https://plainsec.com/stories/07398274-f7ab-43c3-90bc-5203d77ab63d/hunt-io-finds-dahua-cameras-kept-reconnecting PlainSec en 2026-08-19T16:21:53Z Hunt.io Finds Dahua Cameras Kept Reconnecting https://plainsec.com/it/stories/07398274-f7ab-43c3-90bc-5203d77ab63d/hunt-io-finds-dahua-cameras-kept-reconnecting PlainSec it 2026-08-19T16:21:53Z Camere Dahua esposte anche dopo il reset https://plainsec.com/stories/1ed9ee51-453c-47d2-ac0a-0c02de523870/clop-s-windchill-shell-knows-too-much PlainSec en 2026-08-19T08:21:44Z Clop’s Windchill Backdoor Turns Credentials Loose https://plainsec.com/it/stories/1ed9ee51-453c-47d2-ac0a-0c02de523870/clop-s-windchill-shell-knows-too-much PlainSec it 2026-08-19T08:21:44Z Windchill diventa un pivot per rubare credenziali https://plainsec.com/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec en 2026-08-19T04:29:31Z GitLab GraphQL Flaws Invite Fast State Changes https://plainsec.com/it/stories/79ed23de-c8f6-4304-9a52-b6a4ca5c473f/gitlab-advisory-covers-13-flaws-across-18-x-and-19-x PlainSec it 2026-08-19T04:29:31Z GitLab espone la scrittura anonima sulla GraphQL pubblica https://plainsec.com/stories/d1f45042-9dd3-4a7e-9576-9c14563c7578/cisa-warns-siemens-plcs-face-active-threat PlainSec en 2026-08-19T19:22:36Z Siemens PLCs Face AI-Fueled Active Threat https://plainsec.com/it/stories/d1f45042-9dd3-4a7e-9576-9c14563c7578/cisa-warns-siemens-plcs-face-active-threat PlainSec it 2026-08-19T19:22:36Z L’AI abbassa la soglia d’attacco contro i PLC Siemens https://plainsec.com/stories/8a8ee71b-fb44-4f9a-9056-f45e5dac134c/carecloud-breach-count-jumps-to-3-76-million PlainSec en 2026-08-19T16:21:53Z CareCloud Breach Count Climbs Into Millions https://plainsec.com/it/stories/8a8ee71b-fb44-4f9a-9056-f45e5dac134c/carecloud-breach-count-jumps-to-3-76-million PlainSec it 2026-08-19T16:21:53Z CareCloud, il cloud sanitario espone 3,7 milioni di pazienti https://plainsec.com/stories/db636e44-6cb2-4eaa-94a4-22d0295c5c65/medusa-scales-ransomware-with-brokered-access PlainSec en 2026-08-19T04:29:31Z Medusa Turns Brokered Access Into Faster Intrusions https://plainsec.com/it/stories/db636e44-6cb2-4eaa-94a4-22d0295c5c65/medusa-scales-ransomware-with-brokered-access PlainSec it 2026-08-19T04:29:31Z Medusa scala con accessi comprati e exploit in 24 ore https://plainsec.com/stories/f05ca80b-5f6e-4c17-8996-f524cf2fd0d4/mlflow-webhook-test-ssrf-reached-internal-metadata PlainSec en 2026-08-19T04:29:31Z MLflow SSRF Is Already Harvesting Cloud Credentials https://plainsec.com/it/stories/f05ca80b-5f6e-4c17-8996-f524cf2fd0d4/mlflow-webhook-test-ssrf-reached-internal-metadata PlainSec it 2026-08-19T04:29:31Z MLflow diventa un proxy per rubare credenziali cloud https://plainsec.com/stories/9c9ab7dc-f7d5-4968-bbeb-53a4a88df13b/cisa-confirms-windows-task-host-ransomware-exploitation PlainSec en 2026-08-19T04:29:31Z CISA Confirms Windows Task Host Ransomware Exploitation https://plainsec.com/it/stories/9c9ab7dc-f7d5-4968-bbeb-53a4a88df13b/cisa-confirms-windows-task-host-ransomware-exploitation PlainSec it 2026-08-19T04:29:31Z Ransomware sfrutta il Task Host di Windows per elevare i privilegi https://plainsec.com/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec en 2026-08-19T21:02:07Z Azure Tenant Dumps Expose the Org Chart https://plainsec.com/it/stories/75f4c064-9adf-4c76-8879-ead6115ac01a/azure-tenant-dumps-expose-the-org-chart PlainSec it 2026-08-19T21:02:07Z L’export del tenant diventa la mappa per il BEC https://plainsec.com/stories/f41f6450-e6c3-443b-93ca-ff6f27fa128e/mabna-charges-expose-academic-data-resale-network PlainSec en 2026-08-19T16:21:53Z Mabna Charges