J&J recalls Impella controllers over hardware issues
The correction is the latest recall that J&J’s Abiomed has issued in recent years for Impella devices and controllers.
Gestão de Riscos
316 notíciasOver 73,000 French govt employees affected in Tchap messenger breach
The French government revealed that a recent breach of its Tchap encrypted messaging platform affects the accounts of over 73,000 employees in the French public sector. [...]
Segmentation Works for OT If Operators Are Paying Attention
Operational technology security remains as difficult as ever, with even the best practice recommendation falling short.
The Hidden Security Risks of Poor Software Testing
Poor Software Testing can expose hidden flaws, vulnerable dependencies and weak controls, increasing breach risks, downtime and costly fixes after release.
AI Broke Vulnerability Management. That's Why CISOs Are Moving Budget to BAS.
For thirty years, vulnerability management ran on a buffer: the months between when a vulnerability was found and when someone could figure out how to weaponize it. The solution was straightforward enough; triage by severity, schedule the fix, validate, and move on. The buffer wa…
Microsoft fixes BitLocker recovery bug on Windows Server 2025
Microsoft has resolved a known issue causing some Windows Server 2025 devices to boot into BitLocker recovery after installing the April 2026 security update. [...]
GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
GitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat attack techniques that abuse the "npm install" command to trigger the execution…
GitHub announces npm security changes to tackle supply-chain attacks
GitHub has announced that npm v12, expected next month, will introduce several security-focused changes aimed at blocking supply-chain attacks abusing behaviors triggered by the 'npm install' command. [...]
Patch Tuesday recorde, com 200 falhas e três zero days sob ataque
A Microsoft publicou ontem atualizações para quase 200 vulnerabilidades em seus sistemas Windows e softwares suportados, um recorde no ciclo mensal de Patch Tuesday. Um total de de 35 dessas falhas receberam a classificação “crítica”, e o exploit para pelo menos três delas está d…
Empresas ignoram plano de recuperação e agravam crises
A discussão sobre cibersegurança no Brasil está concentrada na camada de prevenção, mas o problema central já é a fragilidade dos planos de recuperação, segundo comunicado divulgado hoje pela Penso Tecnologia. Erik de Lopes Morais, COO da empresa, ressalta que “a maioria das empr…
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that could result in arbitrary code execution and information disclosure. The security flaw patched by Fortinet relates to a command injection vulnerability in FortiSan…
Bausch + Lomb to lay off employees in Missouri
The company plans to eliminate 119 positions by mid-December as part of a phased transfer of some production from the manufacturing site.
Microsoft: Some Windows PCs fail to install latest monthly updates
Microsoft warned customers on Tuesday that they may have issues installing the latest monthly updates on some Windows devices that were upgraded to Windows 11 24H2 or 25H2. [...]
Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar
Your pentest report looks clean. That might be the problem. Run automated pentesting long enough, and the new findings start to dry up. By the third or fourth run, fewer issues appear. The report looks stable. Leadership reads "stable" as "secure." It usually isn't. The work slo…
Certta lança agente de IA para combater fraudes digitais em tempo real
A Certta revelou nesta terça-feira (10) duas ferramentas para ajudar empresas a reagirem mais rápido a casos de fraudes digitais: o Flow, plataforma para montar e ajustar jornadas de verificação de identidade, e o Hubby, agente de IA que auxilia na gestão antifraude em tempo real…
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three flaws that have been publicly disclosed at the time of release. Of the 206 flaws, 39 are rated Critical, and 167 are rated Important in severity. This …
Microsoft June 2026 Patch Tuesday Fixes 206 Flaws and 3 Zero-Days
Microsoft’s June 2026 patch Tuesday resolves 206 vulnerabilities, including 3 critical zero-days and severe 9.8 CVSS kernel, network and HTTP.sys flaws.
Blame AI: Patch Tuesday Hits Record 206 CVEs
Voluminous patch updates could soon be the norm, as artificial intelligence accelerates the speed and scale of vulnerability discovery.
OpenClaw AI agent found falling for phishing attacks, spills user data
Phishing simulation on an OpenClaw email agent with various configuration profiles showed that it was susceptible to tactics commonly used to compromise human users. [...]
OpenSSL corrige falha grave identificada por IA
O projeto OpenSSL publicou hoje novas atualizações que corrigem 18 vulnerabilidades em seu código, incluindo uma falha de alta gravidade que abre caminho para a execução remota de código malicioso. A informação detalhada sobre as atualizações consta em um artigo técnico, apontand…