https://plainsec.com/2026-07-25 2026-07-25 https://plainsec.com/2026-07-24 2026-07-24 https://plainsec.com/2026-07-23 2026-07-23 https://plainsec.com/2026-07-22 2026-07-22 https://plainsec.com/2026-07-21 2026-07-21 https://plainsec.com/2026-07-20 2026-07-20 https://plainsec.com/2026-07-19 2026-07-19 https://plainsec.com/2026-07-18 2026-07-18 https://plainsec.com/2026-07-17 2026-07-17 https://plainsec.com/2026-07-16 2026-07-16 https://plainsec.com/2026-07-15 2026-07-15 https://plainsec.com/2026-07-14 2026-07-14 https://plainsec.com/2026-07-13 2026-07-13 https://plainsec.com/2026-07-12 2026-07-12 https://plainsec.com/2026-07-11 2026-07-11 https://plainsec.com/2026-07-10 2026-07-10 https://plainsec.com/2026-07-09 2026-07-09 https://plainsec.com/2026-07-08 2026-07-08 https://plainsec.com/2026-07-07 2026-07-07 https://plainsec.com/2026-07-06 2026-07-06 https://plainsec.com/2026-07-05 2026-07-05 https://plainsec.com/2026-07-04 2026-07-04 https://plainsec.com/2026-07-03 2026-07-03 https://plainsec.com/2026-07-02 2026-07-02 https://plainsec.com/2026-07-01 2026-07-01 https://plainsec.com/stories/5d78e132-054e-4a41-b7b5-22576805f449/password-reuse-turns-retail-logins-into-fraud-targets 2026-07-25 https://plainsec.com/stories/05b09d59-b3ed-4fe9-8b9c-e2b4f4ff4a38/edge-appliances-become-ransomware-s-preferred-front-door 2026-07-25 https://plainsec.com/stories/3599290e-c5f5-4438-9342-fb711a969287/hotel-wi-fi-turns-into-a-corporate-credential-trap 2026-07-25 https://plainsec.com/stories/9fe177c0-b00a-4a68-9b85-296a778e6153/redis-restore-becomes-the-code-execution-gate 2026-07-25 https://plainsec.com/stories/a4e5fe8f-2c2a-47c2-a154-2f44237494ab/corepack-search-trap-steals-dev-credentials 2026-07-25 https://plainsec.com/stories/c47f3a2d-9e6a-449e-9a3e-d4e015ba6e20/nodebb-auth-checks-fail-on-alternate-paths 2026-07-25 https://plainsec.com/stories/ba66fbeb-2a4a-42c9-8515-241461e55c82/supplier-nodes-now-drive-ransomware-outages 2026-07-25 https://plainsec.com/stories/1eed3389-8bb8-4d65-bd93-701c495d5dd5/azure-automation-defaults-cross-tenant-identity-trust 2026-07-25 https://plainsec.com/stories/922aad23-de81-44ad-b95b-c9c2ba54a0d3/browser-traffic-becomes-the-command-channel 2026-07-24 https://plainsec.com/stories/42d3811f-bc5a-45aa-ab76-4a478cb4b534/github-actions-turned-into-cpanel-attack-infrastructure 2026-07-24 https://plainsec.com/stories/20b68659-dca5-41ee-a37a-4f89d5f39340/bing-s-image-tier-became-server-side-code-execution 2026-07-24 https://plainsec.com/stories/cb528f21-fad7-4e9d-b389-298339ab4029/ai-agents-become-a-new-identity-layer 2026-07-24 https://plainsec.com/stories/e56b7d9a-6c5b-4e85-a2d7-4084dc577096/fake-updates-hide-espionage-inside-normal-trust 2026-07-24 https://plainsec.com/stories/44c084ae-e7ad-44b5-8db6-71116aea6540/dolphin-x-ranks-the-best-infected-machines-first 2026-07-24 https://plainsec.com/stories/e1e31350-19ce-458d-92ab-7ab5564433f9/federal-cyber-reporting-rules-are-still-duplicating-each-other 2026-07-24 https://plainsec.com/stories/30efbd9f-bb7e-46b7-92e5-2c58a1c791e3/langflow-flaw-puts-connected-systems-at-risk 2026-07-23 https://plainsec.com/stories/7c4f3e5d-dfb6-43ff-9d5c-c4d5944f2dbf/apple-fixes-wide-iphone-and-ipad-bug-set 2026-07-23 