TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host. A malicious or c…
David Finn - As we wrap another October Cybersecurity Awareness Month, here are final thoughts and recommendations on the 3 challenges, Data Fragmentation & Interoperability Gaps, Legacy Technology & Medical Device Vulnerabilities, and Ransomware & Extortion Attacks. #BeCyberSafe…
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...]
A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to developers’ Windows PCs through NetSupport.
Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE identifier, relates to a case of remote code execution impacting WordPress Core versions 4.7 t…
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how these attacks exploit trust between networks and how its secur…
Binance scrambles to freeze billions after record-breaking hack linked to North Korea.
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...]
A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a customer has reported. Trezor has not yet examined the device. It is telling everyone who bought a Trezor from CryptoBilis …
Binance probes a DevOps engineer’s hacked laptop after a $6.3 billion theft linked by researchers to North Korean hackers, and promises to cover all customer losses.
Pesquisadores de segurança divulgaram em 29 de outubro de 2026 uma falha no Telegram para Android que permite executar código no aparelho da vítima depois que ela atende uma chamada de voz. O atacante precisa apenas de uma conta comum. O Telegram corrigiu na versão 12.10.4, liber…
A CrowdStrike relatou em 28 de outubro de 2026 que o grupo WARP PANDA, que ela associa à China, usou como zero day uma falha do VMware ESX para operar sem deixar registro nos servidores invadidos. A CVE-2026-41709 tem nota 2,7 na escala CVSS 3.1 e entrou no catálogo de falhas exp…
A Cisco Talos publicou em 28 de outubro de 2026 a análise do KeyDrift, conjunto de malware feito para viver dentro dos controladores Catalyst SD-WAN e extrair as chaves que protegem o tráfego entre as unidades da empresa. O acesso inicial veio da CVE-2026-20127, falha de autentic…
Ahmad Umar Agha, a Syrian Electronic Army hacker known online as "Th3Pr0," has been sentenced by a U.S. federal court to 42 months in prison for his role in a hacking conspiracy that targeted Western news outlets. The conspiracy was organized and led by members of former Syrian …
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...]
Binance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's compromised laptop. [...]
Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor on infected hosts. The issue has since been traced to the compromise of the Cursor Marketplace, prompting the …
The "FrostyNeighbor" advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives.
Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-972…
