The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability…
In addition to executing entirely in memory, the malware's infection chain incorporates other anti-analysis techniques designed to frustrate detection.
At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. [...]
A agência de cibersegurança americana CISA publicou um alerta sobre a exploração ativa de uma vulnerabilidade no módulo LiteSpeed cPanel que permite a um invasor elevar seus privilégios ao nível de root. O cPanel consiste em uma interface destinada a contas de hospedagem individu…
A Cisco alertou ontem os clientes sobre mais uma vulnerabilidade zero-day explorada em ataques contra seus produtos. A informação detalha que o problema de segurança afeta o Catalyst SD-WAN Manager e consiste na oitava falha em sistemas SD-WAN da companhia cuja exploração ativa f…
A new Android banking trojan named Rokarolla is targeting 217 banking and cryptocurrency applications using an extensive set of 137 commands. [...]
Uma sofisticada campanha de fraude utiliza falsas ofertas de emprego e processos de recrutamento para roubar credenciais de acesso e obter informações sensíveis de usuários. A informação foi publicada hoje por pesquisadores de ameaças da Gen, detalhando que os criminosos exploram…
A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machine learning model upload and run code inside Google's serving infrastructure. Palo Alto Networks Unit 42, which found and reported the bug through Go…
Threat actors are abusing Steam Workshop, Valve's community hub for downloading game-related content, to push various malware hidden in wallpaper packages. [...]
FishMonger, a China-nexus threat group, has deployed an undocumented version of the Linux backdoor against government targets in Honduras, Taiwan, Thailand, and Pakistan.
Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively. Attacks involving BabaDeda Loader, obse…
The emerging malware, spread via fake TikTok and Chrome downloads, demonstrates an evolution by combining banking fraud with extensive device surveillance and remote control.
The cardiac monitoring company said that a threat actor has demanded payment in exchange for not publicly releasing the stolen data.
Amos Stealer targets macOS users through fake downloads, stealing Keychain files, browser passwords, cookies, and developer configs for data theft.
New analysis shows the campaign, which uses compromised WordPress sites, may be linked to the ransomware and data extortion group Vice Society.
GhostTree uses recursive NTFS junctions to generate vast numbers of valid Windows file paths. Varonis explains how the technique could cause Microsoft Defender folder scans to never complete, leaving malware undetected. [...]
Embarcações da “Frota Negra”dark fleet”, a frota “fantasma” de petroleiros que transportam óleo cru de nações sancionadas pelo governo dos EUA, utilizam em sua infraestrutura de rede até mesmo cabos CAT6 soldados manualmente a conectores de dados para injetar sinais falsos de geo…
Security researchers at Zimperium's zLabs have documented a new Android banking trojan, Rokarolla, that targets 217 banking and cryptocurrency apps and packs 137 remote commands. Together, they give an operator near-total control of an infected phone: it lifts lock-screen PINs, …
Zimperium researchers discover a new mobile Trojan that hijacks clipboards, blocks bank calls, and takes complete control of Android devices.
New York, New York, 16th June 2026, CyberNewswire
