https://plainsec.com/stories/54ecf56c-59b2-446f-86b8-8143a8c53c8a/vite-dev-servers-are-leaking-cloud-credentials PlainSec en 2026-09-15T04:21:31Z Vite Exploitation Is Now Harvesting Cloud Secrets https://plainsec.com/it/stories/54ecf56c-59b2-446f-86b8-8143a8c53c8a/vite-dev-servers-are-leaking-cloud-credentials PlainSec it 2026-09-15T04:21:31Z Vite espone credenziali cloud con uno scan di massa https://plainsec.com/stories/5085b75e-16b0-4b7c-a541-3bdc9d2498a8/marimo-terminal-flaw-reached-a-bastion-in-seconds PlainSec en 2026-09-15T04:21:31Z Marimo Terminal Flaw Reached a Bastion in Seconds https://plainsec.com/it/stories/5085b75e-16b0-4b7c-a541-3bdc9d2498a8/marimo-terminal-flaw-reached-a-bastion-in-seconds PlainSec it 2026-09-15T04:21:31Z Il terminale di Marimo apre la strada al cloud in otto secondi https://plainsec.com/stories/0654c2cd-dee4-41fb-acd0-649ec483e879/centerpoint-breach-exposes-fraud-ready-customer-data PlainSec en 2026-09-15T19:11:56Z CenterPoint Breach Exposes Fraud-Ready Customer Data https://plainsec.com/it/stories/0654c2cd-dee4-41fb-acd0-649ec483e879/centerpoint-breach-exposes-fraud-ready-customer-data PlainSec it 2026-09-15T19:11:56Z CenterPoint, fuga di dati da un sistema esposto al pubblico https://plainsec.com/stories/2653075a-9428-4e48-8377-5335a87d3639/hbo-max-reddit-ads-were-turned-into-malware PlainSec en 2026-09-15T04:21:31Z HBO Max Reddit Ads Were Turned Into Malware https://plainsec.com/it/stories/2653075a-9428-4e48-8377-5335a87d3639/hbo-max-reddit-ads-were-turned-into-malware PlainSec it 2026-09-15T04:21:31Z Un account verificato HBO Max diventa un canale malware https://plainsec.com/stories/aec88eb4-49d3-46b1-b31b-2f13ad9f7f4a/revolut-leak-came-through-fake-government-requests PlainSec en 2026-09-15T04:21:31Z Revolut Data Leak Came Through Trusted Email https://plainsec.com/it/stories/aec88eb4-49d3-46b1-b31b-2f13ad9f7f4a/revolut-leak-came-through-fake-government-requests PlainSec it 2026-09-15T04:21:31Z Un dominio governativo reale basta ancora a far uscire i dati https://plainsec.com/stories/1f8ea090-fd19-4ac7-b934-f1c95756c6d5/red-heron-turned-gitea-access-into-control-plane-breach PlainSec en 2026-09-15T04:21:31Z Red Heron Turned Gitea Access into Control-Plane Breach https://plainsec.com/it/stories/1f8ea090-fd19-4ac7-b934-f1c95756c6d5/red-heron-turned-gitea-access-into-control-plane-breach PlainSec it 2026-09-15T04:21:31Z Da Git ai privilegi root: Red Heron amplia il raggio d’azione https://plainsec.com/stories/df0cf802-3613-4d7a-8dca-3fb48e77fcf0/gtig-sees-ai-tools-speed-supply-chain-abuse PlainSec en 2026-09-15T10:31:06Z GTIG Sees AI Theft Turning Into Operations https://plainsec.com/it/stories/df0cf802-3613-4d7a-8dca-3fb48e77fcf0/gtig-sees-ai-tools-speed-supply-chain-abuse PlainSec it 2026-09-15T10:31:06Z Le credenziali AI rubate diventano una piattaforma operativa https://plainsec.com/stories/7d183bd1-183c-4ec1-ba76-f3469dcde344/jeetbot-leaks-twitch-sessions-through-browser-stores PlainSec en 2026-09-15T04:21:31Z JeetBot Turns Twitch Extensions Into Token Theft https://plainsec.com/it/stories/7d183bd1-183c-4ec1-ba76-f3469dcde344/jeetbot-leaks-twitch-sessions-through-browser-stores PlainSec it 2026-09-15T04:21:31Z Token Twitch rubati