https://plainsec.com/stories/8645672e-b289-4b17-8b47-8df14787615a/diplomat-personnel-data-creates-long-tail-targeting-risk 2026-07-23 https://plainsec.com/stories/25230f2b-018c-4398-92b8-9d9cf1c8dc11/browser-extension-breaks-whatsapp-web-isolation 2026-07-23 https://plainsec.com/stories/1d49bb02-f951-457e-9b91-c85fef394097/ubuntu-hardening-change-opens-default-desktop-to-root 2026-07-23 https://plainsec.com/stories/03d1f978-0f5b-416a-b039-b950a2367508/ai-toolchains-become-a-hidden-credential-path 2026-07-23 https://plainsec.com/stories/01ab70ad-7e17-43fe-a5be-b43d37f7166a/official-claude-domain-became-the-lure 2026-07-23 https://plainsec.com/stories/9e481673-b60d-4975-8008-b689b41abf02/geoserver-becomes-a-botnet-launch-point 2026-07-23 https://plainsec.com/stories/9dfb290d-d4a4-459f-b045-6198b0ce8e0b/ransomware-extortion-now-targets-recovery-itself 2026-07-23 https://plainsec.com/stories/b1152c2b-3fd6-40b1-9d1d-b74c9ce0d8e8/supplier-exchange-breach-reaches-stadlers-operations 2026-07-23 https://plainsec.com/stories/2ac70707-6cf4-4c4a-b8c6-a3719c6d5dd5/langflow-intrusion-now-targets-the-model-itself 2026-07-22 https://plainsec.com/stories/5f050449-5812-4224-9126-bd2da8048b16/oracle-erp-flaw-reaches-hr-data 2026-07-22 https://plainsec.com/stories/ab84e54d-fcc8-4ef6-a977-27ab0474dab9/globalprotect-auth-bypass-now-opens-the-inside 2026-07-22 https://plainsec.com/stories/04096aea-02ed-45b7-8d57-2ff51b3d219a/developer-ides-became-the-supply-chain-entry-point 2026-07-22 https://plainsec.com/stories/29b5a475-8737-40bc-839a-0d0020ca402f/kratos-takedown-may-expose-the-wider-phishing-network 2026-07-22 https://plainsec.com/stories/4cf984a2-c31e-472d-8acc-9647fb1e4f55/vendor-breach-exposes-hospital-relationship-data 2026-07-22 https://plainsec.com/stories/3350d550-bc73-481e-9107-7b0eaaf4c344/microsoft-365-calendars-become-a-durable-c2-store 2026-07-22 https://plainsec.com/stories/9ad0f163-fde0-46e7-a1f4-2a6ed63df34d/xfs-bug-lets-local-users-rewrite-root-files 2026-07-22 https://plainsec.com/stories/900eafaa-8703-4af6-8e6f-13ed025357a0/ai-models-cross-the-line-into-intrusion 2026-07-22 https://plainsec.com/stories/7893b22a-cbb0-46b7-b011-d10d1f473cc8/lagging-servicenow-instances-stay-exposed-after-patch-rollout 2026-07-22 https://plainsec.com/stories/498f416b-dce3-4320-8370-ecbc6f5dc5f1/hidden-pr-text-can-steer-review-agents 2026-07-21 https://plainsec.com/stories/4fae439d-fa58-482c-9683-9ba45a15f7af/sharepoint-patch-leaves-trusted-access-behind 2026-07-21 https://plainsec.com/stories/c41ff6a1-2e8b-4d66-9a91-781c9f3e8bdd/ai-labeled-phishing-pipeline-is-already-in-production 2026-07-21 https://plainsec.com/stories/574cf628-131a-4da1-a2c6-47d8e1285f0e/overdue-patch-follows-ai-found-sentry-command-injection 2026-07-21 https://plainsec.com/stories/f1178af9-4184-4670-a841-a66ada4e9dc7/ai-assistants-now-walk-into-github-lures 2026-07-21 https://plainsec.com/stories/c3a1f109-cc7f-4673-99a9-690df9a989da/exposed-cameras-become-state-isr-tools 2026-07-21 https://plainsec.com/stories/eed1992c-2181-4f83-856e-358983223f0c/windows-update-fixes-dell-shutdown-regressions 2026-07-21 https://plainsec.com/stories/53beb8bb-5e06-47c6-b101-a80027f1e3d5/forged-jwts-can-impersonate-opcenter-x-admins 2026-07-21 