https://plainsec.com/stories/8ead558c-4b1f-432e-a623-557751892c6f/mikrotik-routeros-exploitation-hits-internet-exposed-ssh PlainSec en 2026-09-08T04:21:23Z MikroTik SSH Flaws Are Being Used for Router Takeover https://plainsec.com/it/stories/8ead558c-4b1f-432e-a623-557751892c6f/mikrotik-routeros-exploitation-hits-internet-exposed-ssh PlainSec it 2026-09-08T04:21:23Z I router esposti diventano un punto di presa remota https://plainsec.com/stories/7ac7029b-c7ee-4a7c-9ec1-e07849b81d42/shipmonk-breach-broke-trezors-deletion-assumption PlainSec en 2026-09-08T04:21:23Z ShipMonk Breach Broke Trezor's Deletion Assumption https://plainsec.com/it/stories/7ac7029b-c7ee-4a7c-9ec1-e07849b81d42/shipmonk-breach-broke-trezors-deletion-assumption PlainSec it 2026-09-08T04:21:23Z La cancellazione promessa non ha fermato la fuga dei dati https://plainsec.com/stories/cdeee7d4-1df9-47e3-9b4b-0fb6f22744d0/bigbear-2-0-industrializes-microsoft-365-mfa-bypass PlainSec en 2026-09-08T10:29:17Z BigBear 2.0 Industrializes Microsoft 365 MFA Bypass https://plainsec.com/it/stories/cdeee7d4-1df9-47e3-9b4b-0fb6f22744d0/bigbear-2-0-industrializes-microsoft-365-mfa-bypass PlainSec it 2026-09-08T10:29:17Z MFA aggirata come servizio su Microsoft 365 https://plainsec.com/stories/9556790f-146a-44c5-b789-cbe002487f19/screenconnect-clients-are-spreading-scripts-across-hosts PlainSec en 2026-09-08T04:21:23Z ScreenConnect Clients Are Spreading Scripts Across Hosts https://plainsec.com/it/stories/9556790f-146a-44c5-b789-cbe002487f19/screenconnect-clients-are-spreading-scripts-across-hosts PlainSec it 2026-09-08T04:21:23Z ScreenConnect diventa un canale di propagazione tra host https://plainsec.com/stories/bcfd3324-9ce2-4752-b7f8-9bac2b646770/mathspace-breach-put-school-records-through-metabase PlainSec en 2026-09-08T10:29:17Z Mathspace Breach Put School Records Through Metabase https://plainsec.com/it/stories/bcfd3324-9ce2-4752-b7f8-9bac2b646770/mathspace-breach-put-school-records-through-metabase PlainSec it 2026-09-08T10:29:17Z Il report interno diventa la porta su oltre un milione di record https://plainsec.com/stories/4339677e-2c6d-42d0-a88e-79f53987617b/n-able-hotfix-churn-leaves-n-central-exposed PlainSec en 2026-09-08T04:21:23Z N-central Hotfix 4 Supersedes Yesterday’s Patch https://plainsec.com/it/stories/4339677e-2c6d-42d0-a88e-79f53987617b/n-able-hotfix-churn-leaves-n-central-exposed PlainSec it 2026-09-08T04:21:23Z Hotfix 4 riapre N-central a chi aveva appena patchato https://plainsec.com/stories/c813e1cb-4f2b-4d4d-85e4-5ef9436ed128/berlin-confirms-rhysida-data-theft-after-leak-claim PlainSec en 2026-09-08T06:22:41Z Rhysida Moves Berlin Theft Into Auction Mode https://plainsec.com/it/stories/c813e1cb-4f2b-4d4d-85e4-5ef9436ed128/berlin-confirms-rhysida-data-theft-after-leak-claim PlainSec it 2026-09-08T06:22:41Z Berlin rifiuta il riscatto, Rhysida mette i dati all’asta https://plainsec.com/stories/ce5e87a4-cc2b-4d1b-b3d2-8036b2113d33/telerik-ui-poc-exposes-a-narrow-rce-path PlainSec en 2026-09-08T04:21:23Z Telerik UI PoC Exposes a Narrow RCE Path https://plainsec.com/it/stories/ce5e87a4-cc2b-4d1b-b3d2-8036b2113d33/telerik-ui-poc-exposes-a-narrow-rce-path PlainSec it 2026-09-08T04:21:23Z La hardening raccomandata apre la strada all’RCE https://plainsec.com/stories/0c011a48-058c-42b1-8de1-a809f9c76e20/sansec-says-magento-zero-day-is-backdooring-stores PlainSec en 2026-09-08T04:21:23Z Sansec Says Magento Zero-Day Is Backdooring Stores https://plainsec.com/it/stories/0c011a48-058c-42b1-8de1-a809f9c76e20/sansec-says-magento-zero-day-is-backdooring-stores PlainSec it 2026-09-08T04:21:23Z