via estensione: 31.000 account esposti https://plainsec.com/stories/26c1392f-9438-406e-a025-0f7688bc308a/unc3569-used-sogou-links-for-user-context-access PlainSec en 2026-09-15T04:21:31Z UNC3569 Used Sogou Links for User-Context Access https://plainsec.com/it/stories/26c1392f-9438-406e-a025-0f7688bc308a/unc3569-used-sogou-links-for-user-context-access PlainSec it 2026-09-15T04:21:31Z Un link basta a prendere il controllo della sessione Windows https://plainsec.com/stories/6345197e-094d-4d57-8134-3a02242bac1d/hunt-io-found-a-tailored-3bb-intrusion-kit PlainSec en 2026-09-15T15:11:32Z Hunt.io Found a Tailored 3BB Intrusion Kit https://plainsec.com/it/stories/6345197e-094d-4d57-8134-3a02242bac1d/hunt-io-found-a-tailored-3bb-intrusion-kit PlainSec it 2026-09-15T15:11:32Z Una backdoor resta dopo lo sfruttamento dei gateway https://plainsec.com/stories/1420b94c-e6d5-4d2b-95e6-799378e31dca/onetrust-survey-shows-ai-outrunning-governance PlainSec en 2026-09-15T19:11:56Z AI Adoption Is Outrunning Agent Governance https://plainsec.com/it/stories/1420b94c-e6d5-4d2b-95e6-799378e31dca/onetrust-survey-shows-ai-outrunning-governance PlainSec it 2026-09-15T19:11:56Z L’AI corre, ma i controlli non vedono gli agenti abusivi https://plainsec.com/stories/431c6a3b-f2a1-4787-ab08-4eb4c59b3dbd/openai-replays-a-sandbox-escape-at-black-hat PlainSec en 2026-09-15T20:29:48Z OpenAI Replays a Sandbox Escape at Black Hat https://plainsec.com/it/stories/431c6a3b-f2a1-4787-ab08-4eb4c59b3dbd/openai-replays-a-sandbox-escape-at-black-hat PlainSec it 2026-09-15T20:29:48Z La sandbox di valutazione diventa la superficie d'attacco https://plainsec.com/stories/4476d246-6b05-416c-b146-f16377db91c2/bambootoken-uses-token-software-to-hide-on-workstations PlainSec en 2026-09-15T20:29:48Z BambooToken Uses Token Software to Hide on Workstations https://plainsec.com/it/stories/4476d246-6b05-416c-b146-f16377db91c2/bambootoken-uses-token-software-to-hide-on-workstations PlainSec it 2026-09-15T20:29:48Z Il software dei token diventa il varco per BambooToken https://plainsec.com/stories/006c6a3f-4056-434f-8ee6-8928adad9a5f/eff-shows-alpr-logs-enabling-casual-location-searches PlainSec en 2026-09-15T08:22:16Z EFF Shows ALPR Logs Enabling Casual Location Searches https://plainsec.com/it/stories/006c6a3f-4056-434f-8ee6-8928adad9a5f/eff-shows-alpr-logs-enabling-casual-location-searches PlainSec it 2026-09-15T08:22:16Z I log ALPR mostrano ricerche senza giustificazione reale https://plainsec.com/stories/c4f61094-143e-4305-aaa0-ffa1c79bd6b0/chosen-brick-puts-surveillance-into-dissidents-chats PlainSec en 2026-09-15T19:11:56Z MOIS Hides Spyware in Telegram Chats https://plainsec.com/it/stories/c4f61094-143e-4305-aaa0-ffa1c79bd6b0/chosen-brick-puts-surveillance-into-dissidents-chats PlainSec it 2026-09-15T19:11:56Z CHOSEN BRICK porta la sorveglianza nelle chat dei dissidenti https://plainsec.com/stories/49e02ebb-a092-4766-a8e7-b0ac9c56dec2/black-axe-leaders-face-u-s-fraud-charges PlainSec en 2026-09-15T10:31:06Z Black Axe Leaders Face U.S. Fraud Charges https://plainsec.com/it/stories/49e02ebb-a092-4766-a8e7-b0ac9c56dec2/black-axe-leaders-face-u-s-fraud-charges PlainSec it 2026-09-15T10:31:06Z Black Axe perde cinque presunti