https://plainsec.com/stories/43b13eef-c2f2-4992-bdf7-e20c211bcd48/smartplug-update-closes-inherited-wireless-flaws 2026-07-21 https://plainsec.com/stories/be656738-3674-4a23-80ba-d7ff1fe5f455/wordpress-pocs-leave-artifacts-as-windmill-is-hit 2026-07-20 https://plainsec.com/stories/02a30c9a-bca0-4cd5-94e6-ede80735d363/openssl-fix-misses-the-usual-scanner-signals 2026-07-20 https://plainsec.com/stories/d7503c26-0861-4c68-8331-5a977c85ecc8/phishing-delivery-is-getting-qa-and-ai 2026-07-20 https://plainsec.com/stories/a9e5d7ff-7ae2-44d0-a3ee-2acdd8b3b19c/persistent-memory-turns-gemini-cli-into-an-operator 2026-07-20 https://plainsec.com/stories/7244af73-0faa-4574-8469-71884d9cf997/vipnet-updates-now-carry-the-intruder-too 2026-07-20 https://plainsec.com/stories/5de3bd6e-b64f-456e-aad8-4fa7a591ad25/7-zip-fix-leaves-embedded-decoders-behind 2026-07-19 https://plainsec.com/stories/a1147b39-1d58-4821-8e7f-6c3365e72c72/run-box-lures-steal-cloud-sessions-too 2026-07-19 https://plainsec.com/stories/7047c945-2796-447c-a7f6-a0e0b588e98f/hikvision-status-endpoint-makes-cameras-easier-to-find 2026-07-19 https://plainsec.com/stories/e9754c8c-886c-4544-b4c1-325995a3e7c3/fake-captchas-shift-sandworm-past-installer-detections 2026-07-19 https://plainsec.com/stories/6a46066b-5080-486b-8fbf-36b04cb6959d/nginx-patch-bundle-includes-aslr-dependent-rce 2026-07-19 https://plainsec.com/stories/c12a814f-cad9-4194-881a-f0921c459a97/siemens-ot-switches-can-keep-root-after-reboot 2026-07-18 https://plainsec.com/stories/0f080c73-cff3-4366-85b2-62c9a19afcd1/fairlife-ransomware-hits-shelf-supply-not-data 2026-07-18 https://plainsec.com/stories/a99da818-d4cb-46e0-a36c-5eb3160ad207/acquisition-boundaries-did-not-stop-abbott-breach 2026-07-18 https://plainsec.com/stories/d8fb740e-d834-4362-8631-9753342c6a71/gold-eagle-makes-vulnerability-triage-a-federal-pipeline 2026-07-18 https://plainsec.com/stories/706b6662-9953-4a2d-8bd0-71956713d1c7/spirals-shrinks-the-ransomware-response-window 2026-07-18 https://plainsec.com/stories/a3245bb3-9168-4451-906a-cf2378878299/stolen-code-signing-certs-break-trusted-binary-checks 2026-07-18 https://plainsec.com/stories/cc4cee04-307b-4736-b657-9bffe12b7ecc/coding-tests-become-a-secret-delivery-path 2026-07-18 https://plainsec.com/stories/94f59cdb-9c6d-4bf5-ae39-6733f7916909/goserpent-kept-access-alive-for-months 2026-07-18 https://plainsec.com/stories/70de825e-dfa6-429e-8549-587a68bef0bc/zoom-account-takeover-splunk-credential-exposure 2026-07-18 https://plainsec.com/stories/73ee2b3e-bdc3-47c4-b3c8-6930f2ae2014/adobe-experience-manager-fixes-missing-auth-and-ssrf-flaws 2026-07-18 https://plainsec.com/stories/9a6aa0ab-931c-48c9-99b9-7ba38b5c35a9/llms-now-chain-prompts-into-domain-access 2026-07-17 https://plainsec.com/stories/29aaa7a3-7ae0-4625-8b56-6f2db0106795/ai-agents-become-identity-risk-not-just-output-risk 2026-07-17 https://plainsec.com/stories/bd96e6e6-c06e-4276-a1db-631933e6100d/legacy-shim-revocations-leave-secure-boot-gaps 2026-07-17 https://plainsec.com/stories/4c094d39-434d-404c-9abc-f7129053654e/ssh-orchestrated-malware-keeps-swapping-payloads 2026-07-17 https://plainsec.com/stories/d9935d50-05ae-48b7-9ab2-5a6b9b1f2758/a-fake-prompt-becomes-the-password-theft-point 2026-07-17 