Over 900 automatic tank gauge (ATG) systems across the United States, used to monitor fuel and chemical storage tanks across various critical infrastructure sectors, have been found exposed online and are vulnerable to ongoing attacks. [...]
AI worms, or "viruses with wings and brains," adapt to new environments, seek out vulnerabilities, and will likely strike within a year, researchers say.
Hacking Group Claims Responsibility for Multi-Million-Record DentaQuest Data Breach The HIPAA Journal
Phishing, shadow AI, malicious extensions, and credential theft increasingly happen inside the browser. Keep Aware explains what the 2026 Verizon DBIR reveals about browser-layer security gaps and modern attacks. [...]
Wellesley, MA-based DentaQuest, a dental benefits administrator that manages the benefits for 32 million Americans, has announced it is actively […] The post Hacking Group Claims Responsibility for Multi-Million-Record DentaQuest Data Breach appeared first on The HIPAA Journal.
Threat actors are deploying an updated SHub Stealer variant named Reaper that exploits the native macOS Script Editor to bypass OS-level protections and compromise cryptocurrency assets.
O escritório de advocacia Weil Gotshal, sediado nos EUA, teria pagado entre USD 18 milhões e USD 20 milhões ao grupo de extorsão Luna Moth para evitar a publicação de dados confidenciais de clientes, conforme reportagem do portal Legal Cheek, citando informações do The Insurer. O…
Cybersecurity researchers have discovered a previously unreported threat cluster dubbed OP-512 that has been observed targeting Microsoft Internet Information Services (IIS) servers to deploy a bespoke web shell framework. ReliaQuest has assessed with moderate to high confidence…
Uma nova campanha maliciosa está usando pacotes npm comprometidos para roubar segredos de desenvolvedores, repositórios GitHub e ambientes de CI/CD. A ameaça, chamada IronWorm, foi desenvolvida em Rust e mira principalmente equipes de software, projetos Web3 e operações ligadas a…
A Cisco corrigiu uma vulnerabilidade crítica no Cisco Unified Communications Manager e no Unified Communications Manager Session Management Edition que pode permitir ataques de server-side request forgery contra sistemas afetados. A falha, rastreada como CVE-2026-20230, foi divul…
Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise. The vulnerability in question is CVE-2026-3300 (CVSS score: 9.8), a re…
Security researchers and the FBI are warning that a wave of FIFA-themed fraud is already hitting World Cup 2026 fans, days before the June 11 kickoff. Recent reports describe thousands of lookalike FIFA domains, banking malware hidden inside pirate streaming apps, and at least o…
On Thursday, Cisco warned of a high-severity, unpatched zero-day in the Cisco Catalyst SD-WAN Manager (tracked as CVE-2026-20245) actively exploited in attacks enabling root privilege escalation. [...]
The threat actor known as PCPJack has hijacked cloud servers associated with Amazon Web Services (AWS), Google Cloud, and Microsoft Azure to create a covert SMTP email relay network. "Compromised business servers across the U.S., Europe, and Asia were quietly converted into SMTP…
Like Shai-Hulud, the campaign targets developers to steal credentials and reuses them to propagate across the software supply channel.
The Windows version of the Hola Browser has been compromised in a supply chain attack that delivered an undeclared executable identified by researchers as a cryptocurrency miner. [...]
One of the world's most diverse, least-focused cybercrime groups is enlarging its footprint beyond East Asia.
The post Termite Ransomware: Steganographic In-Memory Attack Analysis appeared first on Clearwater.
Gartner analysts issued a call to action to bolster defenses against several emerging critical threats, such as deepfakes and prompt injections.
A new Magecart campaign is using Stripe's API infrastructure to host the credit card-stealing payload and the data exfiltrated from checkout pages. [...]
