Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review. The security issues affect Cisco Catalyst SD-WAN Software, regardless of device configuration, an…
O Django lançou as versões 6.0.8 e 5.2.17 para corrigir quatro vulnerabilidades que podem causar gravação de arquivos, requisições indevidas, negação de serviço e ataques de cross-site scripting. Desenvolvedores devem atualizar aplicações e servidores com prioridade. A falha mais…
Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScript cryptography library 12 years ago, the function supplied weak entropy that affected wallet apps used to generate recovery…
Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud, aggravated identity theft and a related conspiracy over the 2024 breaches of Snowflake customer accounts. The intrusions reached at least 165 organizations and exposed records…
Researchers are calling attention to the risks inherent in automated network device provisioning, using a world-leading device manufacturer as a case study.
Some needles were manufactured with incorrect dimensions, making it difficult to remove the stylet after placement.
HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam's console that hands over a managed agent's credentials, rat…
O cPanel corrigiu uma vulnerabilidade crítica que permite a clientes autenticados de serviços de hospedagem executar comandos SQL com privilégios administrativos. A falha pode expor bancos de dados de outros usuários e, em determinadas configurações, comprometer o próprio servido…
Unitel, Angola's dominant mobile operator, continues to recover from a cyberattack that caused outages the day of the government-owned telco's public offering.
O número de vulnerabilidades em aplicações web cresce a cada trimestre, e o ritmo não mostra sinal de desaceleração. A combinação entre lançamentos mais frequentes, equipes enxutas e pressão por velocidade está resultando em sistemas que chegam à produção com falhas que deveriam …
Uma vulnerabilidade de alta gravidade no roteador TP-Link TL-WR940N pode permitir que invasores executem códigos remotamente e assumam o controle do dispositivo. A falha foi registrada como CVE-2026-12935 e recebeu pontuação CVSS 8,7. O problema afeta especificamente a versão de …
Uma prova de conceito pública demonstrou como a vulnerabilidade CVE-2026-66066 pode levar à execução remota de código em aplicações Ruby on Rails. A falha, chamada KindaRails2Shell, afeta o processamento de arquivos pelo Active Storage. O problema atinge aplicações que usam o lib…
cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two o…
Galaxy Research linked a suspected Bitcoin theft of 1,367.05 BTC to weak COLDCARD seeds. Coinkite says updates cannot repair seeds already generated on devices.
A Bitcoin business rarely runs a simple website. Payment processors, exchanges, wallet services, blockchain analytics products and Lightning…
A HIPAA security risk assessment assesses threats to the privacy and security of PHI, the likelihood of a threat occurring, […] The post Free HIPAA Security Risk Assessment appeared first on The HIPAA Journal.
O Arch Linux suspendeu temporariamente a adoção de pacotes no Arch User Repository após identificar uma nova onda de contas assumindo projetos abandonados para inserir código malicioso. A medida foi ampliada posteriormente com o bloqueio de todos os novos envios ao AUR. A ação bu…
Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them. The vendor's July 31 security bulletin says nearly undetectable changes to .fsa and .hid outputs …
N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers. Its first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped buil…
A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin from thousands of wallets whose seeds were generated using a flawed random number generator. [...]
