Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
U.S. law enforcement has seized the primary domain of Virtualine, a bulletproof hosting service advertised on cybercrime forums for facilitating illegal activities. [...]
Ameaças Cibernéticas
2122 notíciasGhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHub
The supply chain attack campaign's shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
Malware usa programas da OpenAI e Anthropic para infectar usuários
A Check Point Research (CPR), divisão de Inteligência em Ameaças da Check Point Software, alerta para a descoberta do Yoba, uma campanha de malware projetada para explorar a busca por ferramentas de Inteligência Artificial. A ameaça usa projetos fraudulentos hospedados no GitHub,…
Onda de ataques coloca Japão em emergência
A primeira-ministra do Japão, Sanae Takaichi, determinou um pacote de medidas emergenciais para responder a dezenas de ciberataques que interromperam operações em organizações que vão de serviços de transporte por aplicativo a delegacias locais, repartições do governo nacional e …
CISA alerta para exploração da falha crítica Node2Shell
A CISA confirmou na terça-feira (27) que atacantes começaram a explorar uma vulnerabilidade crítica no Brotli, conhecida como Node2Shell, Broccoli2Shell e HTTP2Shell. A falha, rastreada como CVE-2026-111497, decorre de uma escrita fora dos limites no decodificador Brotli, usado p…
Relatório mapeia falhas exploradas em infraestrutura de rede
A edição de outubro de 2026 do InfraTrust Pulse, publicada por Paul Asadoorian e Chase Snyder, acompanhou 133 novos avisos de segurança de 18 fabricantes entre 18 de setembro e 14 de outubro, cobrindo 2.813 vulnerabilidades. Desses avisos, 37 foram classificados como críticos, ci…
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains…
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, 28th October 2026, CyberNewswire
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a security researcher has shown. Orange Tsai of DEVCORE published the full method on October 28, five months after the chain…
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observe…
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
InfraTrust report warns of exploited flaws in critical network infrastructure
Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces of firewalls, VPNs, application delivery controllers, and other appliances at risk. [...]
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library of O…
Hackers now scanning systems for recently-patched Oracle flaw
Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. [...]
Falhas no WebKit permitem executar código ao abrir página no iPhone
A Apple publicou em 26 de outubro o iOS 27.2 e o iPadOS 27.2, com correção para 163 vulnerabilidades. Mais de 30 estão no WebKit, o motor que renderiza páginas no Safari e em todo aplicativo que exiba conteúdo web no iPhone, e várias delas permitem execução de código quando o usu…
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machine before its operating system loads, but only while the machine is booting over the network. UEFI firmware is the softwa…
Cibercriminoso usa IA para invadir 90 organizações na Coreia do Sul
A Polícia Metropolitana de Seul anunciou em 26 de outubro a prisão do responsável por uma série de invasões que atingiu cerca de 90 empresas e instituições da Coreia do Sul e levou 8,2 milhões de registros pessoais e documentos internos. Parte dos ataques foi executada com inteli…
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026…