Five Eyes Warns Chinese Spies Are Using Fake Job Ads to Target Military Staff
Five Eyes warns that Chinese spies are using fake job ads on LinkedIn, Indeed, and Upwork to target military staff and steal sensitive data.
Ameaças Cibernéticas
1627 notíciasFake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
Cybersecurity researchers have flagged a large-scale operation that impersonates open-source and freeware projects to funnel unsuspecting users through a Traffic Distribution System (TDS) and deliver malware families like Remus Stealer, AnimateClipper, and the SessionGate framewo…
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months
Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out in small, repeated batches and routing it through Dropbox and OneDrive so the traffic blended into normal cloud activity. Symante…
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer, a popular Magento full-page cache extension, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the …
Pakistan Spies on Afghan Finance Ministry With Xeno RAT
Despite broadly connected digital infrastructure, standard fare TTPs are enough to cause trouble for Afghanistan's porous cybersecurity.
Copa do Mundo: fraudes digitais exploram torcedores
Pesquisadores em segurança digital identificaram um aumento de campanhas fraudulentas relacionadas à Copa do Mundo de 2026, que mobiliza milhões de torcedores em todo o planeta. A combinação entre grande volume de informações e clima de euforia favorece a ação de criminosos, que …
Falha no Linux permite escapar de contêineres
A agência de segurança cibernética dos EUA (CISA) alertou ontem (2 de junho) sobre a exploração ativa da vulnerabilidade CVE-2022-0492 (CVSS 7.8) no kernel do Linux, que permite que invasores escapem de contêineres e escalonem privilégios. A falha, descrita como autenticação inad…
Chinese hackers use new Atlas RAT malware in European cyberattacks
A Chinese-speaking cybercrime group has expanded its targeting to the European space, deploying previously undocumented malware and the Atlas backdoor. [...]
Attackers Use AI to Automate EDR Evasion Testing
Python scripts were used to test malware against endpoint detection and response agents from Sophos, CrowdStrike, and Windows Defender.
CISA warns of cyberattacks targeting fuel tank monitoring systems
CISA, the FBI, the NSA, the Department of Energy, and other US government partners are warning that hackers are targeting internet-exposed automatic tank gauge (ATG) systems used to monitor fuel and liquid storage tanks across various critical infrastructure sectors. [...]
Tropical Blend: Cyber & Politics Ramp Up Across Latin America
China-linked espionage groups have attacked at least a dozen nations in the region, gathering information on maritime shipping, oil production, and other geopolitical interests.
WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
A single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger could have hijacked Google Gemini's voice assistant on Android and made it open a victim's connected windows, fake a message from their boss, push the phone into a Zoom call, or quietly pois…
New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute
A new denial-of-service (DoS) attack dubbed HTTP/2 Bomb can be launched from a single machine to take down web servers within seconds. [...]
Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover
A disabled security setting meant to protect authentication across Android versions of key apps like Word, PowerPoint, and Excel paved the way for attackers to steal logins and data.
Today’s Cybersecurity Prognosis: Emerging Threats and Trusted Foundations
By Freddie Sanchez - The recent Canvas data breach sent shockwaves through education, but it’s a situation all too familiar for those of us in healthcare. For years, our industry has consistently been a top target for bad actors, and that trend is unlikely to change anytime soon.…
Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
Cybersecurity researchers have flagged a new malspam campaign that makes use of Google's DoubleClick domain as a way to evade detection and ultimately deliver a remote access trojan (RAT) named DesckVB RAT. "Before the victim ever reaches attacker-controlled infrastructure, the …
CISA warns of active attacks exploiting Android, Linux bugs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting vulnerabilities in the Linux kernel and Android operating system. [...]
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits account-token sharing to trusted Microsoft apps. Any other app on the same phone could ask for the signed-in user's token and get it, then read email, op…
Singing River Health System: 54K Individuals Affected by December Cyberattack
Singing River Health System in Mississippi has issued an update on a cybersecurity incident that was first announced in December […] The post Singing River Health System: 54K Individuals Affected by December Cyberattack appeared first on The HIPAA Journal.
Como a IA está reduzindo o tempo entre detecção e resposta a incidentes
Em um ataque bem conduzido, o tempo é o recurso mais valioso para o atacante. Quanto mais tempo uma ameaça permanece ativa sem ser detectada, maior o dano potencial. Por anos, a segurança corporativa operou em um modelo essencialmente reativo: algo acontecia, o alerta era gerado,…