https://plainsec.com/2026-04-30 2026-04-30 https://plainsec.com/2026-04-29 2026-04-29 https://plainsec.com/2026-04-28 2026-04-28 https://plainsec.com/2026-04-27 2026-04-27 https://plainsec.com/2026-04-26 2026-04-26 https://plainsec.com/2026-04-25 2026-04-25 https://plainsec.com/2026-04-24 2026-04-24 https://plainsec.com/2026-04-23 2026-04-23 https://plainsec.com/2026-04-22 2026-04-22 https://plainsec.com/2026-04-21 2026-04-21 https://plainsec.com/2026-04-20 2026-04-20 https://plainsec.com/2026-04-19 2026-04-19 https://plainsec.com/2026-04-18 2026-04-18 https://plainsec.com/2026-04-17 2026-04-17 https://plainsec.com/2026-04-16 2026-04-16 https://plainsec.com/2026-04-15 2026-04-15 https://plainsec.com/2026-04-14 2026-04-14 https://plainsec.com/2026-04-13 2026-04-13 https://plainsec.com/2026-04-12 2026-04-12 https://plainsec.com/2026-04-11 2026-04-11 https://plainsec.com/2026-04-10 2026-04-10 https://plainsec.com/2026-04-09 2026-04-09 https://plainsec.com/2026-04-08 2026-04-08 https://plainsec.com/2026-04-07 2026-04-07 https://plainsec.com/2026-04-06 2026-04-06 https://plainsec.com/2026-04-05 2026-04-05 https://plainsec.com/2026-04-04 2026-04-04 https://plainsec.com/2026-04-03 2026-04-03 https://plainsec.com/2026-04-02 2026-04-02 https://plainsec.com/2026-04-01 2026-04-01 https://plainsec.com/stories/b266ff9a-4195-473a-9a28-3b87b8b04f40/litellm-sqli-exposes-keys-behind-ai-gateways 2026-04-30 https://plainsec.com/stories/38f1bf55-66e5-4477-b5c4-80e834b8e1a3/github-internal-protocol-flaw-exposes-entire-repos 2026-04-30 https://plainsec.com/stories/d078129e-4621-467b-8fd2-c46cba097664/supply-chain-victims-become-vect-s-ransomware-pool 2026-04-30 https://plainsec.com/stories/dbe5ea79-32b9-4c5e-abf1-39279bd2ec37/trusted-bitwarden-cli-release-turned-secret-harvester 2026-04-30 https://plainsec.com/stories/52b852d6-990f-425a-88ad-c2d143ccded9/openemr-flaws-expose-patient-data-across-healthcare-deployments 2026-04-30 https://plainsec.com/stories/3d8b5930-223c-4943-aeee-880bccd288ab/browser-memory-bugs-put-core-components-at-risk 2026-04-30 https://plainsec.com/stories/2af50c03-6565-4f51-8e45-80dda53702ec/medtronic-breach-exposes-corporate-data-not-products 2026-04-29 https://plainsec.com/stories/467c4370-be36-4aaa-93dc-7fa4dd708c44/sleeper-extensions-turn-open-vsx-into-malware-delivery 2026-04-29 https://plainsec.com/stories/987a7384-c596-4f36-a4a2-f04e2a0359f8/lerobot-deserialization-flaw-can-take-over-robots-and-controllers 2026-04-29 https://plainsec.com/stories/6d92395f-4fe5-40c6-84f4-165c81b88e77/stolen-data-forums-turn-small-breaches-into-bigger-risk 2026-04-29 https://plainsec.com/stories/273cc905-b52d-4e40-89be-a33296cfc739/ransomware-rivals-expose-each-other-s-operations 2026-04-29 https://plainsec.com/stories/4de35a90-0396-4c90-a544-a040166408cb/state-privacy-fines-turn-into-multi-state-enforcement 2026-04-29 https://plainsec.com/stories/8f76b113-8098-4022-8a3c-06b8657e6035/bluetooth-firmware-flaws-put-bikes-and-scooters-at-risk 2026-04-29 https://plainsec.com/stories/de961cdb-9603-4355-83fe-49a97d0dab33/marimo-zero-day-turns-ai-demo-hosting-into-malware-delivery 2026-04-29 https://plainsec.com/stories/b4e74ff4-57a2-4846-b742-fe1a09834151/trusted-data-tool-poisoned-then-its-container-image-too 2026-04-28 https://plainsec.com/stories/9fb65a17-5caa-46e5-9a39-01b40a63c048/cisco-firewall-backdoors-survive-patching 2026-04-28 https://plainsec.com/stories/7bf3a40e-74b5-4f8e-bd2c-af6da96c1b51/itron-breach-leaves-utility-customers-uncertain 2026-04-28 https://plainsec.com/stories/ca3cb465-e297-45e7-9c82-803908fd6677/developer-tooling-compromises-return-across-npm-pypi-and-docker 2026-04-28 https://plainsec.com/stories/2296f794-b64b-4a46-b15e-8436fe496064/vishing-crew-turns-helpdesks-into-credential-farms 2026-04-28 https://plainsec.com/stories/3c1afd10-07c7-41cd-b3eb-ee86fd177cea/ai-agents-turn-web-pages-into-attack-payloads 2026-04-28 https://plainsec.com/stories/bcec0854-63ad-4847-a8f2-ccff1c164822/rpc-architecture-lets-impersonating-processes-reach-system 2026-04-28 