Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released this week. [...]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Ray is an open-source, Python-native distributed computing framework desig…
Sites WordPress que utilizam o plugin User Profile Builder estão vulneráveis a uma falha crítica que permite a tomada total do controle, conforme análise da empresa de segurança Wordfence. A vulnerabilidade, com pontuação CVSS de 9.8, permite que um atacante não autenticado se re…
As gigantes de tecnologia General Electric (GE) e Philips, além da petroleira Shell, investigam alegações de que o grupo de ransomware Clop tenha invadido seus sistemas e roubado dados, conforme comunicados das empresas. A Philips confirmou que identificou e conteve uma tentativa…
O mês de julho registrou o maior volume de ataques de ransomware no mundo nos últimos 12 meses, com 955 vítimas globais e um salto de 33,9% em comparação a junho, superando o pico anterior de 881 ocorrências em dezembro de 2025. Os dados são da plataforma Ransomware.live, de moni…
A Polícia Federal do Brasil e o Bundeskriminalamt (BKA), a polícia criminal alemã, prenderam sete pessoas ligadas a um ataque cibernético que, em novembro de 2023, desviou cerca de € 30 milhões (R$ 193,6 milhões) das contas de clientes do banco alemão Commerzbank. Três suspeitos …
Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.
GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. …
Cada organização no Brasil sofreu, em média, 4.151 ataques cibernéticos por semana em julho de 2026, um crescimento de 45% em relação ao mesmo período do ano passado, segundo o relatório mensal da Check Point Research (CPR), divisão de inteligência em ameaças da Check Point Softw…
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials. [...]
World-class threat modeler Adam Shostack shared he was "blown away" by OpenAI's revelations about the Hugging Face attack, and explains why his new threat model for LLMs is both "lightweight yet still usable."
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing i…
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out of 10…
Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the th…
A Microsoft comunicou que está trabalhando em uma correção de segurança para uma vulnerabilidade de dia zero no Microsoft Defender chamada “ShieldBreak“, após divulgação pública pelo pesquisador que usa o pseudônimo “Nightmare Eclipse”. A falha, agora rastreada como CVE-2026-6941…
The botnet adds exploitation modules, credential theft, and reverse SOCKS relays to turn compromised devices into persistent attacker infrastructure.
GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests, and several other services. [...]
The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to …
Data Theft/Extortion Incident Confirmed by Beverly Hills Plastic Surgeon The HIPAA Journal
MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, often before security teams even know the server is running. As more organizations adopt AI agents into their systems, that exposure can silently become…