vertici negli Usa https://plainsec.com/stories/7a3568f5-e346-41ec-a472-ff0794797fc3/hypr-survey-finds-hiring-fraud-starts-before-access-checks PlainSec en 2026-09-15T19:11:56Z HYPR Survey Finds Hiring Fraud Starts Before Access Checks https://plainsec.com/it/stories/7a3568f5-e346-41ec-a472-ff0794797fc3/hypr-survey-finds-hiring-fraud-starts-before-access-checks PlainSec it 2026-09-15T19:11:56Z Le credenziali arrivano prima della verifica dell’identità https://plainsec.com/stories/3d899b34-3603-4af7-86eb-6497e66d263c/luciferus-sells-malware-help-as-a-subscription PlainSec en 2026-09-15T15:11:32Z Luciferus Sells Malware Help as a Subscription https://plainsec.com/it/stories/3d899b34-3603-4af7-86eb-6497e66d263c/luciferus-sells-malware-help-as-a-subscription PlainSec it 2026-09-15T15:11:32Z Il malware diventa un abbonamento sui forum criminali https://plainsec.com/stories/5615b51f-8727-4ad5-a03d-c38e0cd74ae2/digital-agency-breach-exposes-government-identity-data PlainSec en 2026-09-15T15:11:32Z Digital Agency Breach Exposes Government Identity Data https://plainsec.com/it/stories/5615b51f-8727-4ad5-a03d-c38e0cd74ae2/digital-agency-breach-exposes-government-identity-data PlainSec it 2026-09-15T15:11:32Z 246 mila record governativi diventano un kit di impersonazione https://plainsec.com/stories/2185d706-2ffd-4bc3-9f96-7330a0539cbf/woocommerce-plugin-exploits-plant-wordpress-backdoors PlainSec en 2026-09-15T19:11:56Z WooCommerce Plugin Exploits Plant WordPress Backdoors https://plainsec.com/it/stories/2185d706-2ffd-4bc3-9f96-7330a0539cbf/woocommerce-plugin-exploits-plant-wordpress-backdoors PlainSec it 2026-09-15T19:11:56Z Un plugin premium porta il backdoor sul sito WordPress https://plainsec.com/stories/f7ff1177-c85a-4e67-b75c-70d5dd326977/microsoft-updates-break-usb-audio-on-windows-pcs PlainSec en 2026-09-15T19:11:56Z Microsoft Updates Break USB Audio on Windows PCs https://plainsec.com/it/stories/f7ff1177-c85a-4e67-b75c-70d5dd326977/microsoft-updates-break-usb-audio-on-windows-pcs PlainSec it 2026-09-15T19:11:56Z Gli update di settembre rompono l’audio USB su alcuni PC Windows https://plainsec.com/stories/1e60f675-18cc-4ecf-80a7-2ec570fb51b0/huntress-traces-a-google-doc-malware-split PlainSec en 2026-09-15T08:22:16Z Huntress Traces a Google Doc Malware Split https://plainsec.com/it/stories/1e60f675-18cc-4ecf-80a7-2ec570fb51b0/huntress-traces-a-google-doc-malware-split PlainSec it 2026-09-15T08:22:16Z Un Google Doc fidato diventa il bivio per due malware https://plainsec.com/stories/3d96d628-ff27-425d-8bba-eb498e866c49/ai-agents-are-becoming-an-identity-blind-spot PlainSec en 2026-09-15T04:21:31Z AI Agents Are Becoming an Identity Blind Spot https://plainsec.com/it/stories/3d96d628-ff27-425d-8bba-eb498e866c49/ai-agents-are-becoming-an-identity-blind-spot PlainSec it 2026-09-15T04:21:31Z Gli agent AI diventano una seconda identità fuori controllo https://plainsec.com/stories/97e161b6-fdb3-4e1b-bf6f-80701e3891a1/claude-helped-midnight-blizzard-rebuild-faster PlainSec en 2026-09-15T16:29:58Z Midnight Blizzard Used Claude to Chase Detection https://plainsec.com/it/stories/97e161b6-fdb3-4e1b-bf6f-80701e3891a1/claude-helped-midnight-blizzard-rebuild-faster PlainSec it 