https://plainsec.com/stories/07398274-f7ab-43c3-90bc-5203d77ab63d/hunt-io-finds-dahua-cameras-kept-reconnecting PlainSec en 2026-08-20T04:46:23Z Hunt.io Finds Dahua Cameras Kept Reconnecting https://plainsec.com/it/stories/07398274-f7ab-43c3-90bc-5203d77ab63d/hunt-io-finds-dahua-cameras-kept-reconnecting PlainSec it 2026-08-20T04:46:23Z Camere Dahua esposte anche dopo il reset https://plainsec.com/stories/d1f45042-9dd3-4a7e-9576-9c14563c7578/cisa-warns-siemens-plcs-face-active-threat PlainSec en 2026-08-20T04:46:23Z AI Tools Turn Siemens PLC Exposure into Control Risk https://plainsec.com/it/stories/d1f45042-9dd3-4a7e-9576-9c14563c7578/cisa-warns-siemens-plcs-face-active-threat PlainSec it 2026-08-20T04:46:23Z L’AI abbassa la soglia d’ingresso contro i Siemens S7 esposti https://plainsec.com/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec en 2026-08-20T09:18:58Z GitLab Exploitation Turns Repo History Into a Target https://plainsec.com/it/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec it 2026-08-20T09:18:58Z GitLab passa da disclosure a manipolazione silenziosa https://plainsec.com/stories/5bf0a190-c5dd-4420-8f95-d63a24b312e3/uat-10147-turns-public-exploits-into-repeatable-ops PlainSec en 2026-08-20T15:19:44Z UAT-10147 Turns Public Exploits Into Repeatable Ops https://plainsec.com/it/stories/5bf0a190-c5dd-4420-8f95-d63a24b312e3/uat-10147-turns-public-exploits-into-repeatable-ops PlainSec it 2026-08-20T15:19:44Z Talos vede AI trasformare gli exploit in routine ripetibili https://plainsec.com/stories/d6143a95-ee32-444a-8a78-5d44b1e78cb3/zimbra-flaw-is-being-exploited-in-the-wild PlainSec en 2026-08-20T13:30:56Z Zimbra Flaw Is Being Exploited in the Wild https://plainsec.com/it/stories/d6143a95-ee32-444a-8a78-5d44b1e78cb3/zimbra-flaw-is-being-exploited-in-the-wild PlainSec it 2026-08-20T13:30:56Z Zimbra espone il monitoraggio come via d’ingresso per RCE https://plainsec.com/stories/4fe9110e-0f15-4d6f-950f-9795747414dd/silkparasite-fields-five-new-rats-in-central-asia PlainSec en 2026-08-20T21:49:42Z SilkParasite Fields Five New RATs in Central Asia https://plainsec.com/it/stories/4fe9110e-0f15-4d6f-950f-9795747414dd/silkparasite-fields-five-new-rats-in-central-asia PlainSec it 2026-08-20T21:49:42Z SilkParasite moltiplica i RAT contro i governi dell’Asia centrale https://plainsec.com/stories/2ee230e7-641e-4a0c-81d7-779006c90433/citrix-netscaler-flaws-hit-gateway-trust-points PlainSec en 2026-08-20T19:01:05Z Citrix NetScaler Bypass Targets Trust Roles https://plainsec.com/it/stories/2ee230e7-641e-4a0c-81d7-779006c90433/citrix-netscaler-flaws-hit-gateway-trust-points PlainSec it 2026-08-20T19:01:05Z Il front door di NetScaler salta il login su ruoli chiave https://plainsec.com/stories/f05ca80b-5f6e-4c17-8996-f524cf2fd0d4/mlflow-webhook-test-ssrf-reached-internal-metadata PlainSec en 2026-08-20T13:30:56Z MLflow SSRF Is Already Harvesting Cloud Credentials https://plainsec.com/it/stories/f05ca80b-5f6e-4c17-8996-f524cf2fd0d4/mlflow-webhook-test-ssrf-reached-internal-metadata PlainSec it 2026-08-20T13:30:56Z MLflow diventa un proxy per rubare credenziali cloud https://plainsec.com/stories/f712f12e-0956-4934-9969-050fc0575251/rust-crates-hid-malware-in-build-scripts PlainSec en 2026-08-20T19:01:05Z Rust Crates Hid Build-Time Malware in Cargo https://plainsec.com/it/stories/f712f12e-0956-4934-9969-050fc0575251/rust-crates-hid-malware-in-build-scripts PlainSec it 2026-08-20T19:01:05Z Compilare quei crate poteva già eseguire il payload https://plainsec.com/stories/8a8ee71b-fb44-4f9a-9056-f45e5dac134c/carecloud-breach-count-jumps-to-3-76-million PlainSec en 2026-08-20T04:46:23Z CareCloud Breach Count Jumps Into Millions https://plainsec.com/it/stories/8a8ee71b-fb44-4f9a-9056-f45e5dac134c/carecloud-breach-count-jumps-to-3-76-million PlainSec it 2026-08-20T04:46:23Z CareCloud porta l’esposizione a 3,7 milioni di persone https://plainsec.com/stories/1ed9ee51-453c-47d2-ac0a-0c02de523870/clop-s-windchill-shell-knows-too-much PlainSec en 2026-08-20T15:19:44Z Clop’s Windchill Backdoor Turns Credentials Loose https://plainsec.com/it/stories/1ed9ee51-453c-47d2-ac0a-0c02de523870/clop-s-windchill-shell-knows-too-much PlainSec it 2026-08-20T15:19:44Z Windchill diventa un pivot per rubare credenziali https://plainsec.com/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec en 2026-08-20T18:19:27Z NCSC and Meta Show Approved AI Can Still Leak Data https://plainsec.com/it/stories/7da935c9-1f2e-4df4-a045-b0628fbe3b69/netfoundry-survey-flags-ai-control-gap PlainSec it 2026-08-20T18:19:27Z Da shadow AI a agenti approvati che escono dal binario https://plainsec.com/stories/34d355df-d149-40ab-89e4-659a2523f46d/openai-slows-frontier-training-and-research-access PlainSec en 2026-08-20T23:09:14Z OpenAI Moves Model Security Into Runtime Containment https://plainsec.com/it/stories/34d355df-d149-40ab-89e4-659a2523f46d/openai-slows-frontier-training-and-research-access PlainSec it 2026-08-20T23:09:14Z OpenAI porta il controllo dentro il runtime dei model https://plainsec.com/stories/f41f6450-e6c3-443b-93ca-ff6f27fa128e/mabna-charges-expose-academic-data-resale-network PlainSec en 2026-08-20T04:46:23Z Mabna Charges Expose Academic Data Resale Network https://plainsec.com/it/stories/f41f6450-e6c3-443b-93ca-ff6f27fa128e/mabna-charges-expose-academic-data-resale-network PlainSec it 2026-08-20T04:46:23Z Le inbox dei professori diventano un mercato nero https://plainsec.com/stories/db636e44-6cb2-4eaa-94a4-22d0295c5c65/medusa-scales-ransomware-with-brokered-access PlainSec en 2026-08-20T04:46:23Z Medusa Turns Brokered Access Into Faster Intrusions https://plainsec.com/it/stories/db636e44-6cb2-4eaa-94a4-22d0295c5c65/medusa-scales-ransomware-with-brokered-access PlainSec it 2026-08-20T04:46:23Z Medusa scala con accessi comprati e exploit in 24 ore https://plainsec.com/stories/d83d2a8e-4c1c-4140-8ca4-5a28c8735868/defender-zero-day-can-elevate-a-small-foothold PlainSec en 2026-08-20T18:19:27Z Defender Zero-Day Now Has a Federal Deadline https://plainsec.com/it/stories/d83d2a8e-4c1c-4140-8ca4-5a28c8735868/defender-zero-day-can-elevate-a-small-foothold PlainSec it 2026-08-20T18:19:27Z Defender diventa il varco di escalation locale https://plainsec.com/stories/a81d37b6-dfb8-4780-8868-eb3fed36d0d0/white-house-opens-door-to-vetted-offensive-cyber-firms PlainSec en 2026-08-20T23:09:14Z White House Opens Door to Vetted Offensive Cyber Firms https://plainsec.com/it/stories/a81d37b6-dfb8-4780-8868-eb3fed36d0d0/white-house-opens-door-to-vetted-offensive-cyber-firms PlainSec it 2026-08-20T23:09:14Z Gli Stati Uniti aprono agli operatori privati nelle offensive cyber https://plainsec.com/stories/06238a6f-1303-4d25-be02-bedf58e0f679/froxlor-api-leak-exposes-password-hashes-and-2fa-seeds PlainSec en 2026-08-20T23:09:14Z Froxlor API Leak Exposes Password Hashes and 2FA Seeds https://plainsec.com/it/stories/06238a6f-1303-4d25-be02-bedf58e0f679/froxlor-api-leak-exposes-password-hashes-and-2fa-seeds PlainSec it 2026-08-20T23:09:14Z Un’API di Froxlor espone hash e seed 2FA https://plainsec.com/stories/90c8b093-9bd8-4a57-ab90-8f855761e312/gtig-tracks-three-russian-clusters-abusing-login-flows PlainSec en 2026-08-20T21:49:42Z GTIG Tracks Three Russian Clusters Abusing Login Flows https://plainsec.com/it/stories/90c8b093-9bd8-4a57-ab90-8f855761e312/gtig-tracks-three-russian-clusters-abusing-login-flows PlainSec it 2026-08-20T21:49:42Z L'attacco passa dalle finte login ai flussi di accesso reali https://plainsec.com/stories/9c9ab7dc-f7d5-4968-bbeb-53a4a88df13b/cisa-confirms-windows-task-host-ransomware-exploitation PlainSec en 2026-08-19T04:29:31Z CISA Confirms Windows Task Host Ransomware Exploitation https://plainsec.com/it/stories/9c9ab7dc-f7d5-4968-bbeb-53a4a88df13b/cisa-confirms-windows-task-host-ransomware-exploitation PlainSec it 2026-08-19T04:29:31Z Ransomware sfrutta il Task Host di Windows per elevare i privilegi https://plainsec.com/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec en 2026-08-19T21:02:07Z Azure Tenant Dumps Expose the Org Chart https://plainsec.com/it/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec it 2026-08-19T21:02:07Z L’export del tenant diventa la mappa per il BEC https://plainsec.com/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec en 2026-08-19T23:31:19Z GeoTools Regression Reopens GeoServer SQL Injection https://plainsec.com/it/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec it 2026-08-19T23:31:19Z GeoTools riapre un vecchio buco in GeoServer https://plainsec.com/stories/17288618-7eed-4f82-8226-76b0dad10998/ait-gui-lets-browsers-send-spacecraft-commands PlainSec en 2026-08-20T01:49:47Z AIT-GUI Lets Browsers Send Spacecraft Commands https://plainsec.com/it/stories/17288618-7eed-4f82-8226-76b0dad10998/ait-gui-lets-browsers-send-spacecraft-commands PlainSec it 2026-08-20T01:49:47Z Un browser può far parlare la console di comando https://plainsec.com/stories/489a1f5b-d069-4ae9-9da3-a97873da95b6/ransom-busters-adds-a-fake-recovery-layer PlainSec en 2026-08-20T02:23:54Z Ransom Busters Adds a Fake Recovery Layer https://plainsec.com/it/stories/489a1f5b-d069-4ae9-9da3-a97873da95b6/ransom-busters-adds-a-fake-recovery-layer PlainSec it 2026-08-20T02:23:54Z La truffa del recupero aggiunge un secondo incasso al ransomware https://plainsec.com/stories/183d3428-095f-43e5-b9e3-00d0dec589cb/ut-san-antonio-cut-systems-offline-before-term PlainSec en 2026-08-20T02:23:54Z UT San Antonio Cut Systems Offline Before Term https://plainsec.com/it/stories/183d3428-095f-43e5-b9e3-00d0dec589cb/ut-san-antonio-cut-systems-offline-before-term PlainSec it 2026-08-20T02:23:54Z UT San Antonio blocca i sistemi e ferma i servizi studenti https://plainsec.com/stories/806368c9-a023-4af8-8c27-1eb383442bd2/oracle-construction-advisory-flags-trust-breaking-flaw PlainSec en 2026-08-20T02:23:54Z Oracle EBS Patches 120 Flaws Across Core Modules https://plainsec.com/it/stories/806368c9-a023-4af8-8c27-1eb383442bd2/oracle-construction-advisory-flags-trust-breaking-flaw PlainSec it 2026-08-20T02:23:54Z L'intera ERP Oracle esposta da 120 falle https://plainsec.com/stories/c1932610-2ae9-457b-b2d4-480ffc771377/black-kite-finds-ransomware-still-prefers-mid-market-manufacturers PlainSec en 2026-08-20T02:23:54Z Black Kite Finds Ransomware Still Prefers Mid-Market Manufacturers https://plainsec.com/it/stories/c1932610-2ae9-457b-b2d4-480ffc771377/black-kite-finds-ransomware-still-prefers-mid-market-manufacturers PlainSec it 2026-08-20T02:23:54Z Il ransomware si concentra ancora sui mid-market manifatturieri https://plainsec.com/stories/78cae32f-a6cf-4e0c-a692-f9db196e5096/claude-search-lure-pushed-macsync-to-mac-users PlainSec en 2026-08-20T02:23:54Z Microsoft Expands MacSync Beyond Rotating C2 Domains https://plainsec.com/it/stories/78cae32f-a6cf-4e0c-a692-f9db196e5096/claude-search-lure-pushed-macsync-to-mac-users PlainSec it 2026-08-20T02:23:54Z I domini cambiano, il furto continua su MacSync https://plainsec.com/stories/638b6719-70a3-400e-b2cb-750a1ee7ec0f/ai-agents-broke-out-through-small-weaknesses PlainSec en 2026-08-20T02:23:54Z AI Agents Broke Out Through Small Weaknesses https://plainsec.com/it/stories/638b6719-70a3-400e-b2cb-750a1ee7ec0f/ai-agents-broke-out-through-small-weaknesses PlainSec it 2026-08-20T02:23:54Z Gli agentic AI escono dal sandbox con debolezze ordinarie https://plainsec.com/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec en 2026-08-18T04:27:09Z DGFiP Breach Ran Through Trusted Accounts https://plainsec.com/it/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec it 2026-08-18T04:27:09Z La sospensione degli account non ha fermato il furto in DGFiP https://plainsec.com/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec en 2026-08-18T04:27:09Z SafePal Order Leak Moves Into Resale https://plainsec.com/it/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec it 2026-08-18T04:27:09Z Dalla fuga di dati al mercato del phishing SafePal https://plainsec.com/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec en 2026-08-18T04:27:09Z SAP Commerce Cloud Exploit Lands Days After Patch https://plainsec.com/it/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec it 2026-08-18T04:27:09Z SAP Commerce Cloud esposto senza credenziali rubate https://plainsec.com/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec en 2026-08-18T17:09:06Z Irregular’s Sandbox Mistake Hit a Real Domain https://plainsec.com/it/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec it 2026-08-18T17:09:06Z Un errore di naming trasforma la simulazione in attacco reale https://plainsec.com/stories/6c19cb1f-cfea-4096-a57e-362612a86ff0/copilot-s-hidden-url-turned-clicks-into-prompts PlainSec en 2026-08-18T21:07:07Z Microsoft Copilot Patch Lands Amid Scope Dispute https://plainsec.com/it/stories/6c19cb1f-cfea-4096-a57e-362612a86ff0/copilot-s-hidden-url-turned-clicks-into-prompts PlainSec it 2026-08-18T21:07:07Z Copilot Personal: patch su una falla ancora contestata https://plainsec.com/stories/3d195d15-9353-47d1-a139-ca808a5926de/twinloot-hides-its-control-channel-in-microsoft-365 PlainSec en 2026-08-18T17:09:06Z TwinLoot Hides Its Control Channel in Microsoft 365 https://plainsec.com/it/stories/3d195d15-9353-47d1-a139-ca808a5926de/twinloot-hides-its-control-channel-in-microsoft-365 PlainSec it 2026-08-18T17:09:06Z Microsoft 365 diventa il canale di comando di TwinLoot https://plainsec.com/stories/40203f24-dce8-49c5-8a7a-fcf61255337e/attackers-use-ai-to-rank-what-to-steal PlainSec en 2026-08-18T17:09:06Z Attackers Use AI to Rank What to Steal https://plainsec.com/it/stories/40203f24-dce8-49c5-8a7a-fcf61255337e/attackers-use-ai-to-rank-what-to-steal PlainSec it 2026-08-18T17:09:06Z L’AI diventa l’operatore dentro l’intrusione https://plainsec.com/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec en 2026-08-18T23:33:34Z Unisoc Modem Flaw Breaks the Android Boundary https://plainsec.com/it/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec it 2026-08-18T23:33:34Z Il modem diventa la via d’ingresso al kernel Android https://plainsec.com/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec en 2026-08-18T18:32:19Z Evooo1Bot Turns Edge CVEs Into Proxy Nodes https://plainsec.com/it/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec it 2026-08-18T18:32:19Z I gateway compromessi diventano proxy persistenti https://plainsec.com/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec en 2026-08-19T02:22:27Z Forminator Upload Flaw Can Run Attacker PHP https://plainsec.com/it/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec it 2026-08-19T02:22:27Z La form di WordPress può diventare un webshell host https://plainsec.com/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec en 2026-08-19T02:22:27Z City Forum Emerges as One Persistent Scraper https://plainsec.com/it/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec it 2026-08-19T02:22:27Z Un solo scraper tiene aperti i portal guest di Salesforce e ServiceNow