Expose Academic Data Resale Network https://plainsec.com/it/stories/f41f6450-e6c3-443b-93ca-ff6f27fa128e/mabna-charges-expose-academic-data-resale-network PlainSec it 2026-08-19T16:21:53Z Le inbox dei professori diventano un mercato nero https://plainsec.com/stories/34d355df-d149-40ab-89e4-659a2523f46d/openai-slows-frontier-training-and-research-access PlainSec en 2026-08-19T21:02:07Z OpenAI Slows Frontier Training and Research Access https://plainsec.com/it/stories/34d355df-d149-40ab-89e4-659a2523f46d/openai-slows-frontier-training-and-research-access PlainSec it 2026-08-19T21:02:07Z OpenAI stringe i controlli e frena l’accesso ai ricercatori https://plainsec.com/stories/5e0d25a5-f9b0-4a4c-bbc3-a1187550068a/t-mobile-cut-a-cable-to-stop-salt-typhoon PlainSec en 2026-08-19T21:02:07Z T-Mobile Cut a Cable to Stop Salt Typhoon https://plainsec.com/it/stories/5e0d25a5-f9b0-4a4c-bbc3-a1187550068a/t-mobile-cut-a-cable-to-stop-salt-typhoon PlainSec it 2026-08-19T21:02:07Z La fiducia tra carrier è parte della superficie d’attacco https://plainsec.com/stories/183d3428-095f-43e5-b9e3-00d0dec589cb/ut-san-antonio-cut-systems-offline-before-term PlainSec en 2026-08-19T21:02:07Z UT San Antonio Cut Systems Offline Before Term https://plainsec.com/it/stories/183d3428-095f-43e5-b9e3-00d0dec589cb/ut-san-antonio-cut-systems-offline-before-term PlainSec it 2026-08-19T21:02:07Z UT San Antonio blocca i sistemi e ferma i servizi studenti https://plainsec.com/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec en 2026-08-19T21:02:07Z Forminator Upload Flaw Can Run Attacker PHP https://plainsec.com/it/stories/78263682-2716-4b0e-b961-d36e46d6f4ca/user-profile-builder-bug-can-hand-out-admin-sessions PlainSec it 2026-08-19T21:02:07Z La form di WordPress può diventare un webshell host https://plainsec.com/stories/c1932610-2ae9-457b-b2d4-480ffc771377/black-kite-finds-ransomware-still-prefers-mid-market-manufacturers PlainSec en 2026-08-19T21:02:07Z Black Kite Finds Ransomware Still Prefers Mid-Market Manufacturers https://plainsec.com/it/stories/c1932610-2ae9-457b-b2d4-480ffc771377/black-kite-finds-ransomware-still-prefers-mid-market-manufacturers PlainSec it 2026-08-19T21:02:07Z Il ransomware si concentra ancora sui mid-market manifatturieri https://plainsec.com/stories/6c19cb1f-cfea-4096-a57e-362612a86ff0/copilot-s-hidden-url-turned-clicks-into-prompts PlainSec en 2026-08-19T21:02:07Z Microsoft Copilot Patch Lands Amid Scope Dispute https://plainsec.com/it/stories/6c19cb1f-cfea-4096-a57e-362612a86ff0/copilot-s-hidden-url-turned-clicks-into-prompts PlainSec it 2026-08-19T21:02:07Z Copilot Personal: patch su una falla ancora contestata https://plainsec.com/stories/881f4b43-9af5-4a8e-ba42-021ce77421d5/oracle-bi-advisory-spans-legacy-and-current-releases PlainSec en 2026-08-19T21:02:07Z Oracle BI Advisory Spans Legacy and Current Releases https://plainsec.com/it/stories/881f4b43-9af5-4a8e-ba42-021ce77421d5/oracle-bi-advisory-spans-legacy-and-current-releases PlainSec it 2026-08-19T21:02:07Z Oracle BI espone anche le release legacy https://plainsec.com/stories/638b6719-70a3-400e-b2cb-750a1ee7ec0f/ai-agents-broke-out-through-small-weaknesses PlainSec en 2026-08-19T21:02:07Z AI Agents Broke Out Through Small Weaknesses https://plainsec.com/it/stories/638b6719-70a3-400e-b2cb-750a1ee7ec0f/ai-agents-broke-out-through-small-weaknesses PlainSec it 2026-08-19T21:02:07Z Gli agentic AI escono dal sandbox con debolezze ordinarie https://plainsec.com/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec en 2026-08-18T04:27:09Z DGFiP Breach Ran Through Trusted Accounts