Magento e Adobe Commerce sotto takeover prima della patch https://plainsec.com/stories/a3ded05e-e6b2-498e-b6a1-c89814491167/forescout-shows-ai-can-port-plc-exploits PlainSec en 2026-09-08T08:56:12Z Forescout Shows AI Can Port PLC Exploits https://plainsec.com/it/stories/a3ded05e-e6b2-498e-b6a1-c89814491167/forescout-shows-ai-can-port-plc-exploits PlainSec it 2026-09-08T08:56:12Z AI porta un exploit PLC su un modello WAGO vicino https://plainsec.com/stories/701d770e-67fd-4e64-a3fb-f497796cdd19/cisco-patches-nine-flaws-across-core-and-voice-gear PlainSec en 2026-09-08T08:56:12Z Cisco IOS XR Advisory Spans Router Core Functions https://plainsec.com/it/stories/701d770e-67fd-4e64-a3fb-f497796cdd19/cisco-patches-nine-flaws-across-core-and-voice-gear PlainSec it 2026-09-08T08:56:12Z IOS XR espone più famiglie di router Cisco https://plainsec.com/stories/82cf87dd-d070-4b59-ab64-3eb524140cf3/openai-agents-turned-a-wiki-into-a-control-channel PlainSec en 2026-09-08T04:21:23Z OpenAI Agents Kept Editing DseWiki for Months https://plainsec.com/it/stories/82cf87dd-d070-4b59-ab64-3eb524140cf3/openai-agents-turned-a-wiki-into-a-control-channel PlainSec it 2026-09-08T04:21:23Z Un wiki tedesco resta sotto assedio per mesi https://plainsec.com/stories/01ae6682-2bdf-4776-b4e4-294362bc5bf4/frontier-models-cross-into-autonomous-exploit-work PlainSec en 2026-09-08T04:21:23Z Frontier Models Cross Into Autonomous Exploit Work https://plainsec.com/it/stories/01ae6682-2bdf-4776-b4e4-294362bc5bf4/frontier-models-cross-into-autonomous-exploit-work PlainSec it 2026-09-08T04:21:23Z I modelli frontier iniziano a saper bucare da soli https://plainsec.com/stories/73e23aff-ac41-4dc4-93c6-abe6dddc4c0e/peep-turns-chrome-and-edge-into-stealthy-backdoors PlainSec en 2026-09-08T06:22:41Z PEEP Turns Chrome and Edge Into Stealthy Backdoors https://plainsec.com/it/stories/73e23aff-ac41-4dc4-93c6-abe6dddc4c0e/peep-turns-chrome-and-edge-into-stealthy-backdoors PlainSec it 2026-09-08T06:22:41Z Chrome e Edge diventano un backdoor persistente https://plainsec.com/stories/4e722aad-4e9c-4333-90f8-d5780cb59e1e/teams-voice-phishing-reaches-domain-controllers PlainSec en 2026-09-08T04:21:23Z PREY-0058 Moves From Vishing To Extortion https://plainsec.com/it/stories/4e722aad-4e9c-4333-90f8-d5780cb59e1e/teams-voice-phishing-reaches-domain-controllers PlainSec it 2026-09-08T04:21:23Z Da vishing a estorsione: i token rubati aprono SharePoint https://plainsec.com/stories/79bb2964-715e-46a6-82b0-613ef0e8adad/fbi-probes-license-scan-bazaar-tied-to-identity-firm PlainSec en 2026-09-08T04:21:23Z FBI Probes License-Scan Bazaar Tied to Identity Firm https://plainsec.com/it/stories/79bb2964-715e-46a6-82b0-613ef0e8adad/fbi-probes-license-scan-bazaar-tied-to-identity-firm PlainSec it 2026-09-08T04:21:23Z Un furto upstream può aggirare il KYC di molti servizi https://plainsec.com/stories/534c5592-e280-4639-a344-0e578a794888/jsceal-replays-google-sessions-after-malvertising PlainSec en 2026-09-08T04:21:23Z JSCeal Replays Google Sessions After Malvertising https://plainsec.com/it/stories/534c5592-e280-4639-a344-0e578a794888/jsceal-replays-google-sessions-after-malvertising PlainSec it 2026-09-08T04:21:23Z I cookie rubati bypassano l’accesso a Google https://plainsec.com/stories/047aec94-4486-41db-8ce2-0e26c128c5fc/dropbox-warns-of-lenovo-verification-abuse PlainSec en 2026-09-08T04:21:23Z Dropbox Warns of Lenovo Verification Abuse https://plainsec.com/it/stories/047aec94-4486-41db-8ce2-0e26c128c5fc/dropbox-warns-of-lenovo-verification-abuse PlainSec it 2026-09-08T04:21:23Z Una falla in Lenovo apre Dropbox a ID finti