FDA updates Hologic BioZorb recall, citing 252 injuries
While the company no longer manufactures the radiographic markers, healthcare providers are still advised to monitor patients who have had them implanted.
Gestão de Riscos
306 notíciasSafe Events Start With Threat Intel and Digital Security
Planning ahead to defend against cyber threats is the work that keeps events uneventful.
Volume de falhas reportadas ao GitHub supera capacidade de revisão
O GitHub Advisory Database atingiu um volume recorde de publicações em maio de 2026, com 1.560 alertas de segurança revisados. O número representa mais de cinco vezes a média mensal normalmente registrada pela plataforma. O crescimento mostra uma pressão cada vez maior sobre o ec…
Microsoft Accelerates Post-Quantum Cryptography Shift to 2029
Microsoft on Tuesday said it's accelerating its quantum safe security roadmap, stating technology advances in quantum computing are making it essential to replace existing encryption standards sooner than previously expected. "Advances in quantum research and development have sh…
Adobe patches seven max severity ColdFusion, Campaign flaws
Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform and the Campaign Classic marketing automation platform. [...]
Microsoft accelerates quantum-safe roadmap as risks grow
Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are bringing the need to replace today's encryption standards sooner than previously expected. [...]
Vendor Incidents Affected 85% of Healthcare Practices in the Past 12 Months
It is only a matter of time before a cyberattack is directly linked to the death of a patient, according to new research from the managed IT and security service provider Omega Systems. Last year, 52% of healthcare organizations expected a cyberattack to result in a patient fatal…
Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs
Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over three dozen flaws, including four vulnerabilities in WebKit that were discovered using artificial intelligence (AI) tools like Anthropic Claude and OpenAI Codex Security. The Web…
Amazon Kindle E-Reader: Worth It, and How to Afford More Books?
See whether an Amazon Kindle is worth buying, how it compares with other e-readers, and practical ways to read more books without overspending each month today.
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either. Forums are talking, researchers are finding easy cracks, and defenders have more cl…
Hackers now exploit critical Oracle E-Business flaw in attacks
Attackers have begun exploiting a critical vulnerability (CVE-2026-46817) in the Oracle E-Business Suite (EBS) financial application, according to threat intelligence company Defused. [...]
Why Post-Quantum Cryptography Starts With Credentials
Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon be broken by quantum computers. Although no machine today can break elliptic curve cryptography or RSA, quantum hardware is adv…
Bucket hijacking preocupa empresas que usam AWS, Google Cloud e Azure
Um novo método de ataque chamado bucket hijacking pode permitir que invasores desviem fluxos de dados em nuvem para contas externas controladas por eles. A técnica afeta cenários em grandes provedores, incluindo Google Cloud, AWS e Microsoft Azure. O ataque explora uma caracterís…
Data breach exposes up to 14.2 million email logins at six ISPs
Japanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its email systems used by five other internet service providers (ISPs) in the country. [...]
Third-Party Breaches Teach Education Sector a Costly Lesson in Vendor Risk
Rising threats from third-party actors are forcing institutions to play defense to protect student data from ransomware and other attacks.
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
A high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer's cloud credentials. The path was short: a developer opens the repo, trusts the workspace, and Amazon Q does the rest. Amazon has patched it. Tracked as CVE-2026-12957 (CVSS …
Meeting Trump's 2030 Quantum Deadline Will be Expensive, Complex
Getting accurate visibility into IT and OT systems will be compounded by multivendor environments, misaligned update life cycles, and interoperability gaps.
Cibercriminosos capturam autenticação em golpe contra AWS Console
Uma campanha de phishing está mirando credenciais da AWS Console com páginas falsas capazes de capturar senhas e códigos de autenticação em tempo real. O ataque usa a técnica conhecida como adversary-in-the-middle, na qual o site fraudulento fica entre a vítima e o serviço legíti…
Falha no ManageEngine AD360 pode expor identidades e permissões de usuários
Uma falha de alta gravidade em produtos da ManageEngine pode permitir que invasores sem autenticação prevejam tokens de login único e acessem informações de identidade e permissões de usuários em ambientes integrados ao AD360. A vulnerabilidade foi identificada como CVE-2026-1137…
Supply chain na Europa virou alvo, alerta relatório
A Black Kite, empresa especializada em gestão de riscos cibernéticos de terceiros, publicou hoje seu primeiro relatório dedicado à Europa, no qual aponta que os ataques de ransomware no continente cresceram 55,1% no início de 2026 em comparação com o mesmo período do ano anterior…