The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged. [...]
Google Workspace attacks do not always begin with phishing. Stolen OAuth tokens can provide another path into Gmail, Drive, and connected systems. Material Security explains why organizations need defenses that cover the entire Workspace attack chain. [...]
A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused. [...]
The threat actor known as HoneyMyte (aka Mustang Panda) has been observed deploying an updated version of the CoolClient backdoor with a signed Windows kernel-mode rootkit that can hide and protect malicious processes, files, registry objects, and command-and-control (C2) network…
Texas Hearing Institute Ransomware Attack Affects 30,000 Patients The HIPAA Journal
Texas Hearing Institute has announced a cybersecurity incident involving the protected health information of almost 30,000 patients. Data breaches have […] The post Texas Hearing Institute Ransomware Attack Affects 30,000 Patients appeared first on The HIPAA Journal.
Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole 89GB of data. [...]
Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or Microsoft Edge process on Windows, allowing an operator to access cookies, saved data, and authenticated browser sessions. The …
Ataques distribuídos de negação de serviço acima de 1 Tbps estão se tornando cada vez mais frequentes. A Cloudflare bloqueou 935 ofensivas dessa escala no primeiro semestre de 2026, indicando uma forte expansão dos ataques hipervolumétricos. Somente no segundo trimestre foram reg…
Cybersecurity researchers have uncovered a large-scale, global recruitment-themed phishing campaign that uses fake interview scheduling pages and Browser-in-the-Browser (BitB) windows to steal Google and Facebook credentials and, in more advanced cases, relay multi-factor authent…
Apple on Thursday sent a fresh batch of notifications to customers whom it suspects may have been targeted by mercenary spyware attacks. In a statement shared with TechCrunch, the iPhone maker said it alerted an unspecified number of users targeted in 110 countries and that it h…
A Fortinet publicou correções para múltiplas vulnerabilidades relacionadas a autenticação em seus produtos FortiWeb, FortiManager e FortiClient, conforme comunicado da empresa. A falha mais grave, rastreada como CVE-2026-26035, afeta o mecanismo de login do FortiWeb e possui pont…
You're not alone if you just received an "Apple Threat Notification" saying it detected a "mercenary spyware attack targeted at your iPhone." [...]
Pesquisadores alertam para uma campanha de Android malware que toma empréstimos em nome das vítimas e, em seguida, utiliza um segundo malware para ler dados de cartões de pagamento via NFC e realizar compras físicas e saques em caixas eletrônicos, conforme análise publicada pela …
An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking. [...]
Exploitation against CVE-2026–59310 began earlier this month, and patching the vulnerability may not be enough to fully mitigate the threat.
Uma vulnerabilidade crítica recentemente corrigida no VMware vCenter Syslog Server (CVE-2026-59310) está sendo ativamente explorada em uma campanha para implantar uma ferramenta de SSH reversa e obter persistência e acesso remoto, A empresa de resposta a incidentes QUIRSO identif…
A Microsoft publicou, em 13 de agosto, atualizações de segurança para corrigir uma vulnerabilidade de dia zero no Windows conhecida como “LegacyHive”. A falha foi divulgada pelo pesquisador que usa o pseudônimo “Nightmare Eclipse”, horas após a edição de julho do Patch Tuesday, e…
An outside party gained access to some company systems, but the medical device maker found no evidence that sensitive or protected data was obtained and said its operations are running normally.
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. [...]
