https://plainsec.com/stories/07398274-f7ab-43c3-90bc-5203d77ab63d/hunt-io-finds-dahua-cameras-kept-reconnecting PlainSec en 2026-08-19T16:21:53Z Hunt.io Finds Dahua Cameras Kept Reconnecting https://plainsec.com/it/stories/07398274-f7ab-43c3-90bc-5203d77ab63d/hunt-io-finds-dahua-cameras-kept-reconnecting PlainSec it 2026-08-19T16:21:53Z Camere Dahua esposte anche dopo il reset https://plainsec.com/stories/f05ca80b-5f6e-4c17-8996-f524cf2fd0d4/mlflow-webhook-test-ssrf-reached-internal-metadata PlainSec en 2026-08-19T04:29:31Z MLflow SSRF Is Already Harvesting Cloud Credentials https://plainsec.com/it/stories/f05ca80b-5f6e-4c17-8996-f524cf2fd0d4/mlflow-webhook-test-ssrf-reached-internal-metadata PlainSec it 2026-08-19T04:29:31Z MLflow diventa un proxy per rubare credenziali cloud https://plainsec.com/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec en 2026-08-19T04:29:31Z GitLab GraphQL Flaws Invite Fast State Changes https://plainsec.com/it/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec it 2026-08-19T04:29:31Z GitLab espone la scrittura anonima sulla GraphQL pubblica https://plainsec.com/stories/db636e44-6cb2-4eaa-94a4-22d0295c5c65/medusa-scales-ransomware-with-brokered-access PlainSec en 2026-08-19T04:29:31Z Medusa Turns Brokered Access Into Faster Intrusions https://plainsec.com/it/stories/db636e44-6cb2-4eaa-94a4-22d0295c5c65/medusa-scales-ransomware-with-brokered-access PlainSec it 2026-08-19T04:29:31Z Medusa scala con accessi comprati e exploit in 24 ore https://plainsec.com/stories/8a8ee71b-fb44-4f9a-9056-f45e5dac134c/carecloud-breach-count-jumps-to-3-76-million PlainSec en 2026-08-19T16:21:53Z CareCloud Breach Count Climbs Into Millions https://plainsec.com/it/stories/8a8ee71b-fb44-4f9a-9056-f45e5dac134c/carecloud-breach-count-jumps-to-3-76-million PlainSec it 2026-08-19T16:21:53Z CareCloud, il cloud sanitario espone 3,7 milioni di pazienti https://plainsec.com/stories/9c9ab7dc-f7d5-4968-bbeb-53a4a88df13b/cisa-confirms-windows-task-host-ransomware-exploitation PlainSec en 2026-08-19T04:29:31Z CISA Confirms Windows Task Host Ransomware Exploitation https://plainsec.com/it/stories/9c9ab7dc-f7d5-4968-bbeb-53a4a88df13b/cisa-confirms-windows-task-host-ransomware-exploitation PlainSec it 2026-08-19T04:29:31Z Ransomware sfrutta il Task Host di Windows per elevare i privilegi https://plainsec.com/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec en 2026-08-19T04:29:31Z SafePal Order Leak Moves Into Resale https://plainsec.com/it/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec it 2026-08-19T04:29:31Z Dalla fuga di dati al mercato del phishing SafePal https://plainsec.com/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec en 2026-08-19T04:29:31Z GeoTools Regression Reopens GeoServer SQL Injection https://plainsec.com/it/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec it 2026-08-19T04:29:31Z GeoTools riapre un vecchio buco in GeoServer https://plainsec.com/stories/3d195d15-9353-47d1-a139-ca808a5926de/twinloot-hides-its-control-channel-in-microsoft-365 PlainSec en 2026-08-19T04:29:31Z TwinLoot Hides Its Control Channel in Microsoft 365 https://plainsec.com/it/stories/3d195d15-9353-47d1-a139-ca808a5926de/twinloot-hides-its-control-channel-in-microsoft-365 PlainSec it 2026-08-19T04:29:31Z Microsoft 365 diventa il canale di comando di TwinLoot https://plainsec.com/stories/af66c600-7b97-4cd8-8542-b6885c4c58c8/openai-adds-costly-monitoring-to-model-training PlainSec en 2026-08-19T12:27:57Z OpenAI Adds Costly Monitoring to Model Training https://plainsec.com/it/stories/af66c600-7b97-4cd8-8542-b6885c4c58c8/openai-adds-costly-monitoring-to-model-training PlainSec it 2026-08-19T12:27:57Z La sicurezza dei modelli diventa un collo di bottiglia https://plainsec.com/stories/06238a6f-1303-4d25-be02-bedf58e0f679/froxlor-api-leak-exposes-password-hashes-and-2fa-seeds PlainSec en 2026-08-19T12:27:57Z Froxlor API Leak Exposes Password Hashes and 2FA Seeds https://plainsec.com/it/stories/06238a6f-1303-4d25-be02-bedf58e0f679/froxlor-api-leak-exposes-password-hashes-and-2fa-seeds PlainSec it 2026-08-19T12:27:57Z Un’API di Froxlor espone hash e seed 2FA https://plainsec.com/stories/4fe9110e-0f15-4d6f-950f-9795747414dd/silkparasite-fields-five-new-rats-in-central-asia PlainSec en 2026-08-19T16:21:53Z SilkParasite Fields Five New RATs in Central Asia https://plainsec.com/it/stories/4fe9110e-0f15-4d6f-950f-9795747414dd/silkparasite-fields-five-new-rats-in-central-asia