Tomorrow's webinar explores how behavioral AI can help organizations detect sophisticated phishing, business email compromise, and account takeover attacks while reducing alert fatigue through automated investigation and response workflows. [...]
A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host. [...]
Compare leading and best email security solutions with AI threat detection, phishing defense, malware blocking, and DLP features for teams.
North Los Angeles County Regional Center Notifies Individuals About November 2024 Ransomware Attack The HIPAA Journal
North Los Angeles County Regional Center has started mailing notification letters to individuals affected by a November 2024 ransomware attack, […] The post North Los Angeles County Regional Center Notifies Individuals About November 2024 Ransomware Attack appeared first on The H…
A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical…
BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software that could allow attackers to bypass authentication. [...]
Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices' web management interfaces, the CERT Coordination Center (CERT/CC) warned Monday. …
BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices. The vulnerabilities ar…
Pesquisadores da Securonix identificaram uma sofisticada campanha de entrega de malware batizada de Veil#Drop, que combina engenharia social, sites comprometidos, carregadores JavaScript maliciosos, infraestrutura da Google (Blogspot) e execução em memória para implantar o PureLo…
O grupo de ameaça persistente avançada (APT) Armored Likho está conduzindo uma campanha de phishing que visa agências governamentais e o setor de energia elétrica no Brasil, na Rússia e no Cazaquistão, conforme revelou ontem a Kaspersky em relatório técnico. O grupo está utilizan…
Spanish police and the FBI arrested an alleged Cyber Army of Russia Reborn member as international efforts against pro Russia cyberattacks continue worldwide.
Depois de anos em que a maior parte dos ataques cibernéticos se concentrava na nuvem e nos dispositivos dos usuários, os criminosos voltaram a mirar a infraestrutura de rede das empresas. É o que mostra a segunda edição do State of the SOC Report 2026, estudo da N-able baseado na…
Atacantes estão explorando uma vulnerabilidade de gravidade máxima no Adobe ColdFusion, registrada como CVE-2026-48282, conforme alertou ontem a empresa de inteligência em vulnerabilidades KEVIntel. A falha afeta as versões 2025.9, 2023.20 e anteriores da plataforma de desenvolvi…
A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhstan.
Attackers wasted little time targeting the latest memory disclosure flaw in Citrix's NetScaler products, after researchers published a proof-of-concept exploit (PoC).
A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google account credentials from marketing professionals. [...]
Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into installing the EtherRAT malware, giving attackers initial access to corporate networks. [...]
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations. The activity, which has primarily singl…
An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.
