16Z FulcrumSec trasforma il furto MAG in ricatto pubblico https://plainsec.com/stories/680435d1-4ce4-4eb1-ba54-7b786db15f89/signed-adware-became-a-valleyrat-delivery-path PlainSec en 2026-08-31T11:00:31Z Silver Fox Hid ValleyRAT in Signed Wallpaper Adware https://plainsec.com/it/stories/680435d1-4ce4-4eb1-ba54-7b786db15f89/signed-adware-became-a-valleyrat-delivery-path PlainSec it 2026-08-31T11:00:31Z Silver Fox trasforma un adware firmato in loader persistente https://plainsec.com/stories/148565ab-e878-483a-8329-bb0538724c7f/cisa-s-red-team-split-exposed-soc-blind-spots PlainSec en 2026-08-31T08:25:51Z CISA’s Red Team Split Exposed SOC Blind Spots https://plainsec.com/it/stories/148565ab-e878-483a-8329-bb0538724c7f/cisa-s-red-team-split-exposed-soc-blind-spots PlainSec it 2026-08-31T08:25:51Z Due SOC, due esiti opposti sotto gli stessi attaccanti https://plainsec.com/stories/461e75c4-bdc8-4073-91c3-cee8ef1a9225/servicenow-patches-four-flaws-leaves-self-hosted-work PlainSec en 2026-08-31T16:54:38Z ServiceNow Patches Four Flaws in AI Platform https://plainsec.com/it/stories/461e75c4-bdc8-4073-91c3-cee8ef1a9225/servicenow-patches-four-flaws-leaves-self-hosted-work PlainSec it 2026-08-31T16:54:38Z ServiceNow espande l’esposizione con quattro flaw critiche https://plainsec.com/stories/2b681eea-ede9-4de1-99b3-55c061550a98/uac-0099-uses-ai-guardrails-against-analysts PlainSec en 2026-08-31T11:00:31Z UAC-0099 Uses AI Guardrails Against Analysts https://plainsec.com/it/stories/2b681eea-ede9-4de1-99b3-55c061550a98/uac-0099-uses-ai-guardrails-against-analysts PlainSec it 2026-08-31T11:00:31Z UAC-0099 usa un commento per sabotare l’analisi AI https://plainsec.com/stories/3cf1d636-162a-441c-8a84-6c68ac4c1000/gitea-docker-defaults-open-a-route-to-rce PlainSec en 2026-08-31T06:21:21Z Gitea Docker Defaults Open a Route to RCE https://plainsec.com/it/stories/3cf1d636-162a-441c-8a84-6c68ac4c1000/gitea-docker-defaults-open-a-route-to-rce PlainSec it 2026-08-31T06:21:21Z Gitea espone migliaia di istanze al code execution https://plainsec.com/stories/ee24ce4c-4256-490c-947e-0e263138575b/openai-agent-swarm-turned-training-into-intrusion PlainSec en 2026-08-31T04:21:16Z Hugging Face Incident Shows Agents as Privileged Identities https://plainsec.com/it/stories/ee24ce4c-4256-490c-947e-0e263138575b/openai-agent-swarm-turned-training-into-intrusion PlainSec it 2026-08-31T04:21:16Z Gli agenti AI ereditano privilegi e chiudono l’intrusione https://plainsec.com/stories/f6fc03ac-29e8-4fd0-b3aa-389ed3926e14/terminalfix-turns-a-fake-captcha-into-network-access PlainSec en 2026-08-31T20:58:38Z TerminalFix Turns a Fake CAPTCHA Into Network Access https://plainsec.com/it/stories/f6fc03ac-29e8-4fd0-b3aa-389ed3926e14/terminalfix-turns-a-fake-captcha-into-network-access PlainSec it 2026-08-31T20:58:38Z Il CAPTCHA finto apre un varco persistente nella rete https://plainsec.com/stories/bb2d7faf-ee57-4323-9515-de7e86fa30e8/rails-file-read-flaw-opens-secret-theft-and-rce PlainSec en 2026-08-31T14:33:00Z Rails File-Read Flaw Opens Secret Theft and RCE https://plainsec.com/it/stories/bb2d7faf-ee57-4323-9515-de7e86fa30e8/rails-file-read-flaw-opens-secret-theft-and-rce PlainSec it 2026-08-31T14:33:00Z Rails esposto: lettura arbitraria, segreti e RCE https://plainsec.com/stories/9bb52006-8484-492f-a71e-92e8ed46da29/cosmos-evm-flaw-drained-six-chains PlainSec en 2026-08-31T04:21:16Z Cosmos EVM Flaw Drained Six Chains https://plainsec.com/it/stories/9bb52006-8484-492f-a71e-92e8ed46da29/cosmos-evm-flaw-drained-six-chains PlainSec it 2026-08-31T04:21:16Z Sei chain drenate dopo la falla condivisa di Cosmos EVM https://plainsec.com/stories/f5a5b76f-5e6a-4907-8505-71aeef60fd0c/huntress-finds-dprk-workers-inside-hiring-pipelines