Pesquisadores da Apiiro localizaram 2.539 credenciais distintas distribuídas em 1.994 repositórios públicos do GitHub, todas gravadas por um recurso de aprovação do Claude Code. O levantamento aponta 63 organizações atingidas, em sua maioria empresas de software, segundo relatóri…
A SonicWall publicou atualizações de segurança para corrigir sete vulnerabilidades nos firewalls SonicOS, incluindo uma falha de bypass de autenticação em SSL-VPN explorada em ataques. A falha, rastreada como CVE-2026-19868, permite que atacantes com credenciais válidas para um m…
O boletim de segurança do Android de novembro de 2026, publicado em 2 de novembro, corrige 216 vulnerabilidades, sendo 23 classificadas como críticas. O núcleo do risco, segundo análise da SolusThreat, são três falhas de execução remota de código (RCE) que dispensam qualquer inte…
Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions. CTM360 reveals how these campaigns use deceptive verification steps and affiliate networks to generate rev…
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects "Yes, and don't ask again," Anthropic's AI coding assistant can save the command, word-for-word, inc…
O banco cooperativo francês Crédit Mutuel Arkéa confirmou em 4 de novembro um ataque cibernético que permitiu transações fraudulentas e suspendeu temporariamente algumas transferências. Ontem, 5 de novembro, a instituição informou que cerca de € 100 milhões (US$ 112,6 milhões) es…
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]
Company said a "multifront cyberattack" included AI agents and an on-path data snatch.
OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for 948 distinct Linux kernel flaws. [...]
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [...]
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain. [...]
Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the fix still unpacks its files using the site's old, unpatched code, so an attack…
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole),…
A Railway engineer admitted testing AI agents on Primcloud, whose founder says they sought customer secrets and scanned…
Critical Infrastructure Orgs Warned of Cyberattacks on Refrigeration and Cold Chain Monitoring Systems The HIPAA Journal
A joint cybersecurity warning has been issued by the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), […] The post Critical Infrastructure Orgs Warned of Cyberattacks on Refrigeration and Cold Chain Monitoring Systems appeared first …
Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers. [...]
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
Toronto, Canada, 6th November 2026, CyberNewswire
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. [...]
