Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software updates, business document reviews, and system maintenance utilities to stealthily deploy Remote Monitoring and Managemen…
Um trojan de acesso remoto para Android chamado Octagon está se passando pelo aplicativo de alertas emergenciais do Bahrein para assumir o controle de celulares e roubar informações sensíveis. A infecção começa com o download do arquivo BH-Alert.apk em páginas de phishing. O apli…
The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break. Security teams have long estimated risk by ranking attacker sophistication. Nation-state actors sat at one end. Organized crimi…
Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent. The researchers said the public agent could be prompt…
A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims' browser cache and ultimately deliver CountLoader and a previously undocumented remote access trojan called DeviceManager. "The first …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerability, tracked as CVE-…
Newer social engineering techniques help attackers ignore entrenched security controls and limit the evidence they leave behind.
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. [...]
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager's synced passkeys to take over accounts, bypass user verification, and extract passkey private keys. [...]
O Brasil registrou 314,8 bilhões de atividades maliciosas no primeiro semestre de 2026, o equivalente a 84% dos ataques detectados na América Latina e no Canadá, segundo o FortiGuard Labs. Esse cenário, aliado ao histórico de subinvestimento e a particularidades como o Pix e o 5G…
Pesquisadores do Noma Labs descobriram uma vulnerabilidade crítica, registrada como CVE-2026-59726 (CVSS de 10.0), na plataforma open source Ruflo para gerenciamento de agentes de IA. A falha, apelidada de RufRoot, afetou versões anteriores a 3.16.3 e permitiu que invasores obtiv…
A TP-Link publicou um aviso de segurança sobre uma vulnerabilidade de alta gravidade que afeta o roteador sem fio TL-WR940N V6. A falha, registrada como CVE-2026-12935 (CVSS de 8.7), pode permitir que invasores não autenticados provoquem negação de serviço ou executem código remo…
Over the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access.
O grupo INC Ransomware está explorando ativamente duas vulnerabilidades recentes em appliances SonicWall SMA1000 para obter acesso root e realizar movimentação lateral, de acordo com um relatório publicado pela Resecurity. As falhas, rastreadas como CVE-2026-15409 (CVSS 10.0) e C…
A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' browsers, ultimately delivering CountLoader to Windows and macOS devices and a new remote access trojan named DeviceManager to Windows systems. [...]
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information. [...]
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments. …
A N-able alertou os clientes que hackers estão explorando uma vulnerabilidade de bypass de autenticação (CVE-2026-18577) que afeta servidores N-central, tanto hospedados quanto on-premises. A empresa publicou no domingo, 2 de agosto, o hotfix 2026.3.1.7 para corrigir o problema, …
N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]
Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victim's screen. Unit 42 detailed three attack paths against Chrome's Google Password Manager cloud auth…
