Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores. [...]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical. [...]
ShinyHunters defaced Clop's Dark Web site and claims to have stolen victim data, potentially exposing organizations that paid ransoms to renewed extortion attempts.
Victims have been identified in Africa, including in Kenya and Uganda.
Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component. [...]
A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17. Micros…
The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and siphoned funds or account credentials from over 7,000 cryptocurrency wallets, according to a new joint cybersecurity advisory. …
Clop responds to ShinyHunters after its leak site takeover as the group demands an eight-figure payment, interest and a public apology in their escalating feud.
Pesquisadores de segurança detalharam uma campanha chamada EtherHiding, que esconde a infraestrutura de comando e controle dentro de contratos inteligentes na rede Polygon. A carga final é uma extensão de navegador que funciona como trojan bancário. Em vez de trazer endereços fix…
O grupo WaterPlum, também conhecido como Contagious Interview e ligado à Coreia do Norte, infectou ao menos 30 mil computadores em mais de 100 países entre dezembro de 2025 e julho de 2026. A apuração é do Internet Crime Complaint Center, o IC3. Ao menos US$ 10,7 milhões em cript…
Pesquisadores da LastPass, em colaboração com a Delphos Labs, detalharam uma campanha de roubo de informações batizada de Rapuncel, que usa um driver com assinatura válida da Microsoft para desativar as defesas do computador antes de coletar senhas. O driver aparece como Alinubx.…
A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people already trust: code that takes a bad turn, old payloads coming back, exposed systems, weak checks, fake fixes, and attack path…
Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive data from compromised hosts. The backdoor "automatically harvests and exfiltrates business documents, watches the filesystem for…
FamousSparrow is targeting Latin American governments with SparroWocky, a new C++ backdoor that exfiltrates files, takes screenshots and evades security tools.
Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.
A CISA incluiu no catálogo de vulnerabilidades exploradas três falhas do kernel do Linux. A inclusão significa que houve confirmação de uso em ataques reais e obriga as agências civis do governo federal dos Estados Unidos a aplicar as correções dentro do prazo previsto na diretiv…
Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. "ChainScript has appeared under multiple build names, including ComponentTask33, UpdateDigital, HostShared, and OrchidViolet66, while presenting i…
The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology (IT) services industry, once again highlighting how the adversary continues to target developers to breach target ne…
A Huge Networks, empresa brasileira especializada em mitigação de DDoS, detectou crescimento de 85% no volume de ataques cibernéticos nos primeiros sete meses de 2026, segundo dados de sua infraestrutura de proteção divulgados em comunicado. Em julho, a companhia mitigou 6,86 Tbp…
A Vision Cybersecurity apresentou ao mercado a Vision Overtone, plataforma de detecção e resposta a ataques cibernéticos que age antes que a ameaça se concretize. O lançamento ocorreu na semana passada, durante o Mind the Sec, principal evento de cibersegurança da América Latina,…