https://plainsec.com/stories/3522da27-ea68-431e-9bec-eb2bff3ea5d6/crowdstrike-falcon-cleanup-path-enables-privilege-escalation PlainSec en 2026-09-08T04:21:23Z FalconFlank PoC Forces CrowdStrike's Macro Tradeoff https://plainsec.com/it/stories/3522da27-ea68-431e-9bec-eb2bff3ea5d6/crowdstrike-falcon-cleanup-path-enables-privilege-escalation PlainSec it 2026-09-08T04:21:23Z Il PoC pubblico allarga la finestra macro di CrowdStrike https://plainsec.com/stories/d9e2748a-05e7-4455-932e-4a96f0b268f3/hpe-aruba-leaves-end-of-support-fleets-unpatched PlainSec en 2026-09-08T06:22:41Z ArubaOS-CX Advisory Puts Switch Management at Risk https://plainsec.com/it/stories/d9e2748a-05e7-4455-932e-4a96f0b268f3/hpe-aruba-leaves-end-of-support-fleets-unpatched PlainSec it 2026-09-08T06:22:41Z 26 falle nella management plane di ArubaOS-CX https://plainsec.com/stories/86296721-0e18-4031-9296-dc5755315711/lazarus-splinters-into-six-specialized-clusters PlainSec en 2026-09-08T06:22:41Z Lazarus Splinters Into Six Specialized Clusters https://plainsec.com/it/stories/86296721-0e18-4031-9296-dc5755315711/lazarus-splinters-into-six-specialized-clusters PlainSec it 2026-09-08T06:22:41Z Lazarus non è più un blocco unico https://plainsec.com/stories/ebe0036d-705b-4474-85b6-9f4ec307fc26/google-chrome-fix-sets-a-new-build-floor PlainSec en 2026-09-07T04:21:14Z Google’s Sixth Chrome Zero-Day Hits V8 Again https://plainsec.com/it/stories/ebe0036d-705b-4474-85b6-9f4ec307fc26/google-chrome-fix-sets-a-new-build-floor PlainSec it 2026-09-07T04:21:14Z Chrome colpito dal sesto zero-day sfruttato del 2026 https://plainsec.com/stories/4f85924f-a5ee-47c5-b0f2-80c0e21884bb/teamcity-breach-reached-jetbrains-cadence-backup PlainSec en 2026-09-07T04:21:14Z TeamCity Breach Reached JetBrains Cadence Backup https://plainsec.com/it/stories/4f85924f-a5ee-47c5-b0f2-80c0e21884bb/teamcity-breach-reached-jetbrains-cadence-backup PlainSec it 2026-09-07T04:21:14Z Il backup di Cadence allarga il danno del TeamCity zero-day https://plainsec.com/stories/9cf652c7-4e5d-4f5a-8e29-e9bb52ddea10/elementor-pro-exploitation-turns-plugins-into-shells PlainSec en 2026-09-07T04:21:14Z Wordfence Sees Mass WordPress Shell Drops https://plainsec.com/it/stories/9cf652c7-4e5d-4f5a-8e29-e9bb52ddea10/elementor-pro-exploitation-turns-plugins-into-shells PlainSec it 2026-09-07T04:21:14Z Oltre 440.000 tentativi trasformano due plugin WordPress in shell https://plainsec.com/stories/57e613fb-b03a-44dc-8406-ac67644ad13a/microsoft-sees-unicode-smuggling-in-phishing-campaign PlainSec en 2026-09-07T04:21:14Z Microsoft Sees Unicode Smuggling in Phishing Campaign https://plainsec.com/it/stories/57e613fb-b03a-44dc-8406-ac67644ad13a/microsoft-sees-unicode-smuggling-in-phishing-campaign PlainSec it 2026-09-07T04:21:14Z Il phishing invisibile aggira i filtri con Unicode nascosto https://plainsec.com/stories/3f088de3-87e5-4843-810a-906aa413c8e7/cisco-ios-xr-advisory-lands-as-a-patch-puzzle PlainSec en 2026-09-07T04:21:14Z NetScaler Probes Rise After PoC Disclosure https://plainsec.com/it/stories/3f088de3-87e5-4843-810a-906aa413c8e7/cisco-ios-xr-advisory-lands-as-a-patch-puzzle PlainSec it 2026-09-07T04:21:14Z Il trust gate di NetScaler è già sotto probing https://plainsec.com/stories/e0b1f9c1-7f34-4d17-8d60-620472895834/cisa-and-g7-push-pqc-into-procurement PlainSec en 2026-09-07T06:49:17Z CISA and G7 Push PQC Into Procurement https://plainsec.com/it/stories/e0b1f9c1-7f34-4d17-8d60-620472895834/cisa-and-g7-push-pqc-into-procurement PlainSec it 2026-09-07T06:49:17Z PQC entra nei criteri di acquisto pubblici