Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.
Atacantes comprometeram o pacote PyPI do projeto LiteLLM e publicaram imagens Docker maliciosas com um payload que rouba credenciais, segredos e variáveis de ambiente. O ataque à cadeia de suprimentos afetou todos os wheels do PyPI da versão 1.107.0, impactando sistemas Windows, …
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. eMudhra sai…
O GitLab publicou em 21 de outubro a correção de uma falha crítica que permite execução de código sem autenticação em instalações self-managed. Identificada como CVE-2026-110264, ela recebeu nota CVSS 10.0, a máxima da escala, e não tem contorno disponível. A causa é um estouro d…
A Lumu anunciou uma nova integração com o CrowdStrike Falcon Next-Gen SIEM. A integração incorpora os dados de comprometimento de rede identificados pela Lumu ao Falcon Next-Gen SIEM, onde podem ser correlacionados com informações de endpoints e outras fontes de telemetria de seg…
Insurers are split on AI risk: some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. [...]
O Node.js publicou em 21 de outubro atualizações de segurança para as linhas 26, 24 e 22, corrigindo dez vulnerabilidades, quatro delas de gravidade alta. As versões corrigidas são a 26.12.1, a 24.22.1 e a 22.23.4, segundo o aviso do projeto relatado pelo Cyber Security News. A m…
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment …
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
O Node.js lançou atualizações de segurança para as ramificações 26.x, 24.x e 22.x com o objetivo de corrigir dez vulnerabilidades, incluindo quatro falhas de alta severidade que afetam consultas DNS, verificações de certificados TLS e descompressão Brotli. As versões corrigidas s…
Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.
New York, NY, USA, 21st October 2026, CyberNewswire
360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.
Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates. [...]
Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites. [...]
A queda de energia em um data center do Google Cloud nos arredores de Londres interrompeu serviços de bancos britânicos, de acordo com a empresa, nesta terça-feira. O incidente começou às 3h08 no horário de Brasília, quando a região europe-west2 registrou falhas de rede e erros e…
Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised.
Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts. […
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could iss…
