Fake AI Attacks Target US Firms as Researchers Warn of Corporate Credential Theft
ANY.RUN analyzed 1,258 sandbox submissions showing how fake ChatGPT and Claude downloads and setup guides steal corporate credentials and browser session data.
Ameaças Cibernéticas
2122 notíciasPHP2Shell entra no catálogo de falhas já exploradas da CISA
A CISA adicionou em 26 de outubro as falhas CVE-2026-109618 e CVE-2026-109619 ao catálogo de vulnerabilidades exploradas conhecidas, o KEV. O conjunto, tratado como PHP2Shell, permite execução remota de código no PHP sem autenticação, e a entrada no catálogo indica que a agência …
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious …
University of New Mexico Health System Diverts Ambulances Due to Ransomware Attack – The HIPAA Journal
University of New Mexico Health System Diverts Ambulances Due to Ransomware Attack The HIPAA Journal
University of New Mexico Health System Diverts Ambulances Due to Ransomware Attack
The University of New Mexico Health System (UNM Health) has experienced a cyberattack that has prevented access to critical electronic […] The post University of New Mexico Health System Diverts Ambulances Due to Ransomware Attack appeared first on The HIPAA Journal.
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
Fake US court notices target over 100,000 businesses, luring recipients to download LodaRAT malware that steals passwords, records…
Nefilim and Hive ransomware affiliate gets 70 months in prison
A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021. [...]
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any r…
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response to the service being used to commit and facilitate prolific criminal activity, including "the adverti…
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an a…
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailsca…
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request…
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulne…
PHP está sob ataque, diz alerta da CISA
A CISA, agência de segurança cibernética dos Estados Unidos, adicionou ao seu catálogo de vulnerabilidades exploradas duas falhas críticas no PHP , identificadas como CVE-2026-109618 e CVE-2026-109619. Ambas têm pontuação CVSS 9.2 e permitem execução remota de código sem autentic…
Japan's GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a ransomware attack today. [...]
Exploração ativa de falha crítica no Oracle E-Business Suite
Atacantes estão explorando ativamente uma vulnerabilidade crítica de SQL Injection no Oracle E-Business Suite (EBS). A Oracle publicou atualizações de segurança para a falha em 20 de outubro. A empresa de cibersegurança Defused relatou a exploração, mas não forneceu detalhes sobr…
Citrix e Palo Alto corrigem falhas críticas do PHP2Shell
A Citrix e a Palo Alto Networks publicaram atualizações de segurança para as vulnerabilidades PHP2Shell (CVE-2026-109618 e CVE-2026-109619) em seus produtos. A informação foi divulgada pelos próprios fabricantes. As correções chegam após semanas de exposição de interfaces de gere…
Tailscale alerta para falhas de SSH com escalada a root
A equipe de segurança da Tailscale trabalha para corrigir quase uma dezena de vulnerabilidades que podem ser exploradas para roubar credenciais, derrubar servidores e obter privilégios de root. Durante uma auditoria de segurança na versão 1.104.2 do Tailscale e no servidor de con…
Hackers hijack Convertr analytics script to steal payment card data
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout. [...]