Microsoft has warned of an active cryptojacking campaign that makes use of artificial intelligence (AI) chatbot interactions as a mechanism for surfacing malicious download sites. "This emerging delivery technique extends social engineering beyond conventional search results and…
Relatório da Check Point Research aponta operações do grupo Nimbus Manticore, ligado à Guarda Revolucionária do Irã, contra setores de aviação e software nos Estados Unidos, Europa e Oriente Médio. Os ataques ocorreram entre fevereiro e abril, durante o conflito regional envolven…
O FBI emitiu um alerta sobre o Kali365, plataforma de phishing como serviço (PhaaS) identificada em abril com foco no Microsoft 365. O golpe não rouba a senha das vítimas, mas engana o usuário para que ele mesmo autorize o acesso de cibercriminosos a e-mails do Outlook, documento…
Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell. [...]
"BadHost" was found in Starlette, a package with 325 million weekly downloads.
In just six hours, the campaign quietly pushed thousands of malicious commits to more than 5,500 GitHub repositories, stealing credentials, developer secrets, and more.
TeamPCP, the hackers behind the Shai-Hulud worm, has done significant damage to the open source ecosystem. But it's not necessarily due to skill alone.
Cybercriminals are using SEO poisoning and fake Gemini and Claude installer sites to infect developers with fileless malware and steal data.
Anthropic says its Claude Mythos AI identified more than 10,000 software vulnerabilities in one month, including critical flaws in open-source code.
The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across nine countries on four continents in the first quarter of 2026. The activity targeted industrial and electronics manufacturing, education and public-secto…
Códigos de uso único para acessar e recuperar contas da Microsoft foram enviados para diferentes endereços de e-mail, mesmo sem serem solicitados, nos últimos dias. É o que mostram relatos compartilhados com o Canaltech. Como a Microsoft quer reinventar a segurança digital na …
Every single day, hackers are finding new ways to crash websites and steal data. But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks faster, stronger, and much harder to s…
Um grupo APT iraniano passou a usar envenenamento de SEO para distribuir um instalador falso do Oracle SQL Developer e infectar máquinas Windows com uma nova backdoor. A campanha foi atribuída ao Nimbus Manticore, também rastreado como UNC1549, ligado ao Corpo da Guarda Revolucio…
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to be met. The vulnerability, tracked as CVE-2026-45659, carries a CVSS score of 8.8. …
Pesquisadores identificaram um forte aumento em varreduras contra interfaces de gerenciamento de firewalls SonicWall, levantando preocupação sobre uma possível fase de reconhecimento antes da divulgação ou exploração de novas falhas. A atividade foi observada entre 9 e 18 de maio…
Multi-factor authentication (MFA) was supposed to close a critical gap in identity security. It meant that, even if an attacker possessed the account credentials, they couldn't log in without the second factor. While that logic was sound, attackers have now figured out that they …
The Iranian state-sponsored threat actor known as Nimbus Manticore (aka Screening Serpens and UNC1549) has been attributed to a fresh campaign using lures impersonating organizations in the aviation and software sectors across the U.S., Europe, and the Middle East following the j…
A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System (LMS) popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and ultimately facilitate the deployment of Cobalt Strike Beacon. The vulner…
Pesquisadores da GreyNoise detectaram um aumento expressivo na varredura de APIs de gerenciamento do SonicOS, sistema operacional dos firewalls da SonicWall, entre 9 e 18 de maio. O pico ocorreu no dia 12, com aproximadamente 597 mil sessões registradas em um único dia, um cresci…
Uma operação de ataque à cadeia de suprimentos, batizada de Megalodon, comprometeu mais de 5.500 repositórios no GitHub por meio de commits automatizados e falsos. Os invasores injetaram workflows do GitHub Actions contendo payloads projetados para roubar credenciais, chaves, tok…