PlainSec it 2026-08-19T16:21:53Z SilkParasite moltiplica i RAT contro i governi dell’Asia centrale https://plainsec.com/stories/78cae32f-a6cf-4e0c-a692-f9db196e5096/claude-search-lure-pushed-macsync-to-mac-users PlainSec en 2026-08-19T12:27:57Z Microsoft Expands MacSync Beyond Rotating C2 Domains https://plainsec.com/it/stories/78cae32f-a6cf-4e0c-a692-f9db196e5096/claude-search-lure-pushed-macsync-to-mac-users PlainSec it 2026-08-19T12:27:57Z I domini cambiano, il furto continua su MacSync https://plainsec.com/stories/25e6bc32-45ce-46f6-afa2-3980be2b2cde/anthropic-and-epfl-map-agent-to-agent-prompt-spread PlainSec en 2026-08-19T04:29:31Z Anthropic and EPFL Map Agent-to-Agent Prompt Spread https://plainsec.com/it/stories/25e6bc32-45ce-46f6-afa2-3980be2b2cde/anthropic-and-epfl-map-agent-to-agent-prompt-spread PlainSec it 2026-08-19T04:29:31Z Un warning nel prompt ferma la propaganda tra agenti https://plainsec.com/stories/f41f6450-e6c3-443b-93ca-ff6f27fa128e/mabna-charges-expose-academic-data-resale-network PlainSec en 2026-08-19T16:21:53Z Mabna Charges Expose Academic Data Resale Network https://plainsec.com/it/stories/f41f6450-e6c3-443b-93ca-ff6f27fa128e/mabna-charges-expose-academic-data-resale-network PlainSec it 2026-08-19T16:21:53Z Le inbox dei professori diventano un mercato nero https://plainsec.com/stories/1ed9ee51-453c-47d2-ac0a-0c02de523870/clop-s-windchill-shell-knows-too-much PlainSec en 2026-08-19T08:21:44Z Clop’s Windchill Shell Knows Too Much https://plainsec.com/it/stories/1ed9ee51-453c-47d2-ac0a-0c02de523870/clop-s-windchill-shell-knows-too-much PlainSec it 2026-08-19T08:21:44Z Windchill diventa un estrattore di credenziali e file https://plainsec.com/stories/806368c9-a023-4af8-8c27-1eb383442bd2/oracle-construction-advisory-flags-trust-breaking-flaw PlainSec en 2026-08-19T16:21:53Z Oracle EBS Patches 120 Flaws Across Core Modules https://plainsec.com/it/stories/806368c9-a023-4af8-8c27-1eb383442bd2/oracle-construction-advisory-flags-trust-breaking-flaw PlainSec it 2026-08-19T16:21:53Z L'intera ERP Oracle esposta da 120 falle https://plainsec.com/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec en 2026-08-18T04:27:09Z DGFiP Breach Ran Through Trusted Accounts https://plainsec.com/it/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec it 2026-08-18T04:27:09Z La sospensione degli account non ha fermato il furto in DGFiP https://plainsec.com/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec en 2026-08-18T23:33:34Z Azure Tenant Dumps Expose the Org Chart https://plainsec.com/it/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec it 2026-08-18T23:33:34Z L’export del tenant diventa la mappa per il BEC https://plainsec.com/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec en 2026-08-18T04:27:09Z SAP Commerce Cloud Exploit Lands Days After Patch https://plainsec.com/it/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec it 2026-08-18T04:27:09Z SAP Commerce Cloud esposto senza credenziali rubate https://plainsec.com/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec en 2026-08-18T17:09:06Z Irregular’s Sandbox Mistake Hit a Real Domain https://plainsec.com/it/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec it 2026-08-18T17:09:06Z Un errore di naming trasforma la simulazione in attacco reale https://plainsec.com/stories/6c19cb1f-cfea-4096-a57e-362612a86ff0/copilot-s-hidden-url-turned-clicks-into-prompts PlainSec en 2026-08-18T21:07:07Z Microsoft Copilot Patch Lands Amid Scope Dispute https://plainsec.com/it/stories/6c19cb1f-cfea-4096-a57e-362612a86ff0/copilot-s-hidden-url-turned-clicks-into-prompts PlainSec it 2026-08-18T21:07:07Z Copilot Personal: patch su una falla ancora contestata https://plainsec.com/stories/40203f24-dce8-49c5-8a7a-fcf61255337e/attackers-use-ai-to-rank-what-to-steal PlainSec en 2026-08-18T17:09:06Z Attackers Use AI to Rank What to Steal https://plainsec.com/it/stories/40203f24-dce8-49c5-8a7a-fcf61255337e/attackers-use-ai-to-rank-what-to-steal PlainSec it 2026-08-18T17:09:06Z L’AI diventa l’operatore dentro l’intrusione https://plainsec.com/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec en 2026-08-18T23:33:34Z Unisoc Modem Flaw Breaks the Android Boundary https://plainsec.com/it/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec it 2026-08-18T23:33:34Z Il modem diventa la via d’ingresso al kernel Android https://plainsec.com/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec en 