https://plainsec.com/stories/ed585ad0-cdb2-4b58-8bdb-a6a35ad53eee/signed-mac-malware-turns-trust-into-the-bypass 2026-07-17 https://plainsec.com/stories/8a004d25-f2ca-4bbd-a582-909303f7a106/hosting-providers-face-criminal-prosecution-not-just-sanctions 2026-07-17 https://plainsec.com/stories/94fb896f-fad9-4688-ba6a-08f211456f81/ransomware-starts-at-the-gateway-not-the-endpoint 2026-07-17 https://plainsec.com/stories/e7b0c36f-e3a3-45b4-9cf2-5000a6c5f5cc/trusted-metadata-lets-agents-be-steered 2026-07-17 https://plainsec.com/stories/67c792d8-125e-4257-beec-e198ca396f2d/n8n-flaws-let-input-become-execution 2026-07-17 https://plainsec.com/stories/736bb6eb-1a68-48f9-b007-ac7b199f6cab/asyncapi-imports-now-trigger-malware-at-load-time 2026-07-16 https://plainsec.com/stories/ddfc528b-a0e3-405e-a9d2-0c2090b2ae91/ai-pipeline-shortens-the-path-to-exploits 2026-07-16 https://plainsec.com/stories/d1f1d862-37c8-4e2c-b5d7-cdba8c538ba5/800-account-laundering-web-slows-fraud-recovery 2026-07-16 https://plainsec.com/stories/486f0049-8952-4a3b-819f-86a4c737786f/ransomware-now-enters-through-stolen-logins 2026-07-16 https://plainsec.com/stories/2c1cb136-c565-4c54-8583-623e0f843c14/pla-tightens-bid-discipline-on-cyber-vendors 2026-07-16 https://plainsec.com/stories/8a5350ea-5958-436e-a27c-9a9f930073cb/iot-botnet-adds-fallback-control-paths 2026-07-16 https://plainsec.com/stories/64772260-c6f3-42c1-97ce-ef36e0cf09c3/cursor-opens-the-repo-and-the-repo-runs-code 2026-07-16 https://plainsec.com/stories/7a2c8b05-a1fb-4148-890a-5aa5dd51ea9d/land-registry-outage-freezes-property-deals 2026-07-16 https://plainsec.com/stories/61fd09a8-ba5d-4e85-9c5e-143088a5adf1/tenable-agent-flaw-can-undermine-managed-fleets 2026-07-16 https://plainsec.com/stories/e9e46414-e737-4d36-9232-46929a6fc7db/next-js-adds-a-monthly-security-release-cadence 2026-07-16 https://plainsec.com/stories/615a4719-8b8b-4935-b78d-fef4e8126760/rabbitmq-secret-leak-can-become-broker-takeover 2026-07-15 https://plainsec.com/stories/4d910a67-906a-428f-9ac6-5ad35adde1f7/malicious-jscrambler-releases-kept-coming 2026-07-15 https://plainsec.com/stories/3bbb590f-0ab5-43c7-9f62-8bbe2d82af29/treasury-targets-ransomware-s-support-layer 2026-07-15 https://plainsec.com/stories/1edc5d6a-a827-4379-a1f1-0328c40a3107/blank-entra-logs-can-hide-credential-checks 2026-07-15 https://plainsec.com/stories/d5422d9a-50fe-46b1-b446-a9e990fc827a/caller-id-spoofing-platform-faces-pressure-after-nca-charges 2026-07-15 https://plainsec.com/stories/f4eab8e5-aa80-4484-aa3f-0bc4cbb1eb4c/entra-id-makes-passkeys-the-default-login-path 2026-07-15 https://plainsec.com/stories/5513f881-2cde-4f2b-8751-8e6b7c2a2d20/leak-site-bluff-targets-synopsys-and-bosch 2026-07-15 https://plainsec.com/stories/937f1eaf-bfdc-4953-b012-9eb781a42d02/dod-delays-third-party-cmmc-checks 2026-07-15 https://plainsec.com/stories/40353f30-6679-4d79-9552-a62a34c2ed58/europe-turns-sanctions-on-turla-s-support-network 2026-07-14 https://plainsec.com/stories/b78c7cf9-159b-4fb8-833b-e8b055931196/cms-upload-paths-are-becoming-server-takeovers 2026-07-14 https://plainsec.com/stories/e5c5e5db-2327-4243-9db5-810b54f63368/claude-for-chrome-still-trusts-fake-clicks 2026-07-14 https://plainsec.com/stories/d5e94714-eb66-400c-ad3f-fc8f84335add/trusted-saas-access-becomes-the-attack-path 