https://plainsec.com/stories/b33361d9-f4c8-47a2-ba3a-a36322cab91b/broadcom-fixes-vmware-guest-to-host-escape-flaws PlainSec en 2026-09-07T04:21:14Z VMware Patches Guest-to-Host Bugs as vCenter Fires Burn https://plainsec.com/it/stories/b33361d9-f4c8-47a2-ba3a-a36322cab91b/broadcom-fixes-vmware-guest-to-host-escape-flaws PlainSec it 2026-09-07T04:21:14Z La patch di Broadcom non basta più da sola https://plainsec.com/stories/07c89aef-4c5a-47ab-aede-6c60f192b96e/openai-funds-ai-defense-for-strapped-utilities PlainSec en 2026-09-07T18:53:19Z OpenAI Backs Daybreak for Short-Window Defenders https://plainsec.com/it/stories/07c89aef-4c5a-47ab-aede-6c60f192b96e/openai-funds-ai-defense-for-strapped-utilities PlainSec it 2026-09-07T18:53:19Z OpenAI allarga il credito Daybreak ai difensori fragili https://plainsec.com/stories/713968a4-c29a-4826-a0fa-8656c8894885/screenconnect-rogue-clients-turn-support-into-spread PlainSec en 2026-09-07T22:46:18Z ScreenConnect Rogue Clients Turn Support Into Spread https://plainsec.com/it/stories/713968a4-c29a-4826-a0fa-8656c8894885/screenconnect-rogue-clients-turn-support-into-spread PlainSec it 2026-09-07T22:46:18Z ScreenConnect trasforma i supporti remoti in un canale di propagazione https://plainsec.com/stories/04093d39-c76d-45e6-a491-5ccf1015fda5/spyware-findings-push-serbia-s-eu-bid-into-doubt PlainSec en 2026-09-07T04:21:14Z Spyware Findings Push Serbia’s EU Bid Into Doubt https://plainsec.com/it/stories/04093d39-c76d-45e6-a491-5ccf1015fda5/spyware-findings-push-serbia-s-eu-bid-into-doubt PlainSec it 2026-09-07T04:21:14Z Lo spyware diventa un test per l’ingresso della Serbia nell’Ue https://plainsec.com/stories/1a33a16d-0f70-459f-b46d-572e51544655/plex-patch-requires-both-sides-to-move PlainSec en 2026-09-07T04:21:14Z Plex Patch Leaves Mixed Estates Exposed https://plainsec.com/it/stories/1a33a16d-0f70-459f-b46d-572e51544655/plex-patch-requires-both-sides-to-move PlainSec it 2026-09-07T04:21:14Z Plex costringe a patchare server e desktop insieme https://plainsec.com/stories/65cb5707-9b0b-4149-89f1-1831b922275a/state-department-ties-irgc-cyber-command-to-wider-campaign PlainSec en 2026-09-07T06:49:17Z State Department Ties IRGC Cyber Command to Wider Campaign https://plainsec.com/it/stories/65cb5707-9b0b-4149-89f1-1831b922275a/state-department-ties-irgc-cyber-command-to-wider-campaign PlainSec it 2026-09-07T06:49:17Z Washington mette un prezzo alla regia della campagna IRGC https://plainsec.com/stories/7040facd-36b6-4115-bf2d-0dff428d56b5/russia-tells-data-centers-to-prepare-for-drones PlainSec en 2026-09-07T04:21:14Z Russia Ties Data Center Security to State Control https://plainsec.com/it/stories/7040facd-36b6-4115-bf2d-0dff428d56b5/russia-tells-data-centers-to-prepare-for-drones PlainSec it 2026-09-07T04:21:14Z Mosca lega i droni al controllo dei data center https://plainsec.com/stories/7dd03ec5-b23a-41f4-9f3c-b25b4af62c86/postgresql-replication-privilege-opens-server-control PlainSec en 2026-09-07T04:21:14Z PostgreSQL Replication Privilege Opens Server Control https://plainsec.com/it/stories/7dd03ec5-b23a-41f4-9f3c-b25b4af62c86/postgresql-replication-privilege-opens-server-control PlainSec it 2026-09-07T04:21:14Z REPLICATION diventa esecuzione di codice in PostgreSQL https://plainsec.com/stories/cd3b4983-e939-4e34-affd-c3522ca4d8e5/revstealer-leaves-miners-and-defense-tampering-behind PlainSec en 2026-09-06T10:21:08Z REVSTEALER Leaves Miners and Defense Tampering Behind https://plainsec.com/it/stories/cd3b4983-e939-4e34-affd-c3522ca4d8e5/revstealer-leaves-miners-and-defense-tampering-behind PlainSec it 2026-09-06T10:21:08Z REVSTEALER lascia dietro di sé il vero problema