Kodak confirms data breach claimed by ShinyHunters extortion gang
Kodak has confirmed that it's working with external cybersecurity experts to investigate a security breach after hackers gained access to some of the company's data. [...]
Últimas Notícias
2545 notíciasCISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability…
Fileless Phantom Stealer Targets Browser Credentials
In addition to executing entirely in memory, the malware's infection chain incorporates other anti-analysis techniques designed to frustrate detection.
Security Community Slams US Ban on Exporting Mythos, Fable
An open letter signed by dozens of security experts asked the government to reverse export restrictions on Anthropic's Claude Fable 5 and Mythos 5 models.
Malicious JetBrains Marketplace plugins steal AI API keys from developers
At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. [...]
New Rokarolla Android malware targets 217 banking, crypto apps
A new Android banking trojan named Rokarolla is targeting 217 banking and cryptocurrency applications using an extensive set of 137 commands. [...]
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machine learning model upload and run code inside Google's serving infrastructure. Palo Alto Networks Unit 42, which found and reported the bug through Go…
Steam Workshop abused to spread malware via Wallpaper Engine app
Threat actors are abusing Steam Workshop, Valve's community hub for downloading game-related content, to push various malware hidden in wallpaper packages. [...]
SprySOCKS Windows Variant Abuses Kernel Drivers to Evade Detection
FishMonger, a China-nexus threat group, has deployed an undocumented version of the Linux backdoor against government targets in Honduras, Taiwan, Thailand, and Pakistan.
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively. Attacks involving BabaDeda Loader, obse…
Rokarolla Android Trojan Levels Up to Full Device Control, Persistence
The emerging malware, spread via fake TikTok and Chrome downloads, demonstrates an evolution by combining banking fraud with extensive device surveillance and remote control.
AHIP26 Recap: Less “What If?” and More “How?”
By Dave Anderson - The annual gathering of health plans, providers, policymakers, and technology partners covered many of the familiar topics: affordability, artificial intelligence, member engagement, value-based care, and an increasingly complex regulatory environment. But this…
IRhythm discloses data stolen from third-party applications in cyberattack
The cardiac monitoring company said that a threat actor has demanded