PlainSec en 2026-08-31T18:25:25Z DPRK Job Fraud Spreads Into Healthcare Roles https://plainsec.com/it/stories/f5a5b76f-5e6a-4907-8505-71aeef60fd0c/huntress-finds-dprk-workers-inside-hiring-pipelines PlainSec it 2026-08-31T18:25:25Z DPRK esce dall’IT e punta a sanità e vendite https://plainsec.com/stories/960159f5-c1be-48e1-9b9d-8c14523d3ee8/aws-makes-console-access-fully-private PlainSec en 2026-08-31T14:33:00Z AWS Console Private Access Brings Lockout Risk https://plainsec.com/it/stories/960159f5-c1be-48e1-9b9d-8c14523d3ee8/aws-makes-console-access-fully-private PlainSec it 2026-08-31T14:33:00Z Un errore di policy può bloccare tutta la console AWS https://plainsec.com/stories/7bb565b8-642b-46f4-85dc-f714ad9836e3/zbt-firmware-backdoors-cross-brand-lines PlainSec en 2026-08-31T04:21:16Z ZBT Firmware Implants Expose White-Label Routers https://plainsec.com/it/stories/7bb565b8-642b-46f4-85dc-f714ad9836e3/zbt-firmware-backdoors-cross-brand-lines PlainSec it 2026-08-31T04:21:16Z La supply chain del firmware apre root sui router white-label https://plainsec.com/stories/78e5219b-fe86-4826-9b72-37c1d7fb3be1/tenable-fixed-four-security-center-flaws PlainSec en 2026-08-31T14:33:00Z Tenable Fixed Four Security Center Flaws https://plainsec.com/it/stories/78e5219b-fe86-4826-9b72-37c1d7fb3be1/tenable-fixed-four-security-center-flaws PlainSec it 2026-08-31T14:33:00Z Tenable rompe i confini tra gruppi in Security Center https://plainsec.com/stories/d3b223f7-a9d1-4ccc-a7c6-0390ef422c48/npm-provenance-could-not-save-openapi-codegen PlainSec en 2026-08-31T04:21:16Z npm Provenance Could Not Save OpenAPI Codegen https://plainsec.com/it/stories/d3b223f7-a9d1-4ccc-a7c6-0390ef422c48/npm-provenance-could-not-save-openapi-codegen PlainSec it 2026-08-31T04:21:16Z Provenance valida, package npm ancora malevolo https://plainsec.com/stories/c813e1cb-4f2b-4d4d-85e4-5ef9436ed128/berlin-confirms-rhysida-data-theft-after-leak-claim PlainSec en 2026-08-31T14:33:00Z Rhysida Moves Berlin Theft Into Auction Mode https://plainsec.com/it/stories/c813e1cb-4f2b-4d4d-85e4-5ef9436ed128/berlin-confirms-rhysida-data-theft-after-leak-claim PlainSec it 2026-08-31T14:33:00Z Berlin rifiuta il riscatto, Rhysida mette i dati all’asta https://plainsec.com/stories/94197a5f-722e-46c6-bd60-2a2f288e3de1/mckesson-breach-hits-third-party-apps PlainSec en 2026-08-31T16:54:38Z McKesson Breach Hits Third-Party Apps https://plainsec.com/it/stories/94197a5f-722e-46c6-bd60-2a2f288e3de1/mckesson-breach-hits-third-party-apps PlainSec it 2026-08-31T16:54:38Z McKesson scopre un varco nei sistemi dei partner https://plainsec.com/stories/cf65c0d2-ba30-434f-8833-1922886a20a4/hardbreacher-poc-puts-kaspersky-endpoint-security-on-edge PlainSec en 2026-08-31T16:54:38Z HardBreacher PoC Puts Kaspersky Endpoint Security on Edge https://plainsec.com/it/stories/cf65c0d2-ba30-434f-8833-1922886a20a4/hardbreacher-poc-puts-kaspersky-endpoint-security-on-edge PlainSec it 2026-08-31T16:54:38Z Il protector diventa il punto d’ingresso con HardBreacher https://plainsec.com/stories/83624499-61d3-4189-a889-16fb027e2023/tech-giants-push-defensive-ai-for-public-services PlainSec en 2026-08-31T04:21:16Z OpenAI-Led Coalition Pushes AI Defense Agenda https://plainsec.com/it/stories/83624499-61d3-4189-a889-16fb027e2023/tech-giants-push-defensive-ai-for-public-services PlainSec it 2026-08-31T04:21:16Z Le grandi aziende spingono la difesa AI per i servizi pubblici https://plainsec.com/stories/671c06b0-4e0b-4123-b05a-d516bd21e5f3/socket-finds-trusted-extensions-turned-malicious PlainSec en 2026-08-31T12:28:08Z Superior Weaponized Trusted Browser Extensions https://plainsec.com/it/stories/671c06b0-4e0b-4123-b05a-d516bd21e5f3/socket-finds-trusted-extensions-turned-malicious