2026-09-15T16:29:58Z Claude è entrato nel loop di evasione di Midnight Blizzard https://plainsec.com/stories/a7a5f53a-ddc4-4f5e-a504-93f32912b660/rubygems-abuse-became-a-public-storage-locker PlainSec en 2026-09-15T04:21:31Z RubyGems Campaign Expanded Into Scraping and RCE https://plainsec.com/it/stories/a7a5f53a-ddc4-4f5e-a504-93f32912b660/rubygems-abuse-became-a-public-storage-locker PlainSec it 2026-09-15T04:21:31Z RubyGems usato come piattaforma da agenti OpenAI https://plainsec.com/stories/eb5eb134-fab5-44f5-a90c-9dde2231a472/telus-account-breach-enabled-service-hijacks PlainSec en 2026-09-15T04:21:31Z Telus Account Breach Enabled Service Hijacks https://plainsec.com/it/stories/eb5eb134-fab5-44f5-a90c-9dde2231a472/telus-account-breach-enabled-service-hijacks PlainSec it 2026-09-15T04:21:31Z Le credenziali rubate trasformano gli account Telus in leva di frode https://plainsec.com/stories/a3f7c0d1-0237-41fe-b792-3daeb1a2004b/microsoft-races-to-fix-patch-breakage PlainSec en 2026-09-15T10:31:06Z Microsoft Races to Fix Patch Breakage https://plainsec.com/it/stories/a3f7c0d1-0237-41fe-b792-3daeb1a2004b/microsoft-races-to-fix-patch-breakage PlainSec it 2026-09-15T10:31:06Z Gli update di Microsoft rompono RDS e Hyper-V https://plainsec.com/stories/3a5150a8-5c2a-497f-8323-00b8e4e074c3/hbo-max-reddit-account-fueled-pasteswitch-malware-ads PlainSec en 2026-09-15T12:22:33Z HBO Max Reddit Account Fueled PasteSwitch Malware Ads https://plainsec.com/it/stories/3a5150a8-5c2a-497f-8323-00b8e4e074c3/hbo-max-reddit-account-fueled-pasteswitch-malware-ads PlainSec it 2026-09-15T12:22:33Z Account verificato HBO Max trasformato in canale di malware https://plainsec.com/stories/86aec6f5-87da-49f5-ae6d-944ec0b4acb6/enisa-starts-the-cra-reporting-pipeline PlainSec en 2026-09-15T04:21:31Z ENISA Starts the CRA Reporting Pipeline https://plainsec.com/it/stories/86aec6f5-87da-49f5-ae6d-944ec0b4acb6/enisa-starts-the-cra-reporting-pipeline PlainSec it 2026-09-15T04:21:31Z ENISA centralizza i report CRA in un solo canale https://plainsec.com/stories/d8ef6c4a-ee73-4efd-b7bf-336f4d391411/homebrew-adds-security-checks-inside-the-package-manager PlainSec en 2026-09-15T04:21:31Z Homebrew 7.0.0 Closes a Cask Sandbox Escape https://plainsec.com/it/stories/d8ef6c4a-ee73-4efd-b7bf-336f4d391411/homebrew-adds-security-checks-inside-the-package-manager PlainSec it 2026-09-15T04:21:31Z Solo un salto a 7.0.0 chiude la falla restante https://plainsec.com/stories/526212bc-92ff-4ed2-b8be-02bb1aebc151/nozomi-found-four-flaws-in-siemens-ot-gateway PlainSec en 2026-09-15T12:22:33Z Nozomi Found Four Flaws in Siemens OT Gateway https://plainsec.com/it/stories/526212bc-92ff-4ed2-b8be-02bb1aebc151/nozomi-found-four-flaws-in-siemens-ot-gateway PlainSec it 2026-09-15T12:22:33Z Quattro bug nel gateway Siemens espongono la visibilità OT https://plainsec.com/stories/1ad8f8da-16e7-4eac-adc0-b0417bafaed1/3bb-intrusion-targeted-subscriber-identity-stores PlainSec en 2026-09-15T06:35:15Z 3BB Intrusion Targeted Subscriber Identity Stores https://plainsec.com/it/stories/1ad8f8da-16e7-4eac-adc0-b0417bafaed1/3bb-intrusion-targeted-subscriber-identity-stores PlainSec it 2026-09-15T06:35:15Z 3BB espone l’identità dei clienti dell’ISP