Pesquisadores mostraram que funções de inteligência artificial adicionadas ao Microsoft SQL Server 2025 podem ser usadas de forma indevida por invasores para acessar e retirar informações sensíveis de empresas. O problema não envolve necessariamente uma falha de segurança tradici…
Uma nova vulnerabilidade no BootROM de iPhones expõe chips da Apple a um comprometimento profundo da cadeia de inicialização segura. A falha, chamada usbliter8, afeta dispositivos com processadores A12, A13 e S4/S5. O problema foi descrito por pesquisadores da Paradigm Shift e en…
CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is being exploited in attacks. [...]
Cybersecurity experts warn that active hacking networks are using fake hotel bookings, cloned websites, and live chat features to scam FIFA World Cup 2026 fans.
Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incident impacting the competitive intelligence company on June 11, 2026. To that end, organizations will be unable to connect to Salesforce via the app un…
A New York man faces cyberstalking charges after allegedly sharing AI-generated nude images and fabricated racist messages using fake social media profiles to harass a Georgia college student. [...]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged Fortinet customers to secure their devices after nearly 74,000 firewall and VPN credentials were exposed in a data leak dubbed "FortiBleed." [...]
Crypto Clipper spreads over USB and communicates over Tor.
The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (EDR) killers to help affiliates evade detection in attacks. [...]
Invasores estão explorando massivamente uma vulnerabilidade no complemento Gravity SMTP desenvolvido para a plataforma WordPress. De acordo com os relatórios de telemetria emitidos pela empresa de cibersegurança Wordfence, a falha estrutural permite que agentes maliciosos não aut…
Pelo menos 50 empresas de grande porte no Brasil, incluindo organizações com mais de 10 mil funcionários e atuação nos setores financeiro, industrial, de telecomunicações e varejo, estão entre as vítimas da campanha FortiBleed que comprometeu 73.932 firewalls Fortinet globalmente…
The vulnerability, disclosed 12 months ago, affects multiple manufacturers.
The threat group's curious business model may combine opportunistic monetization alongside intel collection, without much coordination between the two.
International law enforcement dismantled TA569's SocGholish infrastructure, taking down over 100 C2 servers and remediating nearly 15,000 compromised websites.
Klue's Battlecards is now the third integrated application that has been compromised to steal customers' Salesforce data, and victims include Huntress, the cybersecurity vendor.
Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities and using the Tor network to conceal communication. [...]
The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat links turned into malware delivery paths. macOS attacks ran in memory and left almost nothing behind. Cloud agents looked like hel…
Golpes por telefone continuam relevantes no Brasil e podem ficar mais difíceis de identificar com o uso de inteligência artificial. O alerta foi feito pelo diretor de Identidade, Autenticação e Prevenção à Fraude da Serasa Experian, Rodrigo Sanchez, durante o anúncio da pesquisa …
Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users since February 2026. "The clipper in this campaign relies on Windows Script Host and ActiveX-driven logic to launch a bundled Tor proxy and poll a hidden-service C2 [comman…
Phishing sempre foi uma das táticas mais eficientes do crime cibernético, mas também uma das mais trabalhosas. Criar mensagens convincentes e personalizadas para cada alvo exigia tempo, pesquisa e esforço manual. Com a inteligência artificial, esse trabalho foi eliminado e o que …