https://plainsec.com/stories/7cbcc0e2-877c-4ea9-b8db-0efd04a731c3/spamouflage-fails-to-move-tibetan-diaspora-voters 2026-04-28 https://plainsec.com/stories/ad055ff5-2e44-4776-a0a8-a36ab41bc2a8/adt-breach-exposes-identity-data-not-alarm-systems 2026-04-27 https://plainsec.com/stories/840a8ed4-7244-4825-af84-0d6b1022ae77/teams-trust-turned-into-browser-persistence 2026-04-27 https://plainsec.com/stories/8941a023-9966-4ec4-8807-1a19237cea5b/simulation-sabotage-malware-may-have-preceded-stuxnet 2026-04-27 https://plainsec.com/stories/98967a0b-9ac1-44f4-893d-54fdfe0c9d3a/silentglass-targets-a-neglected-monitor-attack-path 2026-04-27 https://plainsec.com/stories/2ff88da1-f6b0-4a1c-84fa-09c042da9031/marimo-advisory-details-enabled-exploits-within-hours 2026-04-27 https://plainsec.com/stories/6ae1b013-71c1-4225-90bc-cd4da56bbe1f/openssh-parser-bug-turns-ca-trust-into-root-access 2026-04-27 https://plainsec.com/stories/0a54ca68-871e-4eb0-9d04-36caadd643f0/private-browsing-leaks-a-stable-cross-site-identifier 2026-04-27 https://plainsec.com/stories/425dfb67-7201-4238-a6bc-53e37ec995a7/gopherwhisper-turns-collaboration-tools-into-espionage-channels 2026-04-26 https://plainsec.com/stories/7a0745b9-2b27-4524-b82a-ac4098a5d21e/f5-big-ip-apm-flaw-reclassified-as-critical-rce-with-active-exploitation 2026-04-26 https://plainsec.com/stories/4ea59ea4-6e58-49ad-8492-d2f805a8a285/npm-worm-turns-developer-tokens-into-propagation-fuel 2026-04-25 https://plainsec.com/stories/8b16a2f2-e756-4946-9503-1d408bd17fc8/ai-code-and-prompt-injection-expand-the-attack-surface 2026-04-25 https://plainsec.com/stories/4baf5066-215a-4ac1-a2cd-753b13bad450/lmdeploy-ssrf-opens-cloud-metadata-in-hours 2026-04-25 https://plainsec.com/stories/55d13e4e-df6d-4813-bfe7-40ae9535548c/china-nexus-botnets-turn-everyday-devices-into-cover 2026-04-25 https://plainsec.com/stories/410314b9-fb9c-44ee-894d-f0f5cd1aaf2d/frontier-ai-shrinks-exploit-discovery-to-minutes 2026-04-25 https://plainsec.com/stories/f9bab3b9-5a62-40b8-9535-6185eb547570/metasploit-makes-langflow-exploitation-easy-to-verify 2026-04-25 https://plainsec.com/stories/d211df5a-efb2-429b-94d6-f65793d4e696/rdp-phishing-warning-breaks-on-mixed-scale-monitors 2026-04-25 https://plainsec.com/stories/a328f61c-179c-45ef-95e3-9ab28ad6bd5d/scanner-flaws-expose-files-and-privileges-on-windows 2026-04-25 https://plainsec.com/stories/37260cfc-fc0d-4469-a1a6-0b543fec5ba7/app-store-wallet-clones-steal-crypto-recovery-phrases 2026-04-25 https://plainsec.com/stories/e5687417-9754-4b1e-bcd0-af7e3b4f7240/iphone-notification-cache-exposed-deleted-signal-messages 2026-04-24 https://plainsec.com/stories/4c69998b-e956-4191-a0b7-7b8d02052e5c/wordpress-cache-plugin-lets-attackers-upload-files 2026-04-24 https://plainsec.com/stories/e4b30fa1-44c8-41ee-a17e-0c30d359780f/passkeys-become-the-default-login-standard 2026-04-24 https://plainsec.com/stories/f5310c78-d568-4f05-a123-f307919f8f79/ai-agents-can-now-chain-cloud-breaches-alone 2026-04-24 https://plainsec.com/stories/6d95a006-324b-47d7-be0e-2722d26f88f4/rituals-member-data-downloaded-in-breach 2026-04-24 https://plainsec.com/stories/bf2ae987-c15f-4669-804d-462c5a45d34e/ai-speeds-discovery-but-governance-becomes-the-bottleneck 2026-04-24 https://plainsec.com/stories/b138b490-046c-40d7-b352-4ff0a6f1aae0/vercel-breach-exposes-customer-secrets-risk 2026-04-24 https://plainsec.com/stories/7b868c8f-bc14-46ee-b792-5910aefb9ca6/biobank-data-sale-exposes-research-access-weakness 2026-04-23 https://plainsec.com/stories/66d47358-c4ce-41aa-9233-2a5109c149e9/federal-privacy-bill-could-override-stronger-state-protections 2026-04-23 https://plainsec.com/stories/ae91cbc8-5dad-4506-9da4-3d31efc942f6/asp-net-core-token-forgery-leaves-privileged-sessions-behind 2026-04-23 https://plainsec.com/stories/4975dc03-c0d8-46af-ba46-5c306fe9b17e/wiper-attack-removes-recovery-before-destruction-begins 2026-04-23 https://plainsec.com/stories/cdefb9ed-fa19-438a-a232-f9d7c6e18759/ghost-carriers-turn-telecom-trust-into-location-tracking 2026-04-23 https://plainsec.com/stories/c9d83a0d-03b3-4bc3-bcc0-e2b4982c0a56/oracle-communications-takes-the-biggest-hit-in-april-cpu 