https://plainsec.com/stories/8e239098-86cd-4e28-a927-5ed2c42170a5/ddrop-weakens-confidential-computings-freshness-promise PlainSec en 2026-09-15T04:21:31Z DDRop Weakens Confidential Computing's Freshness Promise https://plainsec.com/it/stories/8e239098-86cd-4e28-a927-5ed2c42170a5/ddrop-weakens-confidential-computings-freshness-promise PlainSec it 2026-09-15T04:21:31Z La fiducia nel confidential computing si rompe sulla freschezza https://plainsec.com/stories/6ff5fc1b-3824-4644-80b8-95b9c303508b/check-point-vpn-bugs-expose-gateway-code-execution PlainSec en 2026-09-14T04:21:24Z Check Point VPN Flaws Move Into Exploitation Window https://plainsec.com/it/stories/6ff5fc1b-3824-4644-80b8-95b9c303508b/check-point-vpn-bugs-expose-gateway-code-execution PlainSec it 2026-09-14T04:21:24Z Exploitation imminente sulle VPN Check Point, legacy ancora esposti https://plainsec.com/stories/5a0d716e-976a-4114-95f9-dc883d3672f8/eu-cra-makes-build-records-part-of-compliance PlainSec en 2026-09-14T04:21:24Z EU CRA Starts the 24-Hour Reporting Clock https://plainsec.com/it/stories/5a0d716e-976a-4114-95f9-dc883d3672f8/eu-cra-makes-build-records-part-of-compliance PlainSec it 2026-09-14T04:21:24Z La CRA mette un orologio legale sulle vulnerabilità https://plainsec.com/stories/ea98c161-d11f-4697-bc86-7718d9f6159c/agent-turns-stolen-llm-keys-into-resale-infrastructure PlainSec en 2026-09-14T04:21:24Z Agent Turns Stolen LLM Keys Into Resale Infrastructure https://plainsec.com/it/stories/ea98c161-d11f-4697-bc86-7718d9f6159c/agent-turns-stolen-llm-keys-into-resale-infrastructure PlainSec it 2026-09-14T04:21:24Z Un agente trasforma accessi LLM rubati in infrastruttura rivendibile https://plainsec.com/stories/b074955b-c64d-43d4-8e24-753caa7a38d6/claude-helped-debug-a-guided-rocket-loop PlainSec en 2026-09-14T04:21:24Z Claude Helped Debug a Guided Rocket Loop https://plainsec.com/it/stories/b074955b-c64d-43d4-8e24-753caa7a38d6/claude-helped-debug-a-guided-rocket-loop PlainSec it 2026-09-14T04:21:24Z Claude usato per prototipare armi nello Yemen https://plainsec.com/stories/9548aea2-b39a-4eb7-8cb5-d9d3a3185aea/brevo-breach-turned-brand-trust-into-phishing PlainSec en 2026-09-14T04:21:24Z Brevo SSO Flaw Pushed Phishing Across Customers https://plainsec.com/it/stories/9548aea2-b39a-4eb7-8cb5-d9d3a3185aea/brevo-breach-turned-brand-trust-into-phishing PlainSec it 2026-09-14T04:21:24Z Un account Brevo ha raggiunto liste di più clienti https://plainsec.com/stories/1188e1f5-55ca-461e-86ba-af9f4f83c353/microsoft-says-passkey-lures-now-keep-cloud-access-alive PlainSec en 2026-09-14T04:21:24Z Microsoft Links Passkey Lures to O365 Intrusions https://plainsec.com/it/stories/1188e1f5-55ca-461e-86ba-af9f4f83c353/microsoft-says-passkey-lures-now-keep-cloud-access-alive PlainSec it 2026-09-14T04:21:24Z L’esca del passkey lascia accesso persistente a Microsoft 365 https://plainsec.com/stories/04b25ae2-5b4f-4ae7-851c-cdca54487c79/microsoft-flags-million-message-bec-fraud-run PlainSec en 2026-09-14T04:21:24Z Microsoft Flags Million-Message BEC Fraud Run https://plainsec.com/it/stories/04b25ae2-5b4f-4ae7-851c-cdca54487c79/microsoft-flags-million-message-bec-fraud-run PlainSec it 2026-09-14T04:21:24Z Un milione di email travestite