A Chainalysis estima que cerca de US$ 5,912 bilhões foram roubados num suposto ataque hacker à Binance comunicado hoje – bem mais do que us US$ 3 bilhões informados pela empresa, segundo o portal Investinglive. A Binance anunciou no X que está trabalhando para resolver “um possív…
Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. [...]
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a …
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. [...]
Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.
A equipe de Segurança Ofensiva do Centro de Defesa Cibernética da Aeronáutica (CDCAER), da Força Aérea Brasileira (FAB) identificou três vulnerabilidades no Sunhillo SureLine, suíte de software que sustenta gateways e plataformas de vigilância e conversão de dados. O sistema rece…
Um grupo de ameaça persistente avançada (APT) recém-identificado, rastreado como UAT-11473, foi observado explorando o CVE-2026-20127, uma falha de bypass de autenticação nos controladores Cisco Catalyst SD-WAN, para instalar um framework de malware customizado chamado KeyDrift. …
A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of approximately $23,000 from 27 Solana wallets. [...]
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't. There's a strange mix of clever tricks and careless mistakes. Hackers are borrowi…
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. [...]
Desenvolvedores da distribuição Linux Alpine Linux revelaram que atacantes tentaram invadir o servidor GitLab do projeto. A equipe afirma não ter encontrado evidências de uma invasão bem-sucedida, mas também não pode descartá-la. Por isso, decidiu tratar o servidor GitLab como co…
A Cisco publicou uma correção emergencial para uma vulnerabilidade explorada em ataques de negação de serviço (DoS) contra o serviço SSL VPN dos firewalls ASA e FTD. A empresa voltou a alertar organizações sobre esse tipo de ataque, que já havia atingido o mesmo serviço em agosto…
A Cisco publicou atualizações de segurança para corrigir um zero-day de negação de serviço no software Adaptive Security Appliance (ASA) e Threat Defense (FTD) que atacantes estão explorando para derrubar remotamente dispositivos de firewall vulneráveis. A falha, rastreada como C…
An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
A StormWall, desenvolvedora de soluções de proteção contra ataques DDoS, registrou um aumento na atividade de DDoS direcionada a organizações no Brasil. Em agosto de 2026, a empresa identificou 1,03 milhão de ataques no país, contra menos de 700 mil em agosto de 2025. Telecomunic…
By Zac Amos - Healthcare systems depend on data exchange among electronic health records, connected medical devices and administrative networks. This creates environments where authorized clinical activity can closely resemble unauthorized access. Signature-based security tools m…
A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users' searches through tracking servers to generate advertising revenue from Bing and Yahoo. [...]
A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that its AI model wrote an exploit t…
EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar spoofing.
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim…