2026-04-23 https://plainsec.com/stories/72205f1d-e7ed-4140-96a9-08d2a6a50235/discontinued-d-link-routers-become-mirai-entry-point 2026-04-23 https://plainsec.com/stories/2f2aea4c-d4d3-4672-a6b7-56c195917b2d/activemq-brokers-exposed-to-active-exploitation-at-scale 2026-04-22 https://plainsec.com/stories/2372a38b-47a1-43a1-823d-ce2ccfc4ab51/harvester-turns-outlook-into-stealth-linux-command-channel 2026-04-22 https://plainsec.com/stories/d49d41fe-0076-44af-87c0-07c56008724c/french-id-portal-breach-fuels-mass-phishing-risk 2026-04-22 https://plainsec.com/stories/ed200f5b-fcd3-48cc-9047-cd228a09b6e6/trojanized-payment-app-turns-android-phones-into-card-skimmers 2026-04-22 https://plainsec.com/stories/aec518d6-aa98-415d-b4e5-5cee7fab6505/macos-native-tools-create-blind-spots-for-lateral-movement 2026-04-22 https://plainsec.com/stories/51d1b105-6b39-42e2-98b4-66d431dec291/kyber-turns-esxi-and-windows-into-one-blackout 2026-04-22 https://plainsec.com/stories/bfd21ebf-6762-49fc-a3c7-0b6133398399/china-s-cyber-parity-raises-the-cost-of-blind-spots 2026-04-22 https://plainsec.com/stories/f50b16ea-0a07-4103-a1d5-d7c459ba88e4/proxy-farm-platform-centralizes-sim-abuse-across-17-countries 2026-04-22 https://plainsec.com/stories/e740794b-8cbc-4582-b779-9124efe1c385/ai-and-geopolitics-raise-uk-nation-state-cyber-risk 2026-04-22 https://plainsec.com/stories/b6542d04-d465-49c4-9caa-9a931766d095/admin-access-turns-progress-adc-into-command-execution-risk 2026-04-22 https://plainsec.com/stories/85656466-9f24-4d87-b7fb-95cfadcf4c1e/containerized-llm-sandboxes-can-still-yield-host-root 2026-04-22 https://plainsec.com/stories/b80065af-344d-43f5-a690-85c35a410687/ransomware-negotiator-turned-blackcat-insider 2026-04-22 https://plainsec.com/stories/3d950156-f30a-43a0-b0f5-651ef7f73526/single-verifier-let-lazarus-forge-cross-chain-messages 2026-04-21 https://plainsec.com/stories/4b4f077d-46ef-4909-aef1-fbb6359c2e35/ransomware-crew-arms-affiliates-for-cross-platform-datacenter-hits 2026-04-21 https://plainsec.com/stories/291dc933-29c2-4134-b690-557a4bea7181/serial-to-ip-flaws-expose-legacy-ot-at-scale 2026-04-21 https://plainsec.com/stories/536111c5-358b-4acd-92cb-c94cbbd8cba6/cisco-sd-wan-flaw-joins-kev-without-vendor-confirmation 2026-04-21 https://plainsec.com/stories/6f8a7de4-ad29-43d1-ac50-7ec9bdff82a5/sec-penalizes-weak-cyber-governance-after-data-exposure 2026-04-21 https://plainsec.com/stories/cb0defd7-f21e-4bdb-b14f-5022655aa264/meraki-portal-breach-risks-cross-client-camera-exposure 2026-04-21 https://plainsec.com/stories/00090088-e19c-48e9-bb18-8db9fc8d7c16/palantir-ties-ideology-to-surveillance-contracts 2026-04-21 https://plainsec.com/stories/1921c766-df7b-4589-b516-3748f192ab47/google-antigravity-patch-leaves-prompt-injection-risk-exposed 2026-04-21 https://plainsec.com/stories/ab9e6820-74d3-47ed-86cc-32e9c8f93a00/water-plant-sabotage-malware-is-one-bug-away 2026-04-21 https://plainsec.com/stories/fa42bb04-3e36-4232-9532-9be05e10b8f0/malicious-model-files-can-own-sglang-servers 2026-04-21 https://plainsec.com/stories/ff50937a-2de9-49af-a424-7e7aeaeb46d2/end-of-life-tp-link-routers-face-botnet-infection-attempts 2026-04-20 https://plainsec.com/stories/01f03761-3335-4fe5-b6c8-b28fe64bf895/formbook-phishing-adds-redundant-delivery-paths 2026-04-20 https://plainsec.com/stories/dd58b121-c27b-4654-8d03-8e1a639b06c2/bluesky-s-core-features-took-a-day-long-ddos-hit 2026-04-20 https://plainsec.com/stories/156bcc20-8bf5-4366-af8d-52345b4cbcf5/session-spikes-warn-before-network-cve-disclosures 2026-04-20 https://plainsec.com/stories/2292465e-8d25-4079-912f-7f1ae79e9fdc/windows-server-patch-breaks-domain-controllers 2026-04-20 https://plainsec.com/stories/d85953c0-7a27-4ae2-a6d4-e89e1b1623dc/mcphub-auth-bypass-lets-unauthenticated-users-act-privileged 2026-04-20 https://plainsec.com/stories/401b9383-a133-42ac-8a3f-cfeac367640e/activemq-management-endpoints-enable-credentialed-rce 2026-04-18 https://plainsec.com/stories/45faf7e4-3eb5-4bab-ab63-1922e09558f3/defender-s-file-rewrite-turns-patched-pcs-into-system-targets 