2026-07-14 https://plainsec.com/stories/3c289788-4322-4e17-b9fa-da7a1fee8b35/reusable-rust-rat-targets-windows-defenses-first 2026-07-14 https://plainsec.com/stories/51677121-2ba0-4ea0-ae84-8a8b77165fc7/wiping-malware-learns-to-spy-and-pretend-to-extort 2026-07-14 https://plainsec.com/stories/e00d8a16-3f13-4ec1-8970-469909b9ef74/passkey-enrollment-becomes-the-account-takeover-path 2026-07-13 https://plainsec.com/stories/26492002-6c97-4ba1-99d2-323b2797b983/exposed-aitm-toolkit-lowers-the-bar-for-mfa-bypass 2026-07-13 https://plainsec.com/stories/c787804d-2287-4737-97c7-ae1bb971dfee/build-repos-leak-live-cloud-keys 2026-07-13 https://plainsec.com/stories/801e38f9-c1e2-4c45-a42e-823aae0f4cea/forgotten-web-hosts-are-now-ai-discovery-points 2026-07-13 https://plainsec.com/stories/c315d9eb-432a-4ccb-84c9-440b7f3dada6/sharefile-cloud-returns-but-customer-controllers-stay-offline 2026-07-13 https://plainsec.com/stories/f226942c-3312-402e-9c7a-1243bcad2011/ransom-negotiators-become-part-of-the-attack-surface 2026-07-13 https://plainsec.com/stories/4784a96c-e343-46e8-a4bb-26d9f0ee7c01/sharefile-shutdown-signals-more-than-maintenance 2026-07-13 https://plainsec.com/stories/907b841e-1719-4ae3-8307-1506b947e26f/police-portal-became-a-shared-spy-surface 2026-07-13 https://plainsec.com/stories/2ff6085e-6fc6-4665-bf80-d79f854d881f/classic-web-client-xss-puts-mail-sessions-at-risk 2026-07-12 https://plainsec.com/stories/018a1cb2-1bf3-4951-80f2-7459d17ce1ce/android-wireless-debugging-opens-a-new-shell-path 2026-07-12 https://plainsec.com/stories/d8254c97-2d8f-4b5d-b7f2-e43b47e8b2e0/github-apis-quietly-build-org-maps-at-scale 2026-07-12 https://plainsec.com/stories/07285aa6-d617-41ef-9add-0dde15b1f1e4/one-header-can-own-a-gitea-repo-fleet 2026-07-11 https://plainsec.com/stories/2f3365ca-00b3-442c-84b7-1a4b422ec4ca/roundcube-makes-university-mail-a-foothold 2026-07-11 https://plainsec.com/stories/96bab165-8df7-4dff-b10b-6eb900c0c9ec/signed-driver-lets-ransomware-blind-defenses 2026-07-11 https://plainsec.com/stories/dac3c22d-209c-4eeb-a031-6825849620a9/hallucinated-package-names-become-a-new-infection-path 2026-07-11 https://plainsec.com/stories/dbdf1306-2f47-4473-896c-cfd95d862072/seo-poisoned-installers-scale-silver-fox-intrusions 2026-07-11 https://plainsec.com/stories/17de959b-d3c4-499b-a3f1-22a7fd972ee4/http-3-servers-crash-on-ordinary-qpack-traffic 2026-07-11 https://plainsec.com/stories/aae8eb8c-d98f-44a8-96f9-611737cf889a/helpdesk-identity-checks-became-the-weak-link 2026-07-11 https://plainsec.com/stories/bba684a3-718f-4e5a-800c-a25edec9b4c5/compromised-sites-become-resale-inventory 2026-07-10 https://plainsec.com/stories/90e7be8f-5309-4f57-95d0-0997236e34c8/pinned-injective-packages-spread-wallet-key-theft 2026-07-10 https://plainsec.com/stories/4f95f675-774f-445f-a1f0-a8c925cff844/extradition-lets-ransomware-cases-outlast-the-intrusion 2026-07-10 https://plainsec.com/stories/8b8f8e7c-35be-4765-a0a6-3d6ffb5dd2e9/ai-gateways-become-the-real-cloud-chokepoint 2026-07-10 https://plainsec.com/stories/3ba3e4eb-008c-40f0-8e96-ce40c961bb0f/go-version-history-is-now-the-lure 2026-07-10 https://plainsec.com/stories/5ea4b9f0-3db7-4900-b527-f55e4ea825a4/the-gentlemen-becomes-a-high-payout-raas-platform 