Microsoft discovers new lightweight backdoor that steals cryptocurrency
Crypto Clipper spreads over USB and communicates over Tor.
Últimas Notícias
2545 notíciasGentlemen ransomware uses multiple EDR killers to disable defenses
The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (EDR) killers to help affiliates evade detection in attacks. [...]
Iffel International Launches One Brain for Medical Practices and Insurance Agencies to End Costly Communication Failures – EIN Presswire
Iffel International Launches One Brain for Medical Practices and Insurance Agencies to End Costly Communication Failures EIN Presswire
Novo Nordisk Breach Exposes Software Development Pipeline Risk
A leaked GitHub token underscores what most organizations get wrong: Treating secrets management as a tooling problem rather than an identity problem.
Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds
The vulnerability, disclosed 12 months ago, affects multiple manufacturers.
MacBook Neo vs Windows Laptops for Cybersecurity Tasks
There is no one-size-fits-all cybersecurity laptop. We’ll examine real-world work scenarios, tool compatibility, and trade-offs that impact a security professional’s day-to-day work.
HHS’ Office for Civil Rights Settles Ransomware Investigation with Health Plan – HHS.gov
HHS’ Office for Civil Rights Settles Ransomware Investigation with Health Plan HHS.gov
Operation Escaneo Signals Shift in LatAm Threat Landscape
The threat group's curious business model may combine opportunistic monetization alongside intel collection, without much coordination between the two.
Operation Endgame Disrupts SocGholish Malware Infrastructure
International law enforcement dismantled TA569's SocGholish infrastructure, taking down over 100 C2 servers and remediating nearly 15,000 compromised websites.
Nintendo confirms data stolen in WebMD subsidiary cyberattack
Nintendo of America has confirmed to BleepingComputer that threat actors stole survey data from the third-party TinyPulse service used internally, but its systems were not compromised. [...]
Airia Wins Advancement of AI in Healthcare Award at 2026 Pinnacle Awards – The Manila Times
Airia Wins Advancement of AI in Healthcare Award at 2026 Pinnacle Awards The Manila Times
FIFA Bug Exposed World Cup Streams to Remote Takeover
A hacker could have "Rickrolled" the World Cup — or worse — thanks to FIFA's unenforced Entra access controls.
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems. The vulnerabilities are listed below - CVE-2026-42530 (CVSS v4 score: 9.2) - A use-after-free vulnerability in …
Bridging the Divide in Whole-Population Care
Newly released FINN Voices episode with Beth Friedman and Meghan Harris, President and Chief Operations Officer at Acentra Health, for an engaging conversation about health analytics and the community drivers of health. The post Bridging the Divide in Whole-Population Care appea…
Salesforce Data Thefts Continue via Klue App Compromise
Klue's Battlecards is now the third integrated application that has been compromised to steal customers' Salesforce data, and victims include Huntress, the cybersecurity vendor.
USB worm spreads crypto-stealing malware via Windows shortcut files
Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities and using the Tor network to conceal communication. [...]
Zoll receives FDA warning letter over quality concerns
The FDA cited problems with some of Zoll’s ventilators, automated external defibrillators and electrodes.
Avochato Brings HIPAA-Compliant AI Texting to Healthcare – MarTech Cube
Avochato Brings HIPAA-Compliant AI Texting to Healthcare MarTech Cube
What Businesses Should Know Before Migrating Their CMS
Plan your CMS migration with clean content audits, SEO safeguards, tested data transfer, integrations, staff training, and a safe launch rollback plan with care.
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat links turned into malware delivery paths. macOS attacks ran in memory and left almost nothing behind. Cloud agents looked like hel…