2026-04-18 https://plainsec.com/stories/28170ff8-ce0b-49aa-97d6-705551a8c92e/ddos-for-hire-networks-lose-their-user-base 2026-04-18 https://plainsec.com/stories/90d3d1c4-dc02-4064-bfc9-812e54b61e98/metasploit-adds-public-rce-modules-for-web-apps 2026-04-18 https://plainsec.com/stories/6b09a841-474f-4a72-a12f-3431f0e98cab/tycoon-takedown-pushes-phishers-toward-device-code-abuse 2026-04-18 https://plainsec.com/stories/18bd644d-0290-4d16-9cee-eb16395198a4/apt28-uses-roundcube-to-reach-official-inboxes 2026-04-18 https://plainsec.com/stories/7538ea3c-786a-4b36-891e-804ff66f298d/trump-backs-clean-702-renewal-reform-window-narrows 2026-04-18 https://plainsec.com/stories/5310f708-49f6-4c91-ba40-333e09f8cd53/llms-now-cut-chrome-exploit-development-to-pocket-change 2026-04-18 https://plainsec.com/stories/ecacb5ae-f88e-45eb-b912-24517cbad972/excel-xss-becomes-silent-data-exfiltration-path 2026-04-18 https://plainsec.com/stories/098412eb-a8c5-4742-9eb7-99b03b69ed16/teams-helpdesk-impersonation-turns-support-into-access 2026-04-18 https://plainsec.com/stories/50af002c-dfee-4715-b7c9-1afbba8f53ad/uac-0247-uses-fake-aid-lures-to-steal-chat-data 2026-04-17 https://plainsec.com/stories/ccaac7d3-b6f9-4fc0-94de-b209988aeefb/nvd-backlog-leaves-most-cves-unenriched 2026-04-17 https://plainsec.com/stories/66327378-fdc6-4baf-b3c0-ac6a4447381d/microsoft-sells-time-for-legacy-exchange-and-skype 2026-04-17 https://plainsec.com/stories/84444d9d-b6ff-45f9-b0bd-8287092cdb72/bluesky-outage-points-to-hosted-infrastructure-risk 2026-04-17 https://plainsec.com/stories/7b1829f9-8ea3-458e-b097-906cf00ffb06/tiny-archives-hide-massive-malware-payloads 2026-04-17 https://plainsec.com/stories/bfd637dd-1e95-4741-88d3-ad2180a5718b/rhysida-leak-leaves-337-000-patients-exposed 2026-04-17 https://plainsec.com/stories/eaefca26-82f3-45c9-ab1e-341816f3bf50/automotive-suppliers-turn-ransomware-into-sector-wide-risk 2026-04-17 https://plainsec.com/stories/5575a2ad-d603-4809-a652-494bfcad9fd3/windows-task-host-flaw-gives-local-users-system 2026-04-16 https://plainsec.com/stories/269730b7-397a-4ad5-9f8c-91f576964aaf/old-excel-rce-returns-to-cisa-s-exploited-list 2026-04-16 https://plainsec.com/stories/09712b4f-0695-408a-851e-a5c68035f5b1/russia-linked-actors-shift-toward-physical-infrastructure-disruption 2026-04-16 https://plainsec.com/stories/763e4d7c-2829-4443-9329-5be8af1d27fd/fortisandbox-bugs-let-attackers-skip-login-and-run-commands 2026-04-16 https://plainsec.com/stories/bd35a907-b260-4719-8acd-c46213ccf470/sharepoint-flaw-lets-attackers-spoof-and-read-data 2026-04-16 https://plainsec.com/stories/0732d1d1-5504-48e4-ab41-116d2d6c301b/cisco-unity-connection-bugs-expose-admin-web-sessions 2026-04-16 https://plainsec.com/stories/98c0b0fe-70e0-4d5c-b543-3f41c40d26f3/salesforce-misconfiguration-exposes-tenant-data-without-account-breach 2026-04-16 https://plainsec.com/stories/1b289aec-e6f7-4dc9-af7e-f9f1ea52e7cc/openai-widens-defender-access-raises-dual-use-stakes 2026-04-16 https://plainsec.com/stories/de13da92-d245-47ef-960d-67475c769655/wordpress-plugin-buyout-turns-into-dormant-backdoor-risk 2026-04-16 https://plainsec.com/stories/a66c093a-9995-44b0-bce3-90d4052aedaa/school-network-attack-exposes-data-beyond-targeted-sites 2026-04-16 https://plainsec.com/stories/3ab3a35b-d8fb-4488-9359-99f96f1f8124/chrome-extensions-turn-oauth-tokens-into-account-access 2026-04-16 https://plainsec.com/stories/6fd3aa31-d47b-4cd4-8e5e-488e6ad350e3/webex-sso-flaw-lets-attackers-impersonate-users 2026-04-16 https://plainsec.com/stories/2e2fc8f7-fd02-4f06-9f31-722133e16d5d/sharepoint-zero-day-lands-in-microsoft-s-huge-april-batch 2026-04-15 https://plainsec.com/stories/b62e5560-de25-4639-a924-f3e0e5d03183/coldfusion-flaws-take-priority-over-adobe-s-broad-patch-load 2026-04-15 https://plainsec.com/stories/5ff8b794-25a8-4cda-9383-fce223eb6c16/trusted-n8n-subdomains-turn-into-phishing-infrastructure 2026-04-15 https://plainsec.com/stories/66107942-8d5c-4302-b7bd-3b61ea856986/sap-abap-sql-injection-exposes-bw-and-bpc-data 2026-04-15 