https://plainsec.com/stories/94cb3aa2-29f4-4028-b90e-9508d83796d7/owa-mailbox-access-outlives-password-resets PlainSec en 2026-07-30T10:25:18Z OWA Mailbox Access Outlives Password Resets https://plainsec.com/stories/25440bee-70fa-43cf-a446-915a0e07a9f5/one-malicious-page-can-reach-android-root PlainSec en 2026-07-30T10:25:18Z One Malicious Page Can Reach Android Root https://plainsec.com/stories/0caf70d6-32dd-4bce-ba79-7be80eb2a7dd/fcc-puts-new-robot-and-inverter-imports-at-risk PlainSec en 2026-07-30T10:25:18Z FCC Puts New Robot and Inverter Imports at Risk https://plainsec.com/stories/2eefbb18-6066-4e37-9193-a9e6775774bb/patch-windows-get-their-own-runtime-guard PlainSec en 2026-07-30T10:25:18Z Patch Windows Get Their Own Runtime Guard https://plainsec.com/stories/66113343-331a-4720-b836-b24c50dc33c1/imported-npm-betas-can-hand-over-node-hosts PlainSec en 2026-07-30T10:25:18Z Imported npm Betas Can Hand Over Node Hosts https://plainsec.com/stories/36e4565e-793b-4b06-8e9c-44f4bf9e3151/vmxnet3-escape-expands-vmware-patch-blast-radius PlainSec en 2026-07-30T10:25:18Z VMXNET3 Escape Expands VMware Patch Blast Radius https://plainsec.com/stories/254bafbe-8935-49b0-974f-bf5e988bb870/linux-botnet-turns-process-kills-into-reboots PlainSec en 2026-07-30T10:25:18Z Linux Botnet Turns Process Kills Into Reboots https://plainsec.com/stories/c0ae8bb9-d4d4-47c1-af85-10235d683103/ai-agents-broke-out-into-real-services PlainSec en 2026-07-30T10:25:18Z AI Agents Broke Out Into Real Services https://plainsec.com/stories/100b1345-5cc7-49cc-83e9-54e884bd7b4d/npm-trust-chain-tied-to-dprk-campaign PlainSec en 2026-07-30T10:25:18Z npm Trust Chain Tied to DPRK Campaign https://plainsec.com/stories/5343420b-1402-4b79-8fcc-eddfd150d548/gitea-writers-can-reach-rce-on-default-installs PlainSec en 2026-07-30T10:25:18Z Gitea Writers Can Reach RCE on Default Installs https://plainsec.com/stories/e385a396-2da1-46f1-ad22-fd1d2bbc69b1/ruflo-s-default-bridge-leaves-ai-memory-open PlainSec en 2026-07-30T10:25:18Z Ruflo’s Default Bridge Leaves AI Memory Open https://plainsec.com/stories/d0bb0dba-bd0c-43bb-b9f6-28c7e9c3c0e6/cellular-links-may-be-the-water-systems-weak-point PlainSec en 2026-07-30T10:25:18Z Cellular Links May Be the Water Systems Weak Point https://plainsec.com/stories/afefbcf7-f43b-46d0-ace5-0148078c295d/breach-costs-hit-record-as-trust-becomes-the-expense PlainSec en 2026-07-30T10:25:18Z Breach Costs Hit Record as Trust Becomes the Expense https://plainsec.com/stories/9594d2ad-5226-4051-8b5a-0e1ad47936be/public-android-rat-builder-expands-china-credential-theft PlainSec en 2026-07-30T10:25:18Z Public Android RAT Builder Expands China Credential Theft https://plainsec.com/stories/d6fdf285-17ac-40c6-81b9-2fc230b088c8/partner-vpn-access-opens-multi-os-ransomware-blast-radius PlainSec en 2026-07-30T10:25:18Z Partner VPN Access Opens Multi-OS Ransomware Blast Radius https://plainsec.com/stories/2f0a3d34-928b-43a0-8bf4-444d251cacfe/ai-agents-can-break-out-without-prompt-help PlainSec en 2026-07-30T10:25:18Z AI Agents Can Break Out Without Prompt Help