CISA has warned that threat actors have started exploiting the "Copy Fail" Linux security vulnerability in the wild, one day after Theori researchers disclosed it and shared a proof-of-concept (PoC) exploit. [...]
O grupo de ransomware Qilin, também conhecido como Agenda, foi observado usando uma nova tática de reconhecimento em servidores comprometidos para identificar alvos internos com mais rapidez e discrição. Em vez de recorrer a varreduras barulhentas na rede, os operadores passaram …
A previously unknown threat actor has been observed targeting government and military entities in Southeast Asia, alongside a smaller cluster of managed service providers (MSPs) and hosting providers in the Philippines, Laos, Canada, South Africa, and the U.S., by exploiting the …
Uma nova variante de ataque, batizada de ConsentFix v3, está sendo promovida em fóruns de hackers como uma técnica aprimorada que automatiza ataques contra o Microsoft Azure, dispensando senhas e contornando até a autenticação multifator (MFA). Evolução da técnica de abuso OAuth …
VECT 2.0 ransomware contains fatal flaws that permanently destroy files, making recovery impossible and rendering ransom payments useless for victims worldwide.
Cybersecurity researchers have uncovered a large-scale fraud operation that uses Telegram's Mini App feature to run crypto scams, impersonate well-known brands, and distribute Android malware. [...]
Em Invasion of the Body Snatchers, clássico da ficção científica de 1956 (com várias regravações ao longo das décadas), uma espécie alienígena invade a Terra de uma forma particularmente ardilosa: ao invés de chegar com naves de guerra e raios desintegradores, ela vai substituind…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently disclosed security flaw impacting various Linux distributions to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerability, t…
O e-mail segue como um dos principais pontos de entrada para ataques cibernéticos, com a Microsoft detectando 8,3 bilhões de tentativas de phishing apenas no primeiro trimestre de 2026. Os dados constam de um relatório publicado no dia 30 de abril pela Microsoft Threat Intelligen…
A new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in "Sorry" ransomware attacks. [...]
Scammers are abusing Google AppSheet and Google Drive to bypass security filters and steal thousands of Facebook Business accounts globally.
A empresa de cibersegurança Trellix identificou acesso não autorizado a uma parte de seu repositório de código-fonte, conforme a própria empresa confirmou em um comunicado publicado ontem, 1º de maio. Segundo a declaração da Trellix, ao tomar conhecimento do incidente, a empresa …
A new attack type, dubbed ConsentFix v3, has been circulating on hacker forums, building on the previous technique by adding automation and scaling potential. [...]
Two US cybersecurity experts jailed for aiding BlackCat ransomware group, extorting victims worldwide and exploiting insider access for profit.
Cybersecurity company Trellix has announced that it suffered a breach that enabled unauthorized access to a "portion" of its source code. It said it "recently identified" the compromise of its source code repository and that it began working with "leading forensic experts" to res…
Instructure, the company behind the widely used Canvas learning platform, has disclosed that it recently suffered a cybersecurity incident and is now investigating its impact. [...]
North Korean threat actors are pulling off historic cryptocurrency heists on a yearly, sometimes weekly basis now. AI might be helping them.
SOCRadar researchers have uncovered a massive Chinese cybercrime operation using the OpenClaw and Paperclip systems to automate global attacks.
A newly discovered Vietnamese-linked operation has been observed using a Google AppSheet as a "phishing relay" to distribute phishing emails with an aim to compromise Facebook accounts. The activity has been codenamed AccountDumpling by Guardio, with the scheme selling the stolen…
French authorities have detained a 15-year-old suspected of selling data stolen in a cyberattack on France Titres (ANTS), the country's agency for issuing and managing administrative documents. [...]
