A cyberattack on refrigeration systems has disrupted stores run by multiple supermarket chains across several European countries after hackers remotely changed temperature settings on freezers and cooling systems. [...]
FortiGuard Labs links BITTER to cyberespionage attacks on South Asian organizations using malicious Windows shortcuts, PowerShell scripts, and PapRAT malware.
Organizations in the region face attacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains.
Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. [...]
Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 thr…
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. [...]
Fake Adobe Acrobat pages distribute signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs, CloudSEK’s researchers say.
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain control…
Cybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government entities and state-affiliated infrastructure. The activity, observed by Palo Alto Networks Unit 42 between October 2025 and April…
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. [...]
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their monetization value. Like other typical stealer families, VOLTA is equipped to har…
Uma falha grave no Android, apelidada de “SMS of Death“, permite que um atacante derrube o sinal e as ligações de um celular apenas com o conhecimento do número de telefone. Divulgada em 29 de outubro de 2026 e catalogada como CVE-2026-58882, a vulnerabilidade afeta o sistema de …
Atacantes começaram a explorar uma nova vulnerabilidade de alta gravidade no WordPress poucas horas após a disponibilização das correções. A falha, corrigida em 28 de outubro na versão 7.1.4, afeta o processo de atualização do sistema e pode ser usada para execução remota de códi…
Um grupo de hackers associado à China explorou falhas críticas no PHP, conhecidas como PHP2Shell, para obter acesso root em firewalls Palo Alto Networks. O ataque combinou dois exploits distintos e resultou no comprometimento de pelo menos 25 dispositivos, segundo a empresa de se…
Pesquisadores de segurança da Anthropic desenvolveram um exploit para uma vulnerabilidade crítica no kernel Linux que permite a atacantes não autenticados executar comandos remotamente como root em servidores que rodam listeners de Multipath TCP (MPTCP). A falha, rastreada como C…
Tentativas de explorar uma falha crítica no GitLab da infraestrutura de desenvolvimento do Alpine Linux, em 20 e 21 de outubro, levaram o projeto de código aberto a reconstruir o servidor do zero e redefinir todas as senhas. Os ataques miraram o CVE-2026-97229, falha de execução …
The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...]
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...]
FBI links 628 crypto wallet addresses to North Korea’s TraderTraitor after the $6.3 billion Binance hack, asking services to block transfers involving stolen funds.
A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker wo…