PlainSec it 2026-08-31T12:28:08Z Le estensioni fidate diventano il canale d’attacco https://plainsec.com/stories/451c4bb0-060a-4626-9c2e-ae32f5b34024/apt28-uses-word-lures-and-webhooks-for-hookedge PlainSec en 2026-08-31T04:21:16Z APT28 Uses Word Lures and Webhooks for HOOKEDGE https://plainsec.com/it/stories/451c4bb0-060a-4626-9c2e-ae32f5b34024/apt28-uses-word-lures-and-webhooks-for-hookedge PlainSec it 2026-08-31T04:21:16Z APT28 cambia strada: Word e webhook per restare dentro https://plainsec.com/stories/b5e41513-a809-4852-a5a1-c2612d9d3d9a/claude-code-summary-request-opens-shell-access PlainSec en 2026-08-31T06:21:21Z Claude Code Summary Request Opens Shell Access https://plainsec.com/it/stories/b5e41513-a809-4852-a5a1-c2612d9d3d9a/claude-code-summary-request-opens-shell-access PlainSec it 2026-08-31T06:21:21Z Claude Code può passare da un riassunto a Bash https://plainsec.com/stories/23a30ae8-59d1-420f-ad68-7abe6fbceb10/hasbro-breach-exposes-payroll-fraud-risk PlainSec en 2026-08-31T08:25:51Z Hasbro Breach Exposes Payroll Fraud Risk https://plainsec.com/it/stories/23a30ae8-59d1-420f-ad68-7abe6fbceb10/hasbro-breach-exposes-payroll-fraud-risk PlainSec it 2026-08-31T08:25:51Z I dati dei dipendenti Hasbro diventano un bersaglio per il payroll fraud https://plainsec.com/stories/c0ff07a3-b833-45cd-928f-0ca3da9d9454/boston-scientific-attack-snarls-global-device-shipments PlainSec en 2026-08-31T04:21:16Z Boston Scientific Outage Turns Into Supply Chain Delay https://plainsec.com/it/stories/c0ff07a3-b833-45cd-928f-0ca3da9d9454/boston-scientific-attack-snarls-global-device-shipments PlainSec it 2026-08-31T04:21:16Z Boston Scientific trasforma un outage in ritardi sulle forniture mediche https://plainsec.com/stories/ee236799-3517-488a-8306-9e75895faf4b/atf-confirms-qilin-breach-as-major-incident PlainSec en 2026-08-31T04:21:16Z ATF Confirms Isolated System Hit in Qilin Claim https://plainsec.com/it/stories/ee236799-3517-488a-8306-9e75895faf4b/atf-confirms-qilin-breach-as-major-incident PlainSec it 2026-08-31T04:21:16Z Un sistema isolato dell’ATF espone dati d’indagine https://plainsec.com/stories/b6862585-cdf0-4cc9-ac0b-88aaabf60e36/metasploit-adds-forgejo-and-planyo-attack-modules PlainSec en 2026-08-31T08:25:51Z Metasploit Adds Forgejo and Planyo Attack Modules https://plainsec.com/it/stories/b6862585-cdf0-4cc9-ac0b-88aaabf60e36/metasploit-adds-forgejo-and-planyo-attack-modules PlainSec it 2026-08-31T08:25:51Z Metasploit abbassa la soglia per sfruttare bug web https://plainsec.com/stories/7bbc0a8e-96b0-4efd-b570-413e40a3f5f2/teampcp-arrests-leave-the-secret-theft-intact PlainSec en 2026-08-31T04:21:16Z TeamPCP Arrests Open a Forensic Phase https://plainsec.com/it/stories/7bbc0a8e-96b0-4efd-b570-413e40a3f5f2/teampcp-arrests-leave-the-secret-theft-intact PlainSec it 2026-08-31T04:21:16Z TeamPCP passa dagli arresti alla fase forense https://plainsec.com/stories/da6e5e4d-6fc2-4aa0-a3fc-350c3ba6324d/givewp-flaw-lets-attackers-run-server-commands PlainSec en 2026-08-31T06:21:21Z GiveWP Flaw Lets Attackers Run Server Commands https://plainsec.com/it/stories/da6e5e4d-6fc2-4aa0-a3fc-350c3ba6324d/givewp-flaw-lets-attackers-run-server-commands PlainSec it 2026-08-31T06:21:21Z GiveWP apre il server da una semplice richiesta anonima https://plainsec.com/stories/e4d754bc-8c05-4c66-89aa-67c05d126daa/avada-s-six-step-chain-exposes-wordpress-sites PlainSec en 2026-08-30T04:21:20Z WordPress Plugin Flaws Broaden Into Site Takeovers https://plainsec.com/it/stories/e4d754bc-8c05-4c66-89aa-67c05d126daa/avada-s-six-step-chain-exposes-wordpress-sites PlainSec it 2026-08-30T04:21:20Z Cinque plugin WordPress aprono la strada al takeover