France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at least 15 fires. [...]
Attackers can exploit a flaw in Claude's document-processing tool by creating a temporary file that Anthropic's AI assistant can access and run on a user's machine.
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an AWS account that Qubole's platform uses to reach those cust…
A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said. [...]
Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2. Both releases download and run code built to steal the wallet key that Swarm Des…
Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum. [...]
Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access. [...]
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported remote access trojan called PapRAT. "PapRAT has both C++ and Rust imple…
A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or running safely become part of the attack. Elsewhere, attackers a…
By Dr. Musheer Ahmed - A regional health plan opens an investigation after finding unusual billing patterns from a high-volume orthopedic provider. The investigators review several previously paid lumbar spinal fusion claims, including physician notes, treatment histories, and di…
A Wordfence bloqueou mais de 240 mil tentativas de ataque desde 28 de outubro contra uma falha no processo de atualização do núcleo do WordPress, registrada como CVE-2026-119977 e avaliada com nota 8,1 de 10. A contagem começa no dia em que o WordPress publicou a correção, e o pi…
Pesquisadores de segurança divulgaram em 6 de novembro de 2026 uma falha no Claude Dispatch, recurso da Anthropic que permite enviar tarefas do celular para o Claude Desktop. A falha deixava uma extensão de navegador dar ordens ao agente de IA como se fossem do usuário, e o Claud…
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the engine. Both apps signed customers in throug…
Hospitals and other critical infrastructure entities in the United States have been warned that internet-connected refrigeration and freezer systems could be targeted by threat actors, as they have been in Europe. Starting in mid-October, hackers started targeting internet-connec…
Um relatório divulgado em 6 de novembro de 2026 mapeou o Dark Project, operação de ransomware com motivação financeira observada desde junho de 2026, que já lista 38 organizações como vítimas em 8 países. O que distingue o grupo não é a técnica, é o modelo de remuneração: ele pag…
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies…
Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be careful until they are out. One operator …
A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire department platform exposing patient data from 2018, including ECG readings and …
U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim to cause service disruptions, fire hazards, and loss of inventory. "The actors may exploit vulnerabilities or weaknesses…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been exploited in real-world attacks. The vulnerabil…
