Uma nova campanha de infostealer está usando um falso instalador do OpenClaw para roubar credenciais de carteiras de criptomoedas, gerenciadores de senhas e extensões de autenticação instaladas em navegadores. O OpenClaw é apresentado como um assistente pessoal de IA de código ab…
A Microsoft corrigiu três vulnerabilidades críticas que afetavam o Microsoft 365 Copilot e o Copilot Chat integrado ao Microsoft Edge, com risco de exposição de informações sensíveis em ambientes corporativos. As falhas foram divulgadas em 7 de maio de 2026 e são rastreadas como …
Hackers are abusing Vercel GenAI to create convincing phishing sites that mimic major brands, including Microsoft, Adidas, and Nike, making scams harder to detect.
A new variant of the TrickMo Android banking malware, delivered in campaigns targeting users across Europe, introduces new commands and uses The Open Network (TON) for stealthy command-and-control communications. [...]
A malicious Hugging Face repository managed to take a spot in the platform's trending list by impersonating OpenAI's Privacy Filter open-weight model to deliver a Rust-based information stealer to Windows users. The project, named Open-OSS/privacy-filter, masqueraded as its legit…
Matthew Knoot and Erick Prince have been jailed for 18 months each for helping North Korean hackers infiltrate US firms through remote laptop farms.
O Centro Nacional de Segurança Cibernética (NCSC) prevê a exploração generalizada de novas vulnerabilidades da Ivanti. A agência cibernética americana CISA instruiu as agências governamentais a instalarem as correções disponíveis em até três dias. Ontem, a Ivanti emitiu um alerta…
A cPanel publicou, na última sexta-feira, dia 8 de maio, o segundo pacote emergencial de correções em menos de duas semanas, após um ataque de ransomware que comprometeu aproximadamente 44 mil servidores que utilizavam o software de gerenciamento de hospedagem. As informações con…
Attackers are abusing Google Ads and legitimate Claude.ai shared chats in an active malvertising campaign. Users searching for "Claude mac download" may come across sponsored search results that list claude.ai as the target website, but lead to instructions that install malware o…
A Agência de Segurança Interna da Polônia (ABW)publicou na semana passada seu novo relatório de atividades, documentando ataques cibernéticos direcionados a sistemas de controle industrial de estações de tratamento de água em pelo menos cinco municípios poloneses durante 2025. O …
German authorities have shut down a relaunch version of the criminal marketplace 'Crimenetwork' that generated more than 3.6 million euros, and arrested its operator. [...]
Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthenticated attacker to leak its entire process memory. The out-of-bounds read flaw, which likely impacts over 300,000 servers globally,…
JDownloader confirms a security breach where hackers manipulated official download links to distribute malicious files between 6 and 7 May 2026.
The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows and Linux installers, with the Windows payload found deploying a Python-based remote access trojan. [...]
A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project to deliver information-stealing malware to Windows users. [...]
Microsoft researchers warn of a new ClickFix campaign targeting macOS with fake guides on Medium and Craft to deploy AMOS and SHub Stealer via Terminal commands.
Um ransomware identificado com onome de VECT apresenta falhas em seu mecanismo de criptografia que tornam impossível a recuperação de arquivos grandes, eliminando qualquer possibilidade de descriptografia — mesmo quando a vítima paga o resgate. O alerta partiu de Rick W. Vanover,…
Across the country, schools and colleges postpone year-end tests.
Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER that's capable of targeting 59 banking, fintech, and cryptocurrency platforms. The activity is being tracked by Elastic Security Labs under the moniker REF3076. The malware family is a…
Cybersecurity researchers have discovered fraudulent apps on the official Google Play Store for Android that falsely claimed to offer access to call histories for any phone number, only to trick users into joining a subscription that provided fake data and incurred financial loss…
