FBI: Americans lost over $388 million to scams using crypto ATMs in 2025
The FBI says Americans have lost over $388 million last year to scams using cryptocurrency kiosks, also known as crypto ATMs or Bitcoin ATMs. [...]
Gestão de Riscos
316 notíciasCritical Microsoft Vulnerabilities Doubled: From Exposure to Escalation
Microsoft's total vulnerability count stayed steady in 2025, but critical flaws surged year over year. BeyondTrust breaks down why attackers are increasingly focused on privilege escalation and identity abuse. [...]
Falhas no PHP permitem vazamento de memória ao processar imagens
Duas vulnerabilidades em funções de processamento de imagens do PHP podem permitir vazamento de memória sensível e ataques de negação de serviço a partir de arquivos JPEG especialmente criados. As falhas afetam recursos usados por aplicações web, CMS, webmails e serviços que anal…
Microsoft confirms patching issues in restricted Windows networks
Microsoft says customers in restricted network environments may encounter Windows Update failures after installing the January 2026 optional non-security preview updates. [...]
Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare
Drupal has issued an alert stating that it intends to release a "core security release" for all supported branches on May 20, 2026, from 5-9 p.m. UTC. "The Drupal Security Team urges you to reserve time for core updates at that time because exploits might be developed within hou…
SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access
Critical security vulnerabilities have been disclosed in SEPPMail Secure E-Mail Gateway, an enterprise-grade email security solution, that could be exploited to achieve remote code execution and enable an attacker to read arbitrary mails from the virtual appliance. "These vulnera…
Microsoft confirms Windows 11 security update install issues
Microsoft has confirmed that the May 2026 Windows 11 security update (KB5089549) fails to install on some systems and triggers 0x800f0922 errors. [...]
Grafana Says It Rejected Ransom Demand After Source Code Theft
Grafana says hackers stole its source code after accessing a GitHub token, but no customer data or systems were affected.
Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt
Grafana has disclosed that an "unauthorized party" obtained a token that granted them the ability to access the company's GitHub environment and download its codebase. "Our investigation has determined that no customer data or personal information was accessed during this inc…
64% das violações com IA no Brasil envolvem dados sensíveis
O avanço da inteligência artificial (IA) nas empresas brasileiras já traz impacto direto sobre risco operacional e proteção de dados. É o que mostra o Netskope Threat Labs Report: Brazil 2026, que identifica que 64% das violações de políticas de dados em aplicações de IA generati…
Carl Zeiss says restructuring could affect up to 1,000 jobs
A weak investment climate in the Americas contributed to declines in the German company’s intraocular lens business in the first half of its fiscal year.
CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits
The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to remedi…
Empresas têm 10h para patches antes do ataque de exploits
A velocidade de exploração de vulnerabilidades caiu para menos de 10 horas após a divulgação pública, segundo o último boletim de inteligência de ameaças da empresa brasileira DANRESA, divulgado na semana de 27 de abril. O Brasil registra 3.711 ataques semanais por organização, u…
SecurityScorecard Snags Driftnet to Level Up Threat Intelligence
The new acquisition looks to boost visibility into third-party ecosystems that are becoming a bigger concern as vectors for supply-chain attacks.
When a Vendor Gets Breached, What Happens to Your Patient Data? – Healthcare IT Today
When a Vendor Gets Breached, What Happens to Your Patient Data? Healthcare IT Today
Banco do Nordeste perdeu R$ 146,6 milhões em ciberataque
O Banco do Nordeste (BNB) reportou em seu balanço do primeiro trimestre de 2026 uma perda de R$ 146,6 milhões classificada como “item não recorrente”, diretamente associada ao incidente de segurança cibernética ocorrido em janeiro. O documento foi divulgado ontem ao mercado. Impa…
How AI Hallucinations Are Creating Real Security Risks
AI hallucinations are introducing serious security risks into critical infrastructure decision-making by exploiting human trust through highly confident yet incorrect outputs. When an AI model lacks certainty, it doesn’t have a mechanism to recognize that. Instead, it generates t…
Dell confirms its SupportAssist software causes Windows BSOD crashes
Dell confirmed that its SupportAssist software is causing blue-screen crashes on some Windows systems following a wave of user reports about random reboots affecting Dell devices since Friday. [...]
Webinar tomorrow: Why security alone won't stop modern attacks
Tomorrow's webinar examines why prevention alone is no longer enough against modern cyberattacks. The session explores how organizations combine security, backups, and recovery planning to improve cyber resilience after attacks. [...]
Microsoft fixes BitLocker recovery issue only for Windows 11 users
Microsoft has addressed a known issue causing some Windows 11 systems to boot into BitLocker recovery after installing the April 2026 Windows security updates. [...]