https://plainsec.com/stories/5e4982ef-de7b-428c-a6e1-ca83cee0462d/google-will-demote-sites-that-trap-the-back-button 2026-04-15 https://plainsec.com/stories/c0f473f7-eb0a-44b7-bb6e-5077efbe1730/mirax-malware-turns-infected-phones-into-anonymized-fraud-infrastructure 2026-04-15 https://plainsec.com/stories/f085102e-dcde-4fea-bdb4-0dd8cb007b5d/google-s-notice-promise-may-have-failed-users 2026-04-15 https://plainsec.com/stories/0e40b4ff-2b68-4583-bca4-dabeeda00513/showdoc-servers-become-easy-rce-targets 2026-04-15 https://plainsec.com/stories/6569ce97-2e51-4c70-a1f0-99b2d7ecd6bc/node-kernel-bugs-on-gke-cos-nodes-enable-host-escalation 2026-04-15 https://plainsec.com/stories/ec4e531f-7834-426c-9545-db4ff10c8097/manufacturing-ot-faces-phishing-to-ransomware-pressure 2026-04-15 https://plainsec.com/stories/db82d056-3d53-443b-af1f-4e52c5b0d58d/windows-now-warns-before-rogue-rdp-files-connect 2026-04-15 https://plainsec.com/stories/53ef994b-4d58-4cdd-8773-9b1cad74b879/malicious-pdfs-enable-code-execution-across-windows-and-macos 2026-04-14 https://plainsec.com/stories/ddbd3a0c-90f5-4973-b0c5-75b9bd8f3378/phishing-marketplace-takedown-cuts-supply-but-leaves-stolen-credentials-active 2026-04-14 https://plainsec.com/stories/50f0667b-e22e-4395-ab14-e49587eaed2b/basic-fit-breach-exposes-1-million-members-personal-and-bank-data 2026-04-14 https://plainsec.com/stories/13cc2a05-ad65-472d-b8be-2b89ee6e78eb/apt37-shifts-to-facebook-social-engineering-to-deliver-rokrat-malware 2026-04-14 https://plainsec.com/stories/00b1104a-a844-413c-aec2-2cc9d2e3b189/correlating-signals-exposes-reachable-autonomous-ai-agent-on-windows-server 2026-04-14 https://plainsec.com/stories/3047ea8c-dd61-4f5b-a4cd-4336166e14cb/adobe-reader-zero-day-uses-stealthy-fingerprinting-before-rce 2026-04-14 https://plainsec.com/stories/30fbb7b4-7c53-4d54-a1ee-fbdd96049880/janelarat-s-evolving-multi-stage-attacks-sharpen-focus-on-latin-american-banks 2026-04-14 https://plainsec.com/stories/04bbad31-4407-4236-a4b4-a4680a708f77/openai-rotates-macos-certificates-after-axios-supply-chain-compromise 2026-04-13 https://plainsec.com/stories/85152977-e068-4049-a7bd-c317a6401ca0/signed-cpuid-installers-delivered-malware-via-dll-sideloading 2026-04-13 https://plainsec.com/stories/328690ef-f55d-47b2-845e-14fb2940e90c/encystphp-webshell-scans-signal-persistent-freepbx-compromise-attempts 2026-04-13 https://plainsec.com/stories/8813afae-01cb-4de4-ab9e-01039b2bdea0/ransomware-groups-scale-double-extortion-using-ai-driven-reconnaissance 2026-04-13 https://plainsec.com/stories/94406cc1-2fa3-4e02-81f2-2a9b226081f8/phishing-kit-takedown-disrupts-mfa-bypassing-access-resale-market 2026-04-13 https://plainsec.com/stories/01744276-9fa7-45f8-9d00-50bf5e07cdef/wolfssl-flaw-lets-forged-certificates-bypass-multiple-signature-checks 2026-04-13 https://plainsec.com/stories/a9e07f7d-1c32-4ffc-9838-cd8a6706e193/obsidian-plugin-ecosystem-enables-stealthy-cross-platform-rat-attacks 2026-04-13 https://plainsec.com/stories/f7431973-28f7-4fee-a004-61268a631d85/default-password-flaw-enables-immediate-remote-takeover-of-juniper-collectors 2026-04-11 https://plainsec.com/stories/ac6150e9-c0ca-46b8-8681-70288617e11a/docker-authz-bypass-reopens-host-compromise-risk 2026-04-11 https://plainsec.com/stories/a70e42ee-b01c-431e-9379-ea0781d20260/backdoored-smart-slider-update-delivered-via-official-channel 2026-04-11 https://plainsec.com/stories/0d91e8df-d081-427c-9988-3120161b5dd1/session-replay-enables-silent-payroll-theft-in-microsoft-365-phishing 2026-04-11 https://plainsec.com/stories/0b0c1473-5605-4193-87f6-642ef333ed76/macos-clickfix-bypass-uses-script-editor-to-evade-terminal-warnings 2026-04-11 https://plainsec.com/stories/730d7383-34df-4a2a-90b8-1531a354cef0/orthanc-flaws-risk-medical-image-exposure-and-remote-code-execution 2026-04-11 https://plainsec.com/stories/42ee9777-bbef-4234-a663-bc27aa9a4ac6/critical-chrome-webml-bugs-signal-new-sandbox-escape-risk 2026-04-11 https://plainsec.com/stories/9460901e-06d4-49cc-a470-1ce2bb583e81/uk-forces-russian-submarine-retreat-over-undersea-cable-surveillance 2026-04-10 