A Vision Cybersecurity, empresa brasileira especialista em segurança digital, identificou uma expansão acelerada da atividade de infostealers na América Latina, com mais de 5 milhões de credenciais domésticas comprometidas e quase 100 mil credenciais corporativas expostas. A empr…
Four vulnerabilities allow attackers to exploit Dify, a platform for AI application building and management, to silently access and exfiltrate sensitive data.
A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remote code execution on Jellyfin servers under certain conditions, and can also trigger a denial-of-service condition in applications like Kodi, Emby, Nextcloud, PhotoPrism, and OBS Studio. [...]
Em resposta oficial ao avanço da massiva campanha de roubo de credenciais batizada de FortiBleed, a Fortinet emitiu um posicionamento técnico esclarecendo que as intrusões não estão associadas à exploração de novas falhas de segurança (zero-days) em seus produtos. De acordo com a…
Security firm SOCRadar says the large-scale FortiBleed campaign targeting Fortinet FortiGate devices used custom sniffers to harvest authentication secrets from compromised firewalls and steal credentials. [...]
Uma nova operação de cibercrime baseada na formação de redes zumbis, batizada de botnet AryStinger, comprometeu com sucesso milhares de roteadores da fabricante D-Link ao redor do mundo. A campanha maliciosa utiliza táticas de varredura em massa para identificar dispositivos de r…
Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors managed to tamper with the official release channels and push backdoor code. "Attackers compromised the vendor's build and distribution pipeline, injecting backdoor…
Apple has released a security update to patch a Beats Studio Buds flaw that let nearby hackers listen to conversations through the microphone.
A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on its host system simply by visiting a malicious webpage. [...]
Attackers are using multiple online channels — including GitHub, YouTube, and VirusTotal — to build an illusion of trust to spread a cross-platform clipboard hijacker.
A heap over-read in the Squid web proxy can leak another user's cleartext HTTP request, including any credentials or session tokens it carries, to anyone already allowed to send traffic through the same proxy. The bug traces to a 1997 FTP-parsing change and is still live in Squi…
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.
Threat actors can easily steal one-time passwords sent by text when they conduct a SIM swap attack. This can lead to account takeovers, so users must layer up their security measures.
Attackers no longer need to sift through massive credential dumps. They can pay others to do it for them. Flare explores how an emerging underground market searches stolen credential databases for specific companies, domains, and accounts. [...]
O ataque à plataforma de inteligência competitiva Klue resultou no comprometimento de contas de negócios de pelo menos cinco empresas de segurança, que tiveram dados de seus ambientes Salesforce comprometidos, conforme revelações publicadas no último fim de semana. A intrusão, de…
Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by means of a previously unreported malware loader dubbed OXLOADER. According to Elastic Security Labs, the campaign leverages malicious Google Ads as a starting point to distribute th…
A multi-platform malware campaign abuses fake trust signals to infect Windows and Mac users with a crypto clipper packed with 15,500 attacker wallets.
Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs are still not accounting for - how attackers are circumventing AI security programs by using legacy infrastructure to hijack AI agents. AI adoption is moving fa…
A CISA alertou que uma vulnerabilidade crítica no Splunk Enterprise está sendo explorada em ataques reais. A falha, identificada como CVE-2026-20253, afeta um componente interno ligado ao serviço PostgreSQL Sidecar da plataforma. O problema foi incluído no catálogo de vulnerabili…
Icarus extortion group used a legacy Klue Battlecards credential to bypass security and steal bulk Salesforce records from affected companies.
