Past briefings
Browse PlainSec cybersecurity briefings by date.
November 2026
- Friday, November 13, 2026: GPUStack's localhost spoofing skips authentication on exposed managers · 20 stories
- Thursday, November 12, 2026: ScreenConnect malware spreads through technicians’ support sessions · 20 stories
- Wednesday, November 11, 2026: Apple patches pairing flaws, but Brotli remains elsewhere · 20 stories
- Tuesday, November 10, 2026: N-able N-central returns online with remote control paused · 20 stories
- Monday, November 9, 2026: SAP NetWeaver flaw fuels webshell planting and searches · 19 stories
- Sunday, November 8, 2026: CISA widens the SSHole story to four exploited flaws · 3 stories
- Saturday, November 7, 2026: GPT-6 Cyber’s exploit gains test its guardrails · 13 stories
- Friday, November 6, 2026: CISA widens the SSHole story to four exploited flaws · 19 stories
- Thursday, November 5, 2026: APT29's Plerdy tracker compromise reached hundreds of sites · 20 stories
- Wednesday, November 4, 2026: WordPress upgrade window opens a path to server code · 19 stories
- Tuesday, November 3, 2026: Node-RED attacks add persistent command backdoors · 18 stories
- Monday, November 2, 2026: Ivanti's second patch closes the chain, not prior exposure · 20 stories
- Sunday, November 1, 2026: DebugBear snippet let attackers trade through Polymarket sessions · 6 stories
October 2026
- Saturday, October 31, 2026: PAN-OS PHP2Shell chain stole Active Directory credentials · 16 stories
- Friday, October 30, 2026: Cisco VPN flaw reboots firewalls as Volt Typhoon targets control planes · 19 stories
- Thursday, October 29, 2026: DHS leak maps undercover work and application access · 18 stories
- Wednesday, October 28, 2026: Apple extends exploited CoreGraphics fix to iOS 18 · 18 stories
- Tuesday, October 27, 2026: UNM hospitals reopen as Health Sciences classes stay canceled · 15 stories
- Monday, October 26, 2026: Downloads files can persist in Codex and expose Claude tokens · 17 stories
- Sunday, October 25, 2026: Collabora backdoors target credential stores as VCO flaws recur · 7 stories
- Saturday, October 24, 2026: AI speeds attackers and shifts API costs to victims · 16 stories
- Friday, October 23, 2026: Ruby regex exploit fails against Alpine's GitLab, packages stay clean · 19 stories
- Thursday, October 22, 2026: PHP2Shell moves from probes to confirmed shell execution · 18 stories
- Wednesday, October 21, 2026: Cisco's eMudhra review leaves product exposure unresolved · 16 stories
- Tuesday, October 20, 2026: Siemens signed launcher hides a trojanized installer · 15 stories
- Monday, October 19, 2026: Rank Math PRO backdoor outlives the plugin · 18 stories
- Sunday, October 18, 2026: PwnEscape breaks Linux VM isolation at the host layer · 1 story
- Saturday, October 17, 2026: CISA puts BeyondTrust zero-day on the clock · 11 stories
- Friday, October 16, 2026: Cisco Secure Email Gateway flaw can spread in clusters · 19 stories
- Thursday, October 15, 2026: UAT-6275 mixes lures with public exploits · 16 stories
- Wednesday, October 14, 2026: Danfoss controllers turned refrigeration into a remote switch · 17 stories
- Tuesday, October 13, 2026: Bricksforge upload flaw turns form files into PHP · 16 stories
- Monday, October 12, 2026: Qilin and INC carry Palo Alto VPN access into hypervisors · 15 stories
- Sunday, October 11, 2026: FBIjobs probe names a ransomware-response executive · 2 stories
- Saturday, October 10, 2026: AhsayCBS flaws are being used as footholds · 18 stories
- Friday, October 9, 2026: Fortinet FortiMail path traversal is actively exploited · 19 stories