https://plainsec.com/stories/c80d3ebd-8a88-4651-a5bc-fb71dd6b5a08/github-releases-used-to-spread-clipboard-stealing-trojan 2026-04-10 https://plainsec.com/stories/94fb0fe8-8544-4142-9bb6-1f12ced1cc9f/hack-for-hire-campaign-combines-phishing-and-android-spyware-in-mena 2026-04-10 https://plainsec.com/stories/db0eb03e-6584-4ddf-8128-6ab05156f8f2/ai-powered-vulnerability-discovery-centralized-among-tech-giants 2026-04-09 https://plainsec.com/stories/e1101e93-e931-40a4-a569-07898ade6852/corporate-wallet-breach-drains-3-6m-from-bitcoin-depot 2026-04-09 https://plainsec.com/stories/22bc0c38-85f5-46d7-ac42-2c020c3d41ad/apt28-expands-supply-chain-attacks-using-fresh-office-zero-days 2026-04-09 https://plainsec.com/stories/caa1972d-d462-459d-84de-65899e391fb7/iran-linked-hackers-pause-us-attacks-but-keep-targeting-israel 2026-04-09 https://plainsec.com/stories/617c9dad-39dd-4ed9-8724-dcd26ade7311/flatpak-sandbox-escape-exposes-linux-hosts-to-full-compromise 2026-04-09 https://plainsec.com/stories/e21a3e28-2bae-42d2-bd0c-dcdd4c7ae9bf/chained-rce-in-activemq-classic-bypasses-authentication 2026-04-09 https://plainsec.com/stories/e0bb2ad5-6591-460f-8d53-f73f6733d1bd/attackers-exploit-both-decade-old-and-new-flaws-in-federal-systems 2026-04-08 https://plainsec.com/stories/b8ebdc30-0ac2-42b3-99f7-f7b643dbd7fb/apt28-uses-consumer-routers-to-steal-credentials-at-scale 2026-04-08 https://plainsec.com/stories/b5b5224f-d566-412b-b3a1-16434b603297/gpu-rowhammer-breaks-iommu-isolation-enables-full-system-takeover 2026-04-08 https://plainsec.com/stories/03871539-30cb-4ff7-8249-2a19f1cafbd1/grafana-ai-features-enable-silent-enterprise-data-exfiltration 2026-04-08 https://plainsec.com/stories/59ed4745-f3c9-4342-ba4c-962f2be6fabd/russian-actor-turns-consumer-routers-into-persistent-surveillance-nodes 2026-04-08 https://plainsec.com/stories/6d29a80f-4225-4dc0-b3d9-dfbc7a8a207c/phishing-via-github-and-jira-notifications-bypasses-email-defenses 2026-04-08 https://plainsec.com/stories/614e61e5-34dc-44d1-8fdb-7b270f86646e/help-desk-compromise-enables-persistent-access-across-okta-tenants 2026-04-08 https://plainsec.com/stories/500ef2ad-0c4f-4a12-8542-59c616c98321/strongbox-vulnerability-requires-multi-vendor-coordination-for-fixes 2026-04-08 https://plainsec.com/stories/dc7d9b5e-e465-40b3-951d-b1feb6bebed0/local-access-to-hmi-can-expose-plant-sql-databases 2026-04-08 https://plainsec.com/stories/965f390d-7a48-49d8-a21f-2c9851e3fe4f/employee-identity-data-at-risk-after-wynn-resorts-shinyhunters-breach 2026-04-08 https://plainsec.com/stories/482f1265-64bc-438a-8b9f-dd5072b6aed4/storm-1175s-rapid-exploits-extend-beyond-initial-web-breach 2026-04-07 https://plainsec.com/stories/dd5587ce-15a2-4709-9394-2ae2cabb9afb/google-cloud-issues-multiple-linux-kernel-privilege-escalation-fixes-for-gke-nodes 2026-04-07 https://plainsec.com/stories/b7675cfd-bac0-4adb-8a84-22952d53e5b3/kubernetes-attacks-spike-as-react2shell-enables-cloud-identity-theft 2026-04-07 https://plainsec.com/stories/263225e7-1c90-4be9-bcd5-dd21cced0e89/apt28-uses-compromised-routers-to-steal-credentials-via-dns-hijacking 2026-04-07 https://plainsec.com/stories/a7831937-b7d9-435d-a626-5e162dee41cf/shadow-ai-in-healthcare-creates-blind-spots-that-hinder-incident-response 2026-04-07 https://plainsec.com/stories/5b94b441-8c3e-4b68-b1b5-b5a3e53048af/dprk-hackers-use-github-and-korean-docs-for-persistent-espionage 2026-04-07 https://plainsec.com/stories/a9fc6210-33d4-43fc-b84f-c930f9d49e10/single-vulnerable-driver-disables-300-edrs-undermining-endpoint-diversity 2026-04-07 https://plainsec.com/stories/f7f4a273-6b48-4b26-b0d0-8b4bc8dab9c1/ransomware-extortion-targets-german-political-party-for-coercion 2026-04-07 https://plainsec.com/stories/60bf6185-68a7-4df1-9d44-aa72084ce477/spyware-maker-conviction-sets-u-s-criminal-precedent-after-a-decade 2026-04-07 https://plainsec.com/stories/e6770f63-4596-4010-996d-a6fbfa4a4034/cultural-interview-checks-expose-north-korean-impostors-in-real-time 2026-04-07 https://plainsec.com/stories/e0cce841-9a5b-4256-a8f6-87e4d94eb43b/developer-machines-became-high-yield-credential-farms-in-litellm-supply-chain-attack 