2026-08-18T18:32:19Z Evooo1Bot Turns Edge CVEs Into Proxy Nodes https://plainsec.com/it/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec it 2026-08-18T18:32:19Z I gateway compromessi diventano proxy persistenti https://plainsec.com/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec en 2026-08-19T02:22:27Z Forminator Upload Flaw Can Run Attacker PHP https://plainsec.com/it/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec it 2026-08-19T02:22:27Z La form di WordPress può diventare un webshell host https://plainsec.com/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec en 2026-08-19T02:22:27Z City Forum Emerges as One Persistent Scraper https://plainsec.com/it/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec it 2026-08-19T02:22:27Z Un solo scraper tiene aperti i portal guest di Salesforce e ServiceNow https://plainsec.com/stories/702ba5e9-6823-4932-b37d-6afc356103fc/anthropic-tests-show-claude-agents-sabotaging-peers PlainSec en 2026-08-18T00:34:58Z Anthropic Tests Show Claude Agents Sabotaging Peers https://plainsec.com/it/stories/702ba5e9-6823-4932-b37d-6afc356103fc/anthropic-tests-show-claude-agents-sabotaging-peers PlainSec it 2026-08-18T00:34:58Z Claude agenti contro Claude: il rischio interno emerge https://plainsec.com/stories/f000ca9f-a99b-4898-960c-8ee812c9cb8d/mcp-connectors-hide-a-high-value-trust-boundary PlainSec en 2026-08-17T13:39:09Z MCP Connectors Hide a High-Value Trust Boundary https://plainsec.com/it/stories/f000ca9f-a99b-4898-960c-8ee812c9cb8d/mcp-connectors-hide-a-high-value-trust-boundary PlainSec it 2026-08-17T13:39:09Z MCP trasforma i connector AI in un archivio di segreti privilegiati https://plainsec.com/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec en 2026-08-17T08:34:49Z CISA’s KEV Update Spans Four Live Exploits https://plainsec.com/it/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec it 2026-08-17T08:34:49Z Quattro CVE in KEV, l’esposizione si allarga su più piattaforme https://plainsec.com/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec en 2026-08-17T19:16:51Z AmnesiaStealer Adds Live Browser Session Control https://plainsec.com/it/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec it 2026-08-17T19:16:51Z AmnesiaStealer passa dal furto account al controllo della sessione https://plainsec.com/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec en 2026-08-17T15:02:03Z Agent Guardrails Fail Before the Model Speaks https://plainsec.com/it/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec it 2026-08-17T15:02:03Z I guardrail del modello non bastano più agli agent https://plainsec.com/stories/1bcd3645-4ab1-4838-9ed9-dc11ecc7c858/certighost-lets-a-domain-user-impersonate-a-dc PlainSec en 2026-08-18T02:23:13Z Certighost Lets a Domain User Impersonate a DC https://plainsec.com/it/stories/1bcd3645-4ab1-4838-9ed9-dc11ecc7c858/certighost-lets-a-domain-user-impersonate-a-dc PlainSec it 2026-08-18T02:23:13Z La CA di dominio diventa un oracle di fiducia https://plainsec.com/stories/47d99a45-561f-475d-a393-3e49994933f9/germany-brazil-arrest-seven-in-clone-card-fraud-case PlainSec en 2026-08-18T02:23:13Z Germany, Brazil Arrest Seven in Clone-Card Fraud Case https://plainsec.com/it/stories/47d99a45-561f-475d-a393-3e49994933f9/germany-brazil-arrest-seven-in-clone-card-fraud-case PlainSec it 2026-08-18T02:23:13Z Raffica di arresti in un caso di frode bancaria transfrontaliera https://plainsec.com/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec en 2026-08-18T02:23:13Z Jewelbug Merges Espionage and Crypto Theft https://plainsec.com/it/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec it 2026-08-18T02:23:13Z Jewelbug unisce spionaggio di Stato e furto crypto dallo stesso panel https://plainsec.com/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec en 2026-08-18T02:23:13Z WindRelay and SpyNote Fueled a 13-Minute Call Scam https://plainsec.com/it/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec it 2026-08-18T02:23:13Z Una chiamata da 13 minuti basta per clonare una carta https://plainsec.com/stories/9dff98a1-ea40-4cdc-8841-ad9f2b47f186/flashpoint-shows-infostealers-now-run-at-machine-speed PlainSec en 2026-08-18T02:23:13Z Flashpoint Shows Infostealers Now Run at Machine Speed https://plainsec.com/it/stories/9dff98a1-ea40-4cdc-8841-ad9f2b47f186/flashpoint-shows-infostealers-now-run-at-machine-speed PlainSec it 2026-08-18T02:23:13Z I log rubati diventano un motore di accesso automatico