- Thursday, October 8, 2026: PoeLLM turns exposed AI servers into scouts · 20 stories
- Wednesday, October 7, 2026: HFS cookie flaw opens a remote code execution path · 20 stories
- Tuesday, October 6, 2026: ClingSTUN switched from discovery to active exploitation · 19 stories
- Monday, October 5, 2026: Rejetto HFS cookie forgery opens remote code execution · 18 stories
- Sunday, October 4, 2026: Warlock disables defenses before spreading ransomware through domains · 3 stories
- Saturday, October 3, 2026: OpenAI agents probed real systems, left thin logs · 14 stories
- Friday, October 2, 2026: Armatura One’s embedded broker widens the blast radius · 20 stories
- Thursday, October 1, 2026: Cisco SD-WAN zero-day gives admins network control · 19 stories
September 2026
- Wednesday, September 30, 2026: FortiMail zero-day is being exploited now · 17 stories
- Tuesday, September 29, 2026: Artifactory login bypass hits supply-chain trust · 17 stories
- Monday, September 28, 2026: JadePuffer used Azure identities to wipe recovery paths · 15 stories
- Sunday, September 27, 2026: AI agents leak screenshots, prompt data escapes again · 5 stories
- Saturday, September 26, 2026: GitLab flaw hits KEV under active exploitation · 15 stories
- Friday, September 25, 2026: Roundcube SQL injection hits before login · 18 stories
- Thursday, September 24, 2026: CISA flags TeamCity as a ransomware entry point · 18 stories
- Wednesday, September 23, 2026: Dutch arrest splits ShinyHunters leadership story · 17 stories
- Tuesday, September 22, 2026: GitLab flaw hits KEV under active exploitation · 19 stories
- Monday, September 21, 2026: Zyxel switch exploit kept the door open · 20 stories
- Sunday, September 20, 2026: Orkes Conductor bug turns workflows into shell access · 5 stories
- Saturday, September 19, 2026: Redis TLS bug is already being exploited · 17 stories
- Friday, September 18, 2026: NightEagle reuses credentials and GitHub tooling · 17 stories
- Thursday, September 17, 2026: JCE flaw is turning Joomla sites into webshell hosts · 16 stories
- Wednesday, September 16, 2026: WSO2 JWT bypass is being used in attacks · 17 stories
- Tuesday, September 15, 2026: Vite exploitation is now harvesting cloud secrets · 17 stories
- Monday, September 14, 2026: Red Heron turned Gitea access into control-plane breach · 15 stories
- Sunday, September 13, 2026: Check Point VPN flaws move into exploitation window · 4 stories
- Saturday, September 12, 2026: UNC3569 used Sogou links for user-context access · 13 stories
- Friday, September 11, 2026: Check Point VPN flaws move into exploitation window · 14 stories
- Thursday, September 10, 2026: BlueMoon spreads beyond Violet Typhoon · 16 stories
- Wednesday, September 9, 2026: F5 BIG-IP APM intrusions hide in PHP memory · 16 stories
- Tuesday, September 8, 2026: Microsoft's 974-fix update includes two exploited Windows flaws · 16 stories
- Monday, September 7, 2026: N-central Hotfix 4 supersedes yesterday’s patch · 18 stories
- Sunday, September 6, 2026: TeamCity breach reached JetBrains Cadence backup · 6 stories
- Saturday, September 5, 2026: UTA0565 broadens Chrome zero-day delivery · 16 stories
- Friday, September 4, 2026: Microsoft sees Unicode smuggling in phishing campaign · 17 stories
- Thursday, September 3, 2026: Citrix NetScaler Gateway flaw hits KEV list · 18 stories
- Wednesday, September 2, 2026: Virtualizor update hijack puts VPS hosts at risk · 17 stories
- Tuesday, September 1, 2026: Malicious Composer themes turned sites into iPhone spyware · 18 stories