2026-04-06 https://plainsec.com/stories/63ff22bc-c79e-4088-93c0-b0458638dd7b/automated-support-scripts-break-as-microsoft-removes-sara-utility 2026-04-06 https://plainsec.com/stories/4765e339-738f-4f35-9350-8da233cd8696/cloud-account-takeover-after-trivy-supply-chain-compromise 2026-04-06 https://plainsec.com/stories/b77fc90e-ed4c-457e-a31a-ee428251037e/public-id-of-unkn-links-revil-and-gandcrab-to-35m-damage 2026-04-06 https://plainsec.com/stories/69a4d40e-67b0-4c6c-b52e-03a514efc639/ai-driven-actor-ran-six-waves-of-github-pull-request-target-abuse 2026-04-06 https://plainsec.com/stories/5eee243a-bcf2-4657-bc7f-e09ec6c76479/next-js-react2shell-exploit-automates-ai-and-cloud-credential-theft 2026-04-05 https://plainsec.com/stories/db85f10d-7a81-479f-a18d-7bbe983ea2a7/unc1069-expands-node-js-supply-chain-attacks-beyond-axios 2026-04-05 https://plainsec.com/stories/340cfbf6-18c7-4fba-aba3-bc265e0cbd09/open-source-ai-runtime-breach-disrupts-vendor-trust-and-operations 2026-04-05 https://plainsec.com/stories/a2c73e75-18fa-478c-8692-a75e2d143caf/chinese-hackers-exploit-trueconf-auto-update-to-deploy-espionage-tools 2026-04-04 https://plainsec.com/stories/97b078e7-c5d5-4c87-a754-2e4d5807aea5/active-dawn-zero-day-in-chrome-enables-sandbox-escape 2026-04-04 https://plainsec.com/stories/f6ee2411-fb38-4390-91c5-212563f90abc/backdoored-axios-releases-drop-cross-platform-rat-via-trojanized-dependency 2026-04-04 https://plainsec.com/stories/6afb3b97-274d-4da9-a5a1-b2646c15f06c/unauthenticated-rce-chain-exposes-customer-data-in-sharefile-storage-zones 2026-04-04 https://plainsec.com/stories/94a32544-dae9-440c-8d7b-b28e54132e46/chinese-cyber-espionage-group-ta416-resurfaces-with-targeted-campaigns-against-european-governments 2026-04-04 https://plainsec.com/stories/0546d04c-fa6c-49e2-bb99-1efe5974baad/fcc-targets-voice-providers-for-routing-scam-calls-via-dormant-accounts 2026-04-04 https://plainsec.com/stories/bb71bb7c-365c-427e-9912-444e9d8b6f94/qilin-ransomware-steals-internal-and-employee-data-from-german-party 2026-04-04 https://plainsec.com/stories/69ca7d9f-0259-418f-8edc-a7fce95d6ceb/trueconf-update-flaw-lets-attackers-reach-isolated-government-networks 2026-04-03 https://plainsec.com/stories/ccbe71cc-be2b-4e31-b447-6120a3276d9a/multiple-linux-kernel-flaws-elevate-privileges-on-gcp-container-nodes 2026-04-03 https://plainsec.com/stories/32015dd4-2375-4413-94c7-ee2c4257fc30/cisco-security-advisory-cisco-integrated-management-controller-authentication-bypass-vulnerability 2026-04-03 https://plainsec.com/stories/d10f8e4c-da56-43c8-9d9d-b828ab51f054/java-deserialization-rce-in-hitachi-energy-ellipse-reporting-component 2026-04-03 https://plainsec.com/stories/f357b599-f22b-4b47-8ef7-59612b29bd5c/cisco-security-advisory-multiple-command-injection-and-remote-code-execution-vulnerabilities-in-cisco-imc 2026-04-03 https://plainsec.com/stories/860d0a59-2628-4475-a034-c1b3b923b810/attackers-exploit-vite-dev-server-feature-to-steal-files 2026-04-03 https://plainsec.com/stories/55601172-4128-472d-a958-a7df81f63091/hims-hers-support-ticket-breach-exposes-sensitive-customer-data 2026-04-03 https://plainsec.com/stories/2364372c-4262-4979-9ca7-9e77cd560222/teampcp-compromises-litellm-pypi-package-steals-credentials 2026-04-03 https://plainsec.com/stories/bbfbf987-7669-49a3-85b6-88cd0188c906/state-backed-actors-exploit-personal-messaging-apps-to-reach-officials 2026-04-03 https://plainsec.com/stories/8672e852-1502-45bf-a518-f9e7887b539c/siemens-sicam-8-firmware-flaws-cause-denial-of-service-via-resource-exhaustion 2026-04-03 https://plainsec.com/stories/5db474a0-c967-4545-9e85-2e19a97d85a9/akira-executes-full-ransomware-attacks-in-under-one-hour 2026-04-03 https://plainsec.com/stories/49876726-c6c7-4efa-9d69-0ac7b2c8218c/operator-reuses-packers-and-loaders-letting-defenders-correlate-campaigns 2026-04-03 https://plainsec.com/stories/44c31f1f-0be5-4d3b-acd0-29f0bc8c57b0/drift-protocol-admin-key-compromise-enables-130m-285m-crypto-theft 2026-04-02 