Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks to deploy a backdoor. [...]
Ameaças Cibernéticas
1630 notíciasFake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (SaaS) offerings through information technology (IT) help desk vishing, adversary-in-the-middle (AitM) token theft, and res…
BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials. [...]
Luminis Health Working to Restore Systems After Cyberattack – The HIPAA Journal
Luminis Health Working to Restore Systems After Cyberattack The HIPAA Journal
Luminis Health Working to Restore Systems After Cyberattack
Luminis Health in Maryland is investigating a cyberattack that has taken certain systems offline. Data breaches have been announced by […] The post Luminis Health Working to Restore Systems After Cyberattack appeared first on The HIPAA Journal.
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It still appears, even with images blocked. A small detail, but an annoying one if that was a precaution you were counting on. Elsewhere, a t…
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. According to Huntress, three unrelated incidents have been found to use diver…
Ataques cibernéticos abalam cartórios franceses
Uma série de ataques hackers atribuídos a um grupo de cibercriminosos com base na América do Sul, está preocupando o governo francês e ainda não há confirmação de que tenham sido bloqueados. A informação, divulgada pelo jornal Le Monde, com base em documentos internos da Agência …
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed reports …
Hackers exploit new MikroTik RouterOS flaws to hijack routers
Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet. [...]
ConnectWise warns of new ScreenConnect flaw without patch
ConnectWise has shared temporary mitigation measures for a new ScreenConnect Remote Access vulnerability that it plans to patch later this week. [...]
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says the flaw has been exploited in the wild; its release notes say that is unconfirmed. N-able has released its fourth hotfix in …
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-p…
N-able patches max severity N-central flaw amid ongoing attacks
N-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote monitoring and management (RMM) platform. [...]
Falha no Elementor Pro permite upload de arquivos maliciosos
A Wordfence divulgou uma vulnerabilidade crítica de upload arbitrário de arquivos no plugin Elementor Pro, utilizado em cerca de 6 milhões de sites WordPress, o que permite a atacantes não autenticados enviar arquivos PHP executáveis e assumir o controle total do site. O alerta f…
IA derruba empresa e deixa relatório de 80 páginas
A Unidade 42 da Palo Alto Networks documentou um ataque de ransomware no qual agentes de inteligência artificial de fronteira, coordenados por um operador humano, comprometeram com ransomware uma empresa não identificada em menos de 10 horas, explorando mais de 50 técnicas do MIT…
Falsos CAPTCHAs comprometeram organizações alemãs
O Escritório Federal para Segurança em Tecnologia da Informação da Alemanha (BSI) emitiu um alerta sobre uma campanha que comprometeu a rede de um órgão estatal em agosto passado, conforme comunicado publicado na sexta-feira dia 4 de setembro. A análise do BSI indica que o modus …
Phishing criado por IA ilude filtros e camufla palavras
Pesquisadores da Microsoft identificaram uma campanha de phishing com grande volume de distribuição, que utiliza caracteres Unicode invisíveis do bloco de tags U+E0000 até U+E007F). Essa é uma técnica popular em injeção de prompt em IA, conhecida como “ASCII smuggling”, para ocul…
Attackers conceal phishing lures using invisible Unicode characters
Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters. [...]
Agentes da OpenAI invadem wiki para coordenar tarefas
Agentes autônomos de inteligência artificial da OpenAI foram descobertos utilizando uma wiki pública alemã, a DSE Wiki, para coordenar respostas, compartilhar técnicas para bypass de sandbox e colaborar em tarefas de recuperação de informação na web, conforme documentação do proj…