Pesquisadores da Kaspersky descobriram um ataque de grande escala à cadeia de suprimentos (supply chain) através do software DAEMON Tools, utilizado para montagem e uso de imagens de disco. O relatório técnico publicado no site Securelist revela que os instaladores do programa, d…
A Meta corrigiu uma vulnerabilidade de média severidade no WhatsApp que poderia permitir o uso da integração com Reels do Instagram para acionar URLs maliciosas em dispositivos das vítimas. A falha foi rastreada como CVE-2026-23866. O problema está relacionado à validação incompl…
A Qualcomm divulgou correções para um conjunto de vulnerabilidades em softwares proprietários e de código aberto usados em chipsets da empresa, incluindo falhas críticas que podem permitir execução remota de código. A atualização é relevante porque componentes da Qualcomm estão p…
In hard-to-detect attacks, hackers are dropping the CloudZ RAT and a fresh plugin, Pheno, to hijack the Windows-based bridge between PCs and smartphones.
Palo Alto Networks warned customers today that a critical-severity unpatched vulnerability in the PAN-OS User-ID Authentication Portal is being exploited in attacks. [...]
Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool (RAT) and a previous undocumented plugin dubbed Pheno with the aim of facilitating credential theft. "According to the functionalities of the CloudZ RAT and Pheno…
DataDome researchers uncovered a massive low and slow DDoS attack that delivered 2.45 billion requests using 1.2 million IP addresses.
Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software has been exploited in the wild. The vulnerability, tracked as CVE-2026-0300, has been described as a case of unauthenticated remote code execution. It carries …
As the war with Iran continues, breach attempts targeting the United Arab Emirates tripled in a few weeks — many targeting critical infrastructure.
O Brasil está entre os países com maior número de infecções causadas pela distribuição de malware por meio do site oficial do Daemon Tools, software popular para montagem de imagens de disco. Segundo a empresa de antivírus Kaspersky, a plataforma oficial do programa vem dissemina…
A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers' systems with a mix of rootkit, backdoor, and credential-stealing capabilities. [...]
Info is scant, but such breaches can reveal where a security product's controls are located and how detections are designed, giving attackers a leg up.
Daemon Tools users: It's time to check your machines for stealthy infections stat.
O boletim de segurança Android publicado ontem revela que o Google descobriu e está corrigindo uma vulnerabilidade crítica na plataforma (CVE-2026-0073, ainda sem CVSS). Ela permite a execução remota de código por um atacante em proximidade física (adjacente), sem necessidade de …
Hackers trojanized installers for the DAEMON Tools software and since April 8, delivered a backdoor to thousands of systems that downloaded the product from the official website. [...]
A 23-year-old university student in Taiwan was arrested for interfering with the TETRA communication system used by the country's high-speed railway network (THSR). [...]
A former Maryland hospital pharmacist who is alleged to have engaged in a multi-year cyber spying campaign is facing up […] The post Former Maryland Pharmacist Indicted Over 8-Year Cyber Spying Campaign appeared first on The HIPAA Journal.
The Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HTTP Server, including a severe vulnerability that could potentially lead to remote code execution (RCE). The vulnerability, tracked as CVE-2026-23918 (CVSS score…
A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from Kaspersky. "These installers are distributed from the legitimate website of DAEMON Tools and are signed with digital cert…
A proof-of-concept exploit (PoC) shows how someone with admin privileges can exploit the issue to steal passwords, and thus use them to engage in further malicious activity.