https://plainsec.com/stories/f5e5449a-6b9c-49f9-acad-115450554987/active-cyber-intrusion-forces-hasbro-to-run-weeks-long-interim-operations 2026-04-02 https://plainsec.com/stories/e962eeb7-6d3c-4be8-b5ab-84a92997efcc/mercor-ai-confirms-data-theft-via-litellm-supply-chain-breach 2026-04-02 https://plainsec.com/stories/8e195c38-38fc-4c94-9238-3f8fa7d0809d/tiered-crystalx-rat-bundles-spyware-stealer-prankware 2026-04-02 https://plainsec.com/stories/a1c0fd2b-fdb1-4c99-ab15-f5cc1759e992/extradition-of-crypto-scam-leader-signals-crackdown-on-cambodia-based-syndicate 2026-04-02 https://plainsec.com/stories/fd7e6780-8fcc-4d44-aa83-ec923c682745/federal-citizen-lists-to-restrict-mail-ballots-data-mismatch-risk 2026-04-02 https://plainsec.com/stories/69af96a0-9731-4759-9c00-58232bc43d07/kernel-level-bpfdoor-variants-evade-detection-in-telecom-infrastructure 2026-04-02 https://plainsec.com/stories/ac9db512-37ae-4451-a52a-01c8c30402c2/cert-ua-impersonation-campaign-spread-agewheeze-malware-to-1-million-emails 2026-04-02 https://plainsec.com/stories/460abede-4c91-473c-b006-a9308227f5d8/qilin-s-msimg32-dll-disables-300-edr-drivers-to-hide-ransomware-activity 2026-04-02 https://plainsec.com/stories/21d33380-299e-4f0b-a7d5-1e34d999f341/automated-next-js-exploit-powers-centralized-credential-harvesting-service 2026-04-02 https://plainsec.com/stories/f98d68d6-5b72-424d-88f8-3f5ea8781133/qilin-ransomware-automation-shifts-detection-focus-to-pre-ransomware-phase 2026-04-02 https://plainsec.com/stories/1d3adee3-1e28-4cae-bd20-869241e66fb3/stolen-supply-chain-secrets-fuel-cloud-intrusions-and-extortion 2026-04-02 https://plainsec.com/stories/8c2dfee1-3acf-442d-b6f5-f45521134689/cisco-nexus-dashboard-insights-vulnerability-allows-arbitrary-file-write 2026-04-02 https://plainsec.com/stories/66ab8deb-4e0a-40c5-a757-a364ebdbfdb8/cisco-addresses-privilege-escalation-vulnerability-in-smart-software-manager-on-prem 2026-04-02 https://plainsec.com/stories/49d227fe-8520-485b-9ad2-e70acc1a2891/licensed-venom-stealer-maas-enables-continuous-credential-harvesting 2026-04-02 https://plainsec.com/stories/458a16fc-2da0-48cb-99b1-190b971a6eb2/persistent-msi-backdoors-installed-via-whatsapp-vbs-and-trusted-cloud 2026-04-02 https://plainsec.com/stories/9ce17088-83ea-4f93-8e42-86ad9accdb62/cisco-security-advisory-cisco-nexus-dashboard-configuration-backup-rest-api-unauthorized-access-vulnerability 2026-04-02 https://plainsec.com/stories/70c52060-9d73-4d03-b814-9c17d86a6c59/nissan-says-stolen-data-came-from-third-party-vendor-after-hacking-group-claims-breach 2026-04-02 https://plainsec.com/stories/ce5788d7-ae30-4638-bf95-84c610c6c0e0/citrix-netscaler-saml-idp-flaw-leaks-admin-sessions-in-active-exploitation 2026-04-02 https://plainsec.com/stories/ea67e152-7202-40ef-82b1-ff46b6cc0149/federal-agencies-ordered-to-patch-citrix-netscaler-flaw 2026-04-01 https://plainsec.com/stories/b5abb642-18df-441b-bb69-9eec3c5218d1/cisa-adds-f5-big-ip-apm-rce-flaw-to-kev 2026-04-01 https://plainsec.com/stories/6573e7f9-56fb-4faf-9c26-89005a9d6730/multiple-high-severity-cloud-vulnerabilities-impact-container-nodes 2026-04-01 https://plainsec.com/stories/d6d242d7-9bc8-4c05-ace0-d03392fa26e2/unauthenticated-mavlink-messages-can-spawn-shells-on-px4 2026-04-01 https://plainsec.com/stories/2854f530-53e7-4f1d-bb46-c0abeb5c7af7/default-vertex-ai-agent-permissions-expose-cloud-data 2026-04-01 https://plainsec.com/stories/b277f18e-f4ff-4094-aaea-adebe41d26ea/crewai-code-interpreter-misconfigurations-enable-sandbox-escape 2026-04-01 https://plainsec.com/stories/06e8a67a-af5a-4486-981d-bcc333c4c5de/teampcp-overwrites-91-tags-in-checkmarx-github-action 2026-04-01 https://plainsec.com/stories/f9867617-8688-4b6e-aecc-5e27de17cf81/us-israel-and-iran-exchange-cyberattacks-after-operation-epic-fury-threats-to-critical-infrastructure-rise 2026-04-01 https://plainsec.com/stories/fced4a04-c9df-4998-aa5f-211d9d810ee9/gigabyte-control-center-allows-unauthenticated-arbitrary-file-write 2026-04-01 https://plainsec.com/stories/8722a4d7-f279-4b36-bbd3-fb41b0565b1f/trojaned-litellm-package-executed-malicious-python-autonomous-edr-stopped-it 2026-04-01