https://plainsec.com/briefings/2026-08-10/372e60c5-4ac7-493a-9d77-a142a9068f70/head-mare-turns-trueconf-updates-into-malware-delivery PlainSec en 2026-08-10T14:37:43Z Head Mare Turns TrueConf Updates Into Malware Delivery https://plainsec.com/it/briefings/2026-08-10/372e60c5-4ac7-493a-9d77-a142a9068f70/head-mare-turns-trueconf-updates-into-malware-delivery PlainSec it 2026-08-10T14:37:43Z Il canale di update di TrueConf diventa un vettore di malware https://plainsec.com/briefings/2026-08-10/89efb96c-30bc-4370-b068-bad412235d95/metabase-breach-exposes-downstream-databases PlainSec en 2026-08-10T04:31:37Z Metabase Breach Exposes Downstream Databases https://plainsec.com/it/briefings/2026-08-10/89efb96c-30bc-4370-b068-bad412235d95/metabase-breach-exposes-downstream-databases PlainSec it 2026-08-10T04:31:37Z Metabase diventa la porta verso i database collegati https://plainsec.com/briefings/2026-08-10/eb85fb54-5a74-4cad-820a-f9a2793f99a9/sharepoint-patches-didn-t-clear-bit-s-breach PlainSec en 2026-08-10T04:31:37Z SharePoint Patches Didn’t Clear BIT’s Breach https://plainsec.com/it/briefings/2026-08-10/eb85fb54-5a74-4cad-820a-f9a2793f99a9/sharepoint-patches-didn-t-clear-bit-s-breach PlainSec it 2026-08-10T04:31:37Z SharePoint patch non basta: compromessi 200 account del BIT https://plainsec.com/briefings/2026-08-10/895450bb-290f-423e-a53c-6a0480be5ed3/malicious-python-releases-reach-developer-secrets-at-startup PlainSec en 2026-08-10T04:31:37Z Malicious Python Releases Reach Developer Secrets at Startup https://plainsec.com/it/briefings/2026-08-10/895450bb-290f-423e-a53c-6a0480be5ed3/malicious-python-releases-reach-developer-secrets-at-startup PlainSec it 2026-08-10T04:31:37Z La trust chain dei developer diventa un canale per rubare segreti https://plainsec.com/briefings/2026-08-10/c5fd7d52-0a89-4c10-a6d8-9f6c56ed7f35/passkeys-fell-to-session-and-sync-abuse PlainSec en 2026-08-10T16:47:02Z Passkeys Fell to Session and Sync Abuse https://plainsec.com/it/briefings/2026-08-10/c5fd7d52-0a89-4c10-a6d8-9f6c56ed7f35/passkeys-fell-to-session-and-sync-abuse PlainSec it 2026-08-10T16:47:02Z Passkey ancora aggirabili attraverso sessioni e log di sistema https://plainsec.com/briefings/2026-08-10/02df72b4-361c-4ea1-819d-0ed3bc2b0b72/container-escape-turns-old-linux-bug-into-host-risk PlainSec en 2026-08-10T04:31:37Z Container Escape Turns Old Linux Bug into Host Risk https://plainsec.com/it/briefings/2026-08-10/02df72b4-361c-4ea1-819d-0ed3bc2b0b72/container-escape-turns-old-linux-bug-into-host-risk PlainSec it 2026-08-10T04:31:37Z Un bug di Linux può far uscire da un container al root dell’host https://plainsec.com/briefings/2026-08-10/6c58dc9e-eae0-49f1-a9b6-d56283aa846c/agent-harness-bugs-expose-ci-secrets PlainSec en 2026-08-10T04:31:37Z Agent Harness Bugs Expose CI Secrets https://plainsec.com/it/briefings/2026-08-10/6c58dc9e-eae0-49f1-a9b6-d56283aa846c/agent-harness-bugs-expose-ci-secrets PlainSec it 2026-08-10T04:31:37Z Il rischio è nel harness, non nel model https://plainsec.com/briefings/2026-08-10/a94a5ade-a652-4e4f-ab5b-16016a952fad/openai-pauses-astra-over-cyber-capability-risk PlainSec en 2026-08-10T10:42:25Z OpenAI Pauses Astra Over Cyber Capability Risk https://plainsec.com/it/briefings/2026-08-10/a94a5ade-a652-4e4f-ab5b-16016a952fad/openai-pauses-astra-over-cyber-capability-risk PlainSec it 2026-08-10T10:42:25Z Astra viene trattato come software non fidato https://plainsec.com/briefings/2026-08-10/8c96cd4d-0df2-4dc7-8d1f-8795fc119a02/ghostjacking-turns-ai-telemetry-into-attack-commands