Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attackers to hijack all user mailboxes. [...]
Um pesquisador publicou um exploit chamado HardBreacher que demonstra uma falha de elevação de privilégios no Kaspersky Endpoint Security para Windows. A Kaspersky confirmou o problema e informou que a correção já foi distribuída aos usuários. O código foi divulgado por Nightmare…
The post Why Healthcare Can’t Wait to Rethink Patching and Incident Response appeared first on Clearwater.
The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending platform allowed an attacker to borrow $74 million. [...]
Microsoft is investigating a widespread service issue causing authentication issues and email delays and failures for Exchange Online customers. [...]
ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or continue tasks. [...]
Berlin's city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang listed it on their data leak site. [...]
Microsoft has confirmed that mouse settings are being reverted on Windows 11 systems after installing the KB5120998 August 2026 non-security preview update. [...]
Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according t…
The post Why Healthcare Can’t Wait to Rethink Patching and Incident Response appeared first on Clearwater.
Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026. The vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was publi…
PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes. [...]
Omdia's Theresa Lanowitz talks with the Dark Reading News Desk about the potential — and risks — of using agentic AI for penetration testing, red teaming, and other practices.
For the second time in two years, Medtronic has pulled capsules from the market over a fault that could obstruct patients’ airways.
The attack has affected the company’s ability to manufacture products and to process and ship customers’ orders, and there is still no timeline for restoration.
By Mark Ferrari - Healthcare has gotten very good at producing third-party risk scores. We have platforms, dashboards, questionnaires, and assessments that can generate a number for almost any vendor relationship. Leaders like scores. They are simple. They are comparable. They fi…
AI is accelerating vulnerability discovery, putting pressure on systems built to enrich, prioritize, and remediate flaws at a slower pace. Action1 explains why defenders increasingly need to correlate multiple intelligence sources and turn vulnerability data into faster remediati…
The surge of AI-powered vulnerability reports is driving down bug bounty prices, and that could spell trouble for independent researchers.
A Veeam corrigiu uma vulnerabilidade crítica no Veeam ONE que pode permitir a um invasor remoto e não autenticado forçar tentativas de autenticação SMB a partir da conta de serviço da plataforma. A falha é identificada como CVE-2026-65641 e recebeu pontuação CVSS 9.3. O problema …
A Boston Scientific identificou na última segunda-feira (25 de agosto) um incidente de segurança que afeta seus sistemas de TI, causando interrupção na rede e impedindo o processamento de pedidos e envios de produtos, conforme comunicado da empresa publicado ontem (26 de agosto).…
