AI-built ransomware toolkit automates EDR evasion, AD discovery
A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade endpoint detection and response (EDR) solutions. [...]
Ameaças Cibernéticas
1626 notíciasAndroid corrige zero-day explorado e 123 outras falhas
O Google anunciou ontem sua mais recente atualização do Android, que inclui correções para 124 vulnerabilidades, incluindo um zero-day explorado em ataques direcionados, conforme comunicado da empresa. A falha explorada, registrada como CVE-2025-48595, é descrita como um problema…
China Uses Dual-Method Cyberattack on Czech Orgs
China is stealing data from high-value targets via a sneaky, double-layer spear-phishing campaign that includes the Azureveil malware.
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Google on Monday released patches for 124 security vulnerabilities impacting its Android operating system for the month of June 2026, including one high-severity flaw in the Framework component that has come under active exploitation. Tracked as CVE-2025-48595 (CVSS score: 8.4),…
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
The Russian hacking group known as Gamaredon has been attributed to the continued exploitation of a WinRAR vulnerability to deliver multiple malware families aimed at data theft and propagation. Per Sekoia, the activity involves the weaponization of CVE-2025-8088, a path travers…
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability, CVE-2024-21182 (CVSS…
Ataque planta backdoor em 31 pacotes npm da Red Hat
A empresa de segurança de credenciais ReversingLabs descobriu um ataque coordenado em cadeia de suprimentos no escopo @redhat-cloud-services do npm – justamente o namespace da Red Hat. Ali, um invasor publicou, ontem, versões maliciosas de 31 pacotes em um intervalo de apenas 72 …
Fake ChatGPT Desktop App Ads Used to Push Password-Stealing Malware
Fake ChatGPT desktop app ads pushed password-stealing malware by abusing trusted AI links, hiding from scanners, and tricking users into downloads.
Instagram users locked out after Meta AI abused to steal accounts
Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they were the legitimate owners. [...]
Hackers Abused Meta’s AI Support Bot to Hijack Major Instagram Accounts
Hackers abused Meta’s AI support bot to hijack major Instagram accounts, bypassing security checks as videos showed the flaw before Meta fixed the issue.
Fraude do álbum da Copa usa 222 domínios e 14 IPs
Um relatório divulgado pela empresa brasileira DANRESA revelou que a campanha fraudulenta do álbum da Copa do Mundo FIFA 2026 opera como um ecossistema econômico maduro, abusando de servidores de nuvem legítimos e utilizando empresas intermediárias de fachada para lavar dinheiro …
Linha Fantasma: PF faz operação contra golpes que fingem ser centrais de banco
Golpes bancários foram alvos da Operação Linha Fantasma, deflagrada pela Polícia Federal (PF) nesta terça-feira (2). A ação mira no esquema da “falsa central telefônica”, que aborda vítimas através do envio de mensagens com um alerta de compra suspeita e um número 0800 para supos…
CISA flags two-year-old Oracle flaw as actively exploited in attacks
CISA has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was patched two years ago and is now actively exploited in attacks. [...]
New WordPress Malware Uses Steam Profile Comments to Hide C2 Instructions
GoDaddy researchers found WordPress malware using Steam Community profile comments to hide encoded command and control data, with nearly 1,980 sites affected.
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
AI-driven exploitation timelines are rapidly shrinking, and they are not going to stop shrinking. Vulnerabilities are being discovered, reproduced, and weaponized faster than ever in the history of enterprise security. As a result, the window between a vulnerability being disclos…
Configurações inseguras em contêineres abrem caminho para cibercriminosos
Configurações inseguras em contêineres estão abrindo caminho para cibercriminosos comprometerem ambientes Docker e Kubernetes, com risco de escape para o sistema hospedeiro e controle de recursos críticos da infraestrutura. O problema não está apenas em falhas de software, mas em…
Google fixes one actively exploited Android zero-day, 124 flaws
Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw exploited in targeted attacks. [...]
Patient Data Exposed in Cyberattacks on Dental Practices
Data breaches have been announced by Bridle Trails Family Dentistry, Verber Dental Group, and Bronsky Orthodontics. Across the three incidents, […] The post Patient Data Exposed in Cyberattacks on Dental Practices appeared first on The HIPAA Journal.
Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT
Cybersecurity researchers have disclosed details of a spear-phishing campaign likely undertaken by the Pakistan-aligned SideCopy group targeting Afghanistan's Ministry of Finance with an open-source remote access trojan called Xeno RAT. "The campaign opens with a spear phishing …
WP Maps Pro: falha crítica no WordPress
A vulnerabilidade CVE-2026-8732 (CVSS de 9.8) do plugin WP Maps Pro permite que atacantes não autenticados criem contas administrativas e assumam o controle total de sites WordPress afetados, conforme alerta publicado ontem pela empresa de segurança Defiant. A empresa afirma ter …