https://plainsec.com/stories/702e3d90-0c2f-4422-b33d-0aa9cc5e31e9/infected-hosts-become-covert-operator-relays PlainSec en 2026-07-30T02:31:31Z Infected Hosts Become Covert Operator Relays https://plainsec.com/stories/21eb343a-50a2-4d97-bc9d-4700cfecf151/public-exploit-turns-vbulletin-into-a-server-foothold PlainSec en 2026-07-30T02:31:31Z Public Exploit Turns vBulletin Into a Server Foothold https://plainsec.com/stories/1a29e2d0-bae1-4f89-8dad-c9cdf263afee/spring-boot-fat-jars-stay-exposed-after-fastjson-bypass PlainSec en 2026-07-30T02:31:31Z Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass https://plainsec.com/stories/bcf6cc60-52ca-4825-8c1b-c02f4f42a42e/teamcity-s-agent-channel-becomes-the-entry-point PlainSec en 2026-07-30T02:31:31Z TeamCity’s Agent Channel Becomes the Entry Point https://plainsec.com/stories/c9a0bb58-06dc-40d1-b911-a0791189dbb3/bmcs-stay-crackable-before-login PlainSec en 2026-07-30T02:31:31Z BMCs Stay Crackable Before Login https://plainsec.com/stories/3cf962a3-93f8-45d1-be49-ecdd3e0cbb28/critical-services-need-a-disconnected-survival-mode PlainSec en 2026-07-30T02:31:31Z Critical Services Need a Disconnected Survival Mode https://plainsec.com/stories/6cbbb1f9-6522-4182-a2ae-55c2721d3c68/ai-agent-became-the-intruders-hands-on-operator PlainSec en 2026-07-29T02:20:50Z AI Agent Became the Intruder's Hands-On Operator https://plainsec.com/stories/32cc2a7e-ab45-4c4c-949a-ae53af85d687/billing-vendor-breach-spreads-to-seven-providers PlainSec en 2026-07-29T02:20:50Z Billing Vendor Breach Spreads to Seven Providers https://plainsec.com/stories/57ca723f-e6d1-4019-8ef2-2c97d99495bc/kernel-version-alone-misses-this-local-root-exposure PlainSec en 2026-07-29T02:20:50Z Kernel Version Alone Misses This Local-Root Exposure https://plainsec.com/stories/5976dbff-58c8-4abf-a25e-282a52970a11/windchill-patch-window-became-cl0ps-entry-point PlainSec en 2026-07-29T02:20:50Z Windchill Patch Window Became Cl0p's Entry Point https://plainsec.com/stories/40756b8b-7c05-486b-9e21-a53a504c45e6/ad-cs-trust-check-hands-users-domain-controller-power PlainSec en 2026-07-29T02:20:50Z AD CS Trust Check Hands Users Domain Controller Power https://plainsec.com/stories/3dcefb92-c96a-4274-b036-bcec26da3657/ai-sandbox-escape-became-a-real-supply-chain-breach PlainSec en 2026-07-29T02:20:50Z AI Sandbox Escape Became a Real Supply-Chain Breach https://plainsec.com/stories/aab3dc80-382e-4c61-8afd-ff8217a0a410/blockchain-relays-make-botnet-takedowns-harder PlainSec en 2026-07-29T02:20:50Z Blockchain Relays Make Botnet Takedowns Harder https://plainsec.com/stories/ee7d1c7a-1fc6-4817-854b-c2fc0a451682/dependabot-slows-the-poisoned-release-window PlainSec en 2026-07-29T02:20:50Z Dependabot Slows the Poisoned-Release Window https://plainsec.com/stories/f897bc70-c8a4-474b-9c65-162aedb8e596/crype-service-turns-stealth-into-a-commodity PlainSec en 2026-07-29T02:20:50Z Crype service turns stealth into a commodity https://plainsec.com/stories/ab82e01c-2593-4929-9030-7f5d301b7c7d/origin-breach-puts-millions-at-fraud-risk PlainSec en 2026-07-29T02:20:50Z Origin Breach Puts Millions at Fraud Risk