Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks. [...]
Ameaças Cibernéticas
2120 notíciasJapan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers. [...]
LiteLLM é comprometido com infostealer e RAT no PyPI
A versão 1.107.0 do LiteLLM foi comprometida no PyPI em 21 de outubro de 2026, distribuindo um ladrão de credenciais e um trojan de acesso remoto (RAT) por meio de todos os sete arquivos wheel publicados. A versão maliciosa também chegou a imagens Docker, colocando em risco siste…
SafePay atinge 600 organizações de infraestrutura crítica
O grupo de ransomware SafePay invadiu mais de 600 organizações de infraestrutura crítica em todo o mundo desde 2024, segundo a Agência de Segurança Cibernética e Infraestrutura dos Estados Unidos (CISA). Em relatório conjunto com o FBI, o Serviço Secreto dos EUA (USSS), o Landesk…
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. [...]
CISA alerta para exploração ativa de falhas no Plex Media Server
A CISA alertou que atacantes exploram ativamente quatro vulnerabilidades no Plex Media Server, reunidas sob a designação Plex2Shell. Quando encadeadas em um exploit, as falhas permitem que um atacante obtenha o token de administrador do proprietário e execute código com privilégi…
Akamai descobre ataque a supply chain
A Akamai detectou e investigou uma intrusão em múltiplas etapas direcionada à infraestrutura de supply chain na América Latina, identificando atividades suspeitas que sugeriram tentativas de estabelecer acesso remoto, mapear o ambiente interno e expandir o acesso além do sistema …
'PHP2Shell' Bugs Signal Red Alert for Security Industry
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
PHP: 22,6 milhões de sites estão vulneráveis
As duas vulnerabilidades na linguagem PHP reveladas ontem (CVE-2026-109618 e CVE-2026-109619, ambas com CVSS de 9.8, deixam 22,6 milhões de sites expostos. A equipe de segurança do PHP publicou um comunicado oficial classificando ambas como críticas, e alertou que não existem mit…
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for administrators who patched nine days earlier: the…
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through …
Cybersecurity Awareness Month: Legacy Technology and Medical Device Vulnerabilities
Continuing Cybersecurity Awareness Month with experts weighing in on topic #2 - Legacy Technology and Medical Device Vulnerabilities Outdated, unsupported, and fragmented systems continue to challenge healthcare IT. The post Cybersecurity Awareness Month: Legacy Technology and Me…
Falhas no núcleo do PHP permitem execução remota sem autenticação
O projeto PHP publicou em 21 de outubro correções de emergência para duas falhas críticas no núcleo da linguagem, CVE-2026-109618 e CVE-2026-109619, tratadas em conjunto como PHP2Shell. As duas receberam nota 9,2 na escala CVSS 4.0 e permitem execução remota de código. A CVE-2026…
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities
PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers…
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...]
Feds Issues Advisory About SafePay Ransomware Group – The HIPAA Journal
Feds Issues Advisory About SafePay Ransomware Group The HIPAA Journal
Feds Issues Advisory About SafePay Ransomware Group
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Secret Service (USSS), and cybersecurity agencies in […] The post Feds Issues Advisory About SafePay Ransomware Group appeared first on The HIPAA Journal.
ClickFix has never been bigger, and AI tools are its most convincing lure yet
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these attacks evade traditional defenses and why AI tools have become increasingly effe…