2026-07-10 https://plainsec.com/stories/bb8476c3-d566-4e47-a719-6b5dceadc9f6/six-million-driver-s-licenses-become-reusable-fraud-fuel 2026-07-10 https://plainsec.com/stories/ceae6ad5-100c-42d4-be07-3af6b487a61a/cyber-shield-makes-trust-the-national-bottleneck 2026-07-10 https://plainsec.com/stories/bb2519f5-009e-429f-97d7-3f93758dd05a/approval-boxes-are-the-new-attack-surface 2026-07-10 https://plainsec.com/stories/304fa782-5554-4b81-ac75-126066a503cb/routers-become-shared-cover-for-espionage 2026-07-09 https://plainsec.com/stories/f4f8c046-89be-40ed-9bf2-f44c9c759f84/partial-unifi-patching-leaves-the-stack-exposed 2026-07-09 https://plainsec.com/stories/19b72e94-7081-41ff-9101-694a07b2c3a5/ai-browsing-agents-can-be-talked-into-paying 2026-07-09 https://plainsec.com/stories/e8e6040d-c909-488a-b92d-e8f56294e25b/accenture-claim-extends-from-code-to-cloud-access 2026-07-09 https://plainsec.com/stories/203346b6-ff23-4175-9228-fdc0a5187674/long-old-linux-bug-now-breaks-host-isolation 2026-07-09 https://plainsec.com/stories/d091fad2-ab4a-49f3-89e8-d523c5581dd1/npm-v12-turns-off-install-time-code-by-default 2026-07-09 https://plainsec.com/stories/f2452674-0aab-4c4b-a219-1595d359648e/trusted-saas-relays-hide-a-job-interview-phish 2026-07-09 https://plainsec.com/stories/22e5150e-b724-4f84-90c2-6eb9497ec835/a-tax-vendor-became-wartime-infrastructure 2026-07-09 https://plainsec.com/stories/c61444c4-f3c0-470a-b978-50bc477692a7/patched-fortigates-still-leak-access-through-old-credentials 2026-07-09 https://plainsec.com/stories/851ccd42-6fe4-4d2d-a454-3ae3134ccee2/fake-payment-sdks-steal-reusable-dev-secrets 2026-07-08 https://plainsec.com/stories/a4fb4c90-f41f-4d96-bb96-03d9e5190588/telegram-rented-android-fraud-churns-faster-than-signatures 2026-07-08 https://plainsec.com/stories/9f84750f-1da6-420f-9eab-e3857f7875c4/guest-root-can-break-kvm-host-isolation 2026-07-08 https://plainsec.com/stories/ce4330b1-4012-43e1-9d8a-45c75cbce2a8/public-issues-can-drive-private-repo-leaks 2026-07-08 https://plainsec.com/stories/c44733bc-795d-4c8f-99b7-429c669bce2f/poisoned-ai-tools-turn-agents-into-control-planes 2026-07-08 https://plainsec.com/stories/e0acb054-a39a-4a54-b341-7c0d4d93c49b/ransomware-claims-concentrate-as-ai-polishes-pressure 2026-07-08 https://plainsec.com/stories/149bc050-951f-4512-9755-50d53f5ab9d2/mixed-net-builds-make-cavern-harder-to-see 2026-07-08 https://plainsec.com/stories/b85090bb-d127-491b-95e2-d80e558be5bb/arrest-hits-hacktivist-support-layer-not-just-one-operator 2026-07-08 https://plainsec.com/stories/f131d779-d6ba-4439-b8a1-dc0531bcb0b6/agentic-ai-compresses-aws-intrusions-to-72-hours 2026-07-08 https://plainsec.com/stories/c37616db-faed-4bcf-8b7d-4392e502ed6b/predator-case-moves-from-convictions-to-civil-claims 2026-07-08 https://plainsec.com/stories/2fa6d52a-3cb7-44b9-aa9e-4171a9790761/exfiltrated-resident-data-pushes-county-to-pay-seven-figures 2026-07-07 https://plainsec.com/stories/df0fefe1-1edf-49f2-9d0e-038758dc5a41/tiny-linux-kernel-race-opens-root-on-desktops-and-android 2026-07-07 https://plainsec.com/stories/146c88d1-f582-47d0-9e52-d6171ef52098/fake-captcha-fraud-tools-stay-inside-live-banking-sessions 2026-07-07 