DESTAQUES

Últimas Notícias

2589 notícias
Ameaças Cibernéticas The Hacker News 🇺🇸

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI agent and plant hidden instructions inside the model itself. The findings were shared with The Hacker …

Gestão de Riscos Bleeping Computer 🇺🇸

From Fake Workers to Account Recovery: The Growing Identity Verification Risk

Attackers are increasingly targeting the processes used to establish or recover identity rather than attacking the login itself. Specops explains how stronger identity verification can help organizations prevent fake workers and social engineering attacks from gaining legitimate …

Governança & IA MedTech Dive 🇺🇸

Qiagen names new CEO

Jonathan Pratt will take over the role on Sept. 1. The announcement ends Qiagen’s nearly 10-month search for a new chief executive.

Ameaças Cibernéticas The Hacker News 🇺🇸

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command in a specially crafted notebook, according to VulnCheck's CVE Numbering Authority (CNA) record. The CNA recor…

Ameaças Cibernéticas The Hacker News 🇺🇸

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. "While the malware is simply a single HTML page inside the npm package, and while downl…

Ameaças Cibernéticas The Hacker News 🇺🇸

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote access trojans (RATs) tracked as E4del and PINHOLE. While threat actors are known to abuse legitimate services to …

Link copiado!