da approvazione interna https://plainsec.com/stories/37d3dd6b-2e1b-4695-bdaf-2c428638c8ee/cisa-warns-its-own-capacity-may-fail-first PlainSec en 2026-09-14T04:21:24Z CISA Warns Its Own Capacity May Fail First https://plainsec.com/it/stories/37d3dd6b-2e1b-4695-bdaf-2c428638c8ee/cisa-warns-its-own-capacity-may-fail-first PlainSec it 2026-09-14T04:21:24Z CISA teme di non reggere il prossimo incidente nazionale https://plainsec.com/stories/7b238bb7-874f-4fdf-a661-9fea027e9153/rclone-pocs-put-unpatched-s3-services-at-risk PlainSec en 2026-09-14T04:21:24Z Rclone PoCs Put Unpatched S3 Services at Risk https://plainsec.com/it/stories/7b238bb7-874f-4fdf-a661-9fea027e9153/rclone-pocs-put-unpatched-s3-services-at-risk PlainSec it 2026-09-14T04:21:24Z Rclone diventa una porta d’ingresso con cinque PoC pubblici https://plainsec.com/stories/3ccb865d-87ef-42c4-8de7-1e1292a8d093/surfshark-exposes-internal-servers-to-the-internet PlainSec en 2026-09-14T04:21:24Z Surfshark Exposes Internal Servers to the Internet https://plainsec.com/it/stories/3ccb865d-87ef-42c4-8de7-1e1292a8d093/surfshark-exposes-internal-servers-to-the-internet PlainSec it 2026-09-14T04:21:24Z Un test server esposto allarga il perimetro di Surfshark https://plainsec.com/stories/4e722aad-4e9c-4333-90f8-d5780cb59e1e/teams-voice-phishing-reaches-domain-controllers PlainSec en 2026-09-14T08:56:53Z PREY-0058 Moves From Vishing To Extortion https://plainsec.com/it/stories/4e722aad-4e9c-4333-90f8-d5780cb59e1e/teams-voice-phishing-reaches-domain-controllers PlainSec it 2026-09-14T08:56:53Z Da vishing a estorsione: i token rubati aprono SharePoint https://plainsec.com/stories/7c4f3e5d-dfb6-43ff-9d5c-c4d5944f2dbf/apple-s-patch-count-hides-three-high-risk-paths PlainSec en 2026-09-14T08:56:53Z Android September Bulletin Spans AOSP and Qualcomm https://plainsec.com/it/stories/7c4f3e5d-dfb6-43ff-9d5c-c4d5944f2dbf/apple-s-patch-count-hides-three-high-risk-paths PlainSec it 2026-09-14T08:56:53Z Android settembre 2026, patch frammentata tra AOSP e Qualcomm https://plainsec.com/stories/3c5736ea-b9fd-46e1-951b-7f4296be3141/ai-agents-outgrow-human-centric-iam PlainSec en 2026-09-14T04:21:24Z UAC-0099 Tries to Blind AI Malware Review https://plainsec.com/it/stories/3c5736ea-b9fd-46e1-951b-7f4296be3141/ai-agents-outgrow-human-centric-iam PlainSec it 2026-09-14T04:21:24Z I filtri di sicurezza dell’AI diventano un varco https://plainsec.com/stories/b28ea528-2af6-4607-8f9d-5368abc78173/florida-dmv-breach-followed-a-police-credential PlainSec en 2026-09-14T04:21:24Z Florida DMV Breach Followed a Police Credential https://plainsec.com/it/stories/b28ea528-2af6-4607-8f9d-5368abc78173/florida-dmv-breach-followed-a-police-credential PlainSec it 2026-09-14T04:21:24Z Una credenziale privata apre l’accesso al DMV della Florida https://plainsec.com/stories/1e404335-dd06-4654-952e-8c4df3459312/anthropic-resignation-follows-model-containment-breaks PlainSec en 2026-09-13T18:21:16Z Anthropic Resignation Follows Model Containment Breaks https://plainsec.com/it/stories/1e404335-dd06-4654-952e-8c4df3459312/anthropic-resignation-follows-model-containment-breaks PlainSec it 2026-09-13T18:21:16Z La fuga di un ricercatore accende la frattura sulla sicurezza AI