https://plainsec.com/stories/10ffa4f3-5a24-4609-ac91-7567f69311ea/one-editable-bot-could-hijack-the-whole-project 2026-07-07 https://plainsec.com/stories/40433b85-a584-4b8e-9cc5-5c920a2d9d4f/gitea-docker-images-trust-spoofed-logins-by-default 2026-07-07 https://plainsec.com/stories/51e058d5-9138-48e7-b749-093c022527f0/404-pages-became-the-compromise-signal 2026-07-07 https://plainsec.com/stories/b88a8b7a-42d3-46b8-a914-99e7f8360379/ai-polished-phishing-hides-a-new-espionage-stack 2026-07-07 https://plainsec.com/stories/4843566c-1b3a-4b5e-b507-33a8e1068794/coldfusion-exposure-window-collapses-to-hours 2026-07-06 https://plainsec.com/stories/71698775-5a8e-4b3f-9e82-545cc0818960/air-gapped-pcs-leak-files-through-video-cables 2026-07-06 https://plainsec.com/stories/7b74318e-bc5e-4167-bb5c-f3c7a8fd9ced/extradition-turns-scattered-spider-into-an-evidence-trail 2026-07-06 https://plainsec.com/stories/c47b2c00-6495-4e84-8d54-ad1cf945913b/generative-video-turns-liveness-checks-into-guessing 2026-07-06 https://plainsec.com/stories/aad3df2c-243e-4168-834f-530ac508398f/clamav-parsers-carry-decades-old-memory-risks 2026-07-06 https://plainsec.com/stories/ea75152b-9c4f-45bd-aa62-d31fdfc2fe71/maintainer-takeovers-put-the-trust-chain-in-play 2026-07-06 https://plainsec.com/stories/fc85cbe4-3a3d-4574-b1b7-58ff3b9579f2/blogspot-delivery-hides-a-session-stealing-loader 2026-07-06 https://plainsec.com/stories/2c4367ac-db8b-4794-83ea-dda1f720f7ce/silent-opera-gx-mods-leak-data-across-sites 2026-07-06 https://plainsec.com/stories/762442b3-f188-4bc5-8a5f-2f0a958a30a6/data-theft-alone-forced-a-seven-figure-county-payout 2026-07-05 https://plainsec.com/stories/b1089f97-f0e6-4427-beaa-dd8424dad033/attestation-proves-code-not-the-server-you-meant 2026-07-05 https://plainsec.com/stories/2a80a03c-e017-489b-baea-034be3d12dbc/internet-facing-sentry-appliances-become-trust-boundary-footholds 2026-07-04 https://plainsec.com/stories/aa15542f-89a8-425e-a9a8-ba7ba1ffb250/proxy-broker-takedown-cuts-off-many-abuse-campaigns 2026-07-04 https://plainsec.com/stories/4c09e5bb-2428-4f8c-8a1e-39e1937f4ce0/cursor-sandbox-breaks-on-trusted-ai-inputs 2026-07-04 https://plainsec.com/stories/2617d905-6c0e-42e7-8954-619db82d49b1/removable-media-becomes-full-control-on-embedded-gear 2026-07-04 https://plainsec.com/stories/37e38508-c9e4-4856-940f-f0ed8943dcb2/political-salience-expands-the-attack-surface 2026-07-04 https://plainsec.com/stories/81171558-449c-45d9-9a9c-1b3fd72c7979/microsoft-365-phishing-now-leaves-long-lived-control 2026-07-04 https://plainsec.com/stories/a9e5015f-e2c5-424f-97f6-ab867ae109db/malicious-npm-packages-hide-payloads-in-install-steps 2026-07-04 https://plainsec.com/stories/eb0b9b88-daf7-4472-bcec-a80a31836535/netscaler-risk-spreads-beyond-saml-idp 2026-07-04 https://plainsec.com/stories/c500b195-945e-43e8-a69c-52fc759cc308/medtronic-breach-count-lands-at-3-8-million 2026-07-04 https://plainsec.com/stories/b23472c7-adaa-4307-ac62-ef6e5bc6e01d/fortigate-credentials-now-feed-ransomware-runs 2026-07-03 https://plainsec.com/stories/d866a2f4-ea56-42e1-bb15-92b7d2373917/poc-repos-become-the-malware-trap 2026-07-03 https://plainsec.com/stories/bdf0e82d-9a82-4545-8fec-8433c8c84211/ai-fuzzing-turns-one-dump-into-mass-pocs 2026-07-03 