PlainSec en 2026-08-10T14:37:43Z Ghostjacking Turns AI Telemetry Into Attack Commands https://plainsec.com/it/briefings/2026-08-10/8c96cd4d-0df2-4dc7-8d1f-8795fc119a02/ghostjacking-turns-ai-telemetry-into-attack-commands PlainSec it 2026-08-10T14:37:43Z I log diventano comandi per gli AI agent https://plainsec.com/briefings/2026-08-10/844ef8dd-1052-4c8a-ae37-63ac706e42cf/clamav-crashes-can-blind-cisco-endpoint-scanning PlainSec en 2026-08-10T10:42:25Z Cisco's ClamAV Flaws Can Knock Out Endpoint Scanning https://plainsec.com/it/briefings/2026-08-10/844ef8dd-1052-4c8a-ae37-63ac706e42cf/clamav-crashes-can-blind-cisco-endpoint-scanning PlainSec it 2026-08-10T10:42:25Z ClamAV può mandare giù il controllo endpoint https://plainsec.com/briefings/2026-08-10/aeaec16e-9c58-4253-9c56-049ce3f1288f/paste-one-command-lose-mac-passwords-and-wallets PlainSec en 2026-08-10T10:42:25Z Paste One Command, Lose Mac Passwords and Wallets https://plainsec.com/it/briefings/2026-08-10/aeaec16e-9c58-4253-9c56-049ce3f1288f/paste-one-command-lose-mac-passwords-and-wallets PlainSec it 2026-08-10T10:42:25Z Un solo comando in Terminal apre password e wallet su macOS https://plainsec.com/briefings/2026-08-10/780d4288-38cf-47c2-80d9-b6fbad518a2c/omada-onboarding-flaws-can-hand-over-entire-fleets PlainSec en 2026-08-10T12:40:10Z Omada’s Provisioning Plane Is the Real Attack Surface https://plainsec.com/it/briefings/2026-08-10/780d4288-38cf-47c2-80d9-b6fbad518a2c/omada-onboarding-flaws-can-hand-over-entire-fleets PlainSec it 2026-08-10T12:40:10Z Omada trasforma il provisioning fidato in via d’ingresso https://plainsec.com/briefings/2026-08-10/249dd665-bdd6-4100-b6ec-914764fa64dc/private-apns-become-a-path-into-ot PlainSec en 2026-08-10T16:47:02Z Private APNs Hid a Second Heat Plant Intrusion https://plainsec.com/it/briefings/2026-08-10/249dd665-bdd6-4100-b6ec-914764fa64dc/private-apns-become-a-path-into-ot PlainSec it 2026-08-10T16:47:02Z Una seconda intrusione resta nascosta nella campagna invernale polacca https://plainsec.com/briefings/2026-08-10/bc737221-2f5b-4e49-82e4-9b2ca2d97da8/employee-laptops-became-the-path-to-corporate-data PlainSec en 2026-08-10T10:42:25Z Employee Laptops Became the Path to Corporate Data https://plainsec.com/it/briefings/2026-08-10/bc737221-2f5b-4e49-82e4-9b2ca2d97da8/employee-laptops-became-the-path-to-corporate-data PlainSec it 2026-08-10T10:42:25Z Tre computer dei dipendenti aprono i file corporate di Levi Strauss https://plainsec.com/briefings/2026-08-10/8a9b188d-38eb-45d2-b17f-6ad275128eea/ai-patches-still-need-human-eyes PlainSec en 2026-08-10T12:40:10Z AI Patches Still Need Human Eyes https://plainsec.com/it/briefings/2026-08-10/8a9b188d-38eb-45d2-b17f-6ad275128eea/ai-patches-still-need-human-eyes PlainSec it 2026-08-10T12:40:10Z Le patch AI sembrano giusti, ma lasciano varchi aperti https://plainsec.com/briefings/2026-08-10/0a3899b7-d9e8-4400-b2c3-9523c94e540f/cisco-fixes-fleet-control-bugs-one-already-exploited PlainSec en 2026-08-10T16:47:02Z Cisco IOS XE Fixes Expose Broader Codebase Weaknesses https://plainsec.com/it/briefings/2026-08-10/0a3899b7-d9e8-4400-b2c3-9523c94e540f/cisco-fixes-fleet-control-bugs-one-already-exploited PlainSec it 2026-08-10T16:47:02Z Cisco chiude sette falle diverse in IOS XE https://plainsec.com/briefings/2026-08-09/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec en 2026-08-09T16:37:21Z Agent Guardrails Fail Before the Model Speaks https://plainsec.com/it/briefings/2026-08-09/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec it 2026-08-09T16:37:21Z I guardrail del modello non bastano più agli agent https://plainsec.com/briefings/2026-08-09/300dfb13-403a-43f3-80c6-c0e0ad9d7187/rovos-toggle-fails-as-a-data-boundary PlainSec en 2026-08-09T03:48:15Z Rovo's Toggle Fails as a Data Boundary https://plainsec.com/it/briefings/2026-08-09/300dfb13-403a-43f3-80c6-c0e0ad9d7187/rovos-toggle-fails-as-a-data-boundary PlainSec it 2026-08-09T03:48:15Z Rovo può trasformarsi in canale di esfiltrazione da Jira e Confluence https://plainsec.com/briefings/2026-08-08/4dc4baa7-13db-4f99-acc0-4334cfa192b1/chrome-bug-discovery-is-outrunning-release-cadence PlainSec en 2026-08-08T04:21:07Z Chrome Bug Discovery Is Outrunning Release Cadence https://plainsec.com/it/briefings/2026-08-08/4dc4baa7-13db-4f99-acc0-4334cfa192b1/chrome-bug-discovery-is-outrunning-release-cadence PlainSec it 2026-08-08T04:21:07Z La scoperta automatica corre più veloce delle patch di Chrome https://plainsec.com/briefings/2026-08-08/5c2b5980-c243-4953-a918-e7e3c0520458/one-terraform-state-leak-can-cross-cloud-boundaries PlainSec en 2026-08-08T14:23:06Z One Terraform State Leak Can Cross Cloud Boundaries https://plainsec.com/it/briefings/2026-08-08/5c2b5980-c243-4953-a918-e7e3c0520458/one-terraform-state-leak-can-cross-cloud-boundaries PlainSec it 2026-08-08T14:23:06Z Un file Terraform esposto apre la strada tra più cloud https://plainsec.com/briefings/2026-08-08/ddc5f061-b19c-4ce2-beea-8703c6f98634/ai-agents-can-carry-poisoned-trust-across-runs PlainSec en 2026-08-08T18:20:51Z AI Agents Can Carry Poisoned Trust Across Runs https://plainsec.com/it/briefings/2026-08-08/ddc5f061-b19c-4ce2-beea-8703c6f98634/ai-agents-can-carry-poisoned-trust-across-runs PlainSec it 2026-08-08T18:20:51Z Gli agenti lasciano istruzioni e si fanno trascinare tra servizi https://plainsec.com/briefings/2026-08-08/ed78c53b-7a35-4e6c-a636-ac1babe91525/personal-phone-vishing-now-reaches-cloud-sessions PlainSec en 2026-08-08T12:21:55Z Redact Rebrand Hides the Same Extortion Playbook https://plainsec.com/it/briefings/2026-08-08/ed78c53b-7a35-4e6c-a636-ac1babe91525/personal-phone-vishing-now-reaches-cloud-sessions PlainSec it 2026-08-08T12:21:55Z Il rebrand non ferma la stessa operazione di extortion https://plainsec.com/briefings/2026-08-08/b451108b-dc02-484f-a7b0-5574e81608df/session-theft-bypasses-mfa-and-sign-in-alerts PlainSec en 2026-08-08T16:20:53Z Session Theft Bypasses MFA and Sign-In Alerts https://plainsec.com/it/briefings/2026-08-08/b451108b-dc02-484f-a7b0-5574e81608df/session-theft-bypasses-mfa-and-sign-in-alerts PlainSec it 2026-08-08T16:20:53Z Session Theft Bypasses MFA and Sign-In Alerts https://plainsec.com/briefings/2026-08-08/a4735b09-4b4d-4af5-9583-ccc95ea5410c/shared-nat-is-not-a-safe-isolation-boundary PlainSec en 2026-08-08T16:20:53Z Shared NAT Is Not a Safe Isolation Boundary https://plainsec.com/it/briefings/2026-08-08/a4735b09-4b4d-4af5-9583-ccc95ea5410c/shared-nat-is-not-a-safe-isolation-boundary PlainSec it 2026-08-08T16:20:53Z La NAT non basta più come confine di isolamento https://plainsec.com/briefings/2026-08-08/5c40018f-d56c-4dbd-bf4d-4602b5f31356/wordpress-login-pages-become-browser-side-entry-points PlainSec en 2026-08-08T18:20:51Z WordPress PoC Turns Login XSS Into Session-Dependent Shells https://plainsec.com/it/briefings/2026-08-08/5c40018f-d56c-4dbd-bf4d-4602b5f31356/wordpress-login-pages-become-browser-side-entry-points PlainSec it 2026-08-08T18:20:51Z WordPress passa da XSS di login a presa di sessione