Signal has introduced new in-app confirmations and warning messages as additional safeguards against phishing and social engineering attempts that could lead to various forms of fraud. [...]
Uma segunda vulnerabilidade grave no kernel do Linux, apelidada de “Dirty Frag“, permite que qualquer usuário com uma conta básica em um computador afetado assuma o controle administrativo total e realize escape de contêineres. A falha foi descoberta por um pesquisador independen…
Fortinet has released security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could enable attackers to run commands or arbitrary code. [...]
Researchers at Ontinue have discovered an undocumented malware campaign targeting developers with fake Claude Code installers to steal browser passwords and cookies.
Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution. Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver …
Pwn2Own Berlin 2026 reportedly reached full capacity for the first time, prompting rejected researchers to publicly disclose zero-day exploits targeting Firefox, NVIDIA, and AI platforms.
RubyGems, the standard package manager for the Ruby programming language, has temporarily paused account sign ups following what has been described as a "major malicious attack." "We're dealing with a major malicious attack on Ruby Gems right now," Maciej Mensfeld, senior product…
O Google Threat Intelligence Group (GTIG) identificou e interrompeu, pela primeira vez, um ataque de dia zero desenvolvido com auxílio de inteligência artificial. O grupo de cibercriminosos responsável,descrito como "proeminente", mas não identificado pela empresa, planejava usar…
A tokenizer library file present in Hugging Face AI models can be manipulated to hijack the model's outputs and exfiltrate data.
Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network (TON) for command-and-control (C2). The new variant, observed by ThreatFabric between January and February 2026, has been observed actively targeting banking and …
Operation HumanitarianBait uses fake aid documents, GitHub-hosted payloads, and Python spyware to target Russian-speaking victims.
Autoridades europeias desmantelaram a nova versão da plataforma CrimeNetwork, um dos principais mercados ilegais do submundo digital em língua alemã. A operação expôs mais de 22 mil usuários e mais de 100 vendedores ativos ligados ao ambiente criminoso. O suposto operador da plat…
Uma nova técnica chamada GhostLock demonstra como invasores podem paralisar compartilhamentos de arquivos do Windows sem criptografar dados, simulando o impacto operacional de um ataque de ransomware. O método explora comportamentos legítimos do SMB e do sistema operacional, sem …
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware targeting developers. [...]
Hundreds of npm packages infected by the self-propagating, credential-stealing worm from TeamPCP are related to the open source TanStack ecosystem.
O Google identificou o que considera um marco preocupante na evolução das ameaças digitais: um grupo criminoso teria usado inteligência artificial para descobrir uma vulnerabilidade desconhecida e desenvolver uma exploração contra uma ferramenta amplamente usada de administração …
Sete em cada dez brasileiros foram vítimas de golpe digital nos últimos 12 meses. O dado é do relatório "Estado dos Golpes no Brasil 2025", da Global Anti-Scam Alliance (GASA), que também aponta uma média de 252 tentativas de fraude por pessoa ao longo do ano. É nesse cenário que…
TeamPCP, the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and Guardrails AI as part of a fresh Mini Shai-Hulud campaign. The affected npm packages have been …
American educational technology company Instructure, the parent company of Canvas, said it reached an "agreement" with a decentralized cybercrime extortion group after it breached its network and threatened to leak stolen information from thousands of schools and universities. In…
Production-version patches are coming online and should be installed pronto.