https://plainsec.com/stories/7da7d02b-b811-45f2-b711-1dc89b7d1711/agentic-browsers-leak-secrets-when-context-is-faked 2026-07-03 https://plainsec.com/stories/ec8c1359-7c7c-4550-8193-e14b537ccd43/argo-cd-s-internal-repo-server-becomes-the-blast-radius 2026-07-03 https://plainsec.com/stories/93d058c4-3f62-41a2-9e6a-65c6915cbf55/proton-drive-phishing-turns-trusted-links-into-ransomware 2026-07-03 https://plainsec.com/stories/f41fa1d5-7ddf-4dcf-9ddd-2f1116a7c6e6/github-enterprise-server-fixes-hidden-access-gaps 2026-07-03 https://plainsec.com/stories/1f48754b-4441-4125-8665-cbc4392e5af0/ransomware-power-is-consolidating-around-qilin 2026-07-03 https://plainsec.com/stories/61fe750a-48e7-4dc1-9bf7-1e850f8319a5/catalyst-center-file-read-bug-exposes-local-secrets 2026-07-03 https://plainsec.com/stories/ed498bbd-e4fd-468e-94cd-1a4940c79527/spyware-targets-the-oversight-process-itself 2026-07-03 https://plainsec.com/stories/7182c337-4318-45a3-94ce-beb2e6015202/exposed-oracle-ebs-servers-become-a-mass-target 2026-07-02 https://plainsec.com/stories/353a0bbd-b8c1-495e-b670-c75568461307/ai-access-now-depends-on-government-approved-guardrails 2026-07-02 https://plainsec.com/stories/c4c93075-79d1-4df1-be08-bb2dd91f8284/mfa-fails-on-the-legacy-oauth-path 2026-07-02 https://plainsec.com/stories/acd667df-d227-4281-85b7-268827fea2d5/ai-generated-domains-become-pre-positioned-attack-surface 2026-07-02 https://plainsec.com/stories/c82804b1-688d-4ed6-8593-5038ba36274f/signed-installers-hide-a-remote-control-malware-network 2026-07-02 https://plainsec.com/stories/0da2e7f8-025f-4c2f-852a-c85c3c2f1a34/gmail-access-moves-past-the-endpoint 2026-07-02 https://plainsec.com/stories/b20a2e37-09c1-4791-8548-517bdc77010a/paste-to-run-attacks-break-endpoint-assumptions 2026-07-02 https://plainsec.com/stories/86330172-2fe2-479c-83de-b221cee8b7c2/coldfusion-input-bugs-reach-code-execution-again 2026-07-02 https://plainsec.com/stories/aa0a6015-3a38-4c8a-80d8-e062db9489e6/apple-closes-browser-to-kernel-paths-across-its-fleet 2026-07-02 https://plainsec.com/stories/a4b46247-88e7-4835-b11e-2ce81c7164f7/oracle-payments-bug-can-leak-the-keys-behind-it 2026-07-01 https://plainsec.com/stories/b0ab18db-bab2-4e63-a14c-5463f53ff315/defender-flaw-becomes-ransomware-s-privilege-shortcut 2026-07-01 https://plainsec.com/stories/d531e7c6-db25-447c-a7fc-214196f98f85/exposed-langflow-apps-become-network-pivots 2026-07-01 https://plainsec.com/stories/61b85c25-c6bd-41e9-ae02-3956272498e6/ai-branded-extension-quietly-harvested-search-traffic 2026-07-01 https://plainsec.com/stories/3639e7c6-9700-4d39-8bfa-94ec9d63a746/aws-waf-can-miss-fragmented-http-2-bodies 2026-07-01 https://plainsec.com/stories/cad2a1be-3c46-4645-960e-4ec661aa40f7/bespoke-backdoor-marks-cl-sta-1062-s-next-stage 2026-07-01 https://plainsec.com/stories/e2371c90-7870-472f-a08c-e99c8b6dc57f/chrome-fleet-exposure-ends-only-after-every-build-updates 2026-07-01 https://plainsec.com/stories/bf620e16-c478-4ffa-9757-b76652505efc/ai-skills-marketplace-becomes-a-credential-channel 2026-07-01 https://plainsec.com/stories/d45c46b9-3435-4083-8156-f432123cd082/region-locked-banking-trojan-hides-from-sandboxes 2026-07-01 https://plainsec.com/stories/adaf716e-3e4b-4c5f-9ae5-6f0c38f7f1df/flowise-session-cookies-can-be-forged 2026-07-01