https://plainsec.com/it/stories/38f46841-750c-4ffd-a3d8-4b01b29673ba/dgfip-breach-exposes-tax-data-through-stolen-identity PlainSec it 2026-08-18T04:27:09Z La sospensione degli account non ha fermato il furto in DGFiP https://plainsec.com/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec en 2026-08-18T04:27:09Z SafePal Order Leak Moves Into Resale https://plainsec.com/it/stories/2c1c34b8-d571-43f3-9849-226879c749b2/safepal-breach-exposes-orders-not-wallets PlainSec it 2026-08-18T04:27:09Z Dalla fuga di dati al mercato del phishing SafePal https://plainsec.com/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec en 2026-08-18T04:27:09Z SAP Commerce Cloud Exploit Lands Days After Patch https://plainsec.com/it/stories/52bd253b-7952-4ca8-ab3e-3ce6bd657a1f/sap-commerce-cloud-exploit-lands-days-after-patch PlainSec it 2026-08-18T04:27:09Z SAP Commerce Cloud esposto senza credenziali rubate https://plainsec.com/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec en 2026-08-18T17:09:06Z Irregular’s Sandbox Mistake Hit a Real Domain https://plainsec.com/it/stories/3ef89fb9-180d-43dc-b40a-e646f7866b9c/irregular-s-test-setup-reached-real-targets PlainSec it 2026-08-18T17:09:06Z Un errore di naming trasforma la simulazione in attacco reale https://plainsec.com/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec en 2026-08-18T12:39:45Z GeoTools Regression Reopens GeoServer SQL Injection https://plainsec.com/it/stories/8c93665e-a23c-464c-b63c-cfde3ae76ba9/geoserver-flaw-draws-fast-probing-possible-server-takeover PlainSec it 2026-08-18T12:39:45Z GeoTools riapre un vecchio buco in GeoServer https://plainsec.com/stories/3d195d15-9353-47d1-a139-ca808a5926de/twinloot-hides-its-control-channel-in-microsoft-365 PlainSec en 2026-08-18T17:09:06Z TwinLoot Hides Its Control Channel in Microsoft 365 https://plainsec.com/it/stories/3d195d15-9353-47d1-a139-ca808a5926de/twinloot-hides-its-control-channel-in-microsoft-365 PlainSec it 2026-08-18T17:09:06Z Microsoft 365 diventa il canale di comando di TwinLoot https://plainsec.com/stories/40203f24-dce8-49c5-8a7a-fcf61255337e/attackers-use-ai-to-rank-what-to-steal PlainSec en 2026-08-18T17:09:06Z Attackers Use AI to Rank What to Steal https://plainsec.com/it/stories/40203f24-dce8-49c5-8a7a-fcf61255337e/attackers-use-ai-to-rank-what-to-steal PlainSec it 2026-08-18T17:09:06Z L’AI diventa l’operatore dentro l’intrusione https://plainsec.com/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec en 2026-08-18T23:33:34Z Unisoc Modem Flaw Breaks the Android Boundary https://plainsec.com/it/stories/b9644f97-75f6-415c-b237-ebb9720d6d1b/unisoc-modem-flaw-breaks-the-android-boundary PlainSec it 2026-08-18T23:33:34Z Il modem diventa la via d’ingresso al kernel Android https://plainsec.com/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec en 2026-08-18T18:32:19Z Evooo1Bot Turns Edge CVEs Into Proxy Nodes https://plainsec.com/it/stories/efb3c6b1-d210-47fc-ae59-969e62d52ae4/evooo1bot-turns-routers-into-stealth-proxies PlainSec it 2026-08-18T18:32:19Z I gateway compromessi diventano proxy persistenti https://plainsec.com/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec en 2026-08-19T02:22:27Z City Forum Emerges as One Persistent Scraper https://plainsec.com/it/stories/1b34a604-7a3e-4ff5-a463-4588dbf60ceb/city-forum-reads-portal-data-through-guest-accounts PlainSec it 2026-08-19T02:22:27Z Un solo scraper tiene aperti i portal guest di Salesforce e ServiceNow https://plainsec.com/stories/702ba5e9-6823-4932-b37d-6afc356103fc/anthropic-tests-show-claude-agents-sabotaging-peers PlainSec en 2026-08-18T00:34:58Z Anthropic Tests Show Claude Agents Sabotaging Peers https://plainsec.com/it/stories/702ba5e9-6823-4932-b37d-6afc356103fc/anthropic-tests-show-claude-agents-sabotaging-peers PlainSec it 2026-08-18T00:34:58Z Claude agenti contro Claude: il rischio interno emerge https://plainsec.com/stories/f000ca9f-a99b-4898-960c-8ee812c9cb8d/mcp-connectors-hide-a-high-value-trust-boundary PlainSec en 2026-08-17T13:39:09Z MCP Connectors Hide a High-Value Trust Boundary https://plainsec.com/it/stories/f000ca9f-a99b-4898-960c-8ee812c9cb8d/mcp-connectors-hide-a-high-value-trust-boundary PlainSec it 2026-08-17T13:39:09Z MCP trasforma i connector AI in un archivio di segreti privilegiati https://plainsec.com/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec en 2026-08-17T08:34:49Z CISA’s KEV Update Spans Four Live Exploits https://plainsec.com/it/stories/daaa4466-207f-4157-a8b7-68a0486d9881/vcenter-exploits-left-reverse-ssh-footholds-behind PlainSec it 2026-08-17T08:34:49Z Quattro CVE in KEV, l’esposizione si allarga su più piattaforme https://plainsec.com/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec en 2026-08-17T19:16:51Z AmnesiaStealer Adds Live Browser Session Control https://plainsec.com/it/stories/54dbf5d1-b602-441e-9f98-439e12ac643f/amnesiastealer-adds-live-browser-session-control PlainSec it 2026-08-17T19:16:51Z AmnesiaStealer passa dal furto account al controllo della sessione https://plainsec.com/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec en 2026-08-17T15:02:03Z Agent Guardrails Fail Before the Model Speaks https://plainsec.com/it/stories/a6386d71-9b59-4671-9c14-8181ec37b099/agent-guardrails-fail-before-the-model-speaks PlainSec it 2026-08-17T15:02:03Z I guardrail del modello non bastano più agli agent https://plainsec.com/stories/1bcd3645-4ab1-4838-9ed9-dc11ecc7c858/certighost-lets-a-domain-user-impersonate-a-dc PlainSec en 2026-08-18T02:23:13Z Certighost Lets a Domain User Impersonate a DC https://plainsec.com/it/stories/1bcd3645-4ab1-4838-9ed9-dc11ecc7c858/certighost-lets-a-domain-user-impersonate-a-dc PlainSec it 2026-08-18T02:23:13Z La CA di dominio diventa un oracle di fiducia https://plainsec.com/stories/47d99a45-561f-475d-a393-3e49994933f9/germany-brazil-arrest-seven-in-clone-card-fraud-case PlainSec en 2026-08-18T02:23:13Z Germany, Brazil Arrest Seven in Clone-Card Fraud Case https://plainsec.com/it/stories/47d99a45-561f-475d-a393-3e49994933f9/germany-brazil-arrest-seven-in-clone-card-fraud-case PlainSec it 2026-08-18T02:23:13Z Raffica di arresti in un caso di frode bancaria transfrontaliera https://plainsec.com/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec en 2026-08-18T02:23:13Z Jewelbug Merges Espionage and Crypto Theft https://plainsec.com/it/stories/d159fa84-f306-4536-8bce-8b2abff7bf72/jewelbug-merges-espionage-and-crypto-theft PlainSec it 2026-08-18T02:23:13Z Jewelbug unisce spionaggio di Stato e furto crypto dallo stesso panel https://plainsec.com/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec en 2026-08-18T02:23:13Z WindRelay and SpyNote Fueled a 13-Minute Call Scam https://plainsec.com/it/stories/52e779ce-6c0d-4f4f-acc7-1781a37232fe/windrelay-and-spynote-fueled-a-13-minute-call-scam PlainSec it 2026-08-18T02:23:13Z Una chiamata da 13 minuti basta per clonare una carta https://plainsec.com/stories/9dff98a1-ea40-4cdc-8841-ad9f2b47f186/flashpoint-shows-infostealers-now-run-at-machine-speed PlainSec en 2026-08-18T02:23:13Z Flashpoint Shows Infostealers Now Run at Machine Speed https://plainsec.com/it/stories/9dff98a1-ea40-4cdc-8841-ad9f2b47f186/flashpoint-shows-infostealers-now-run-at-machine-speed PlainSec it 2026-08-18T02:23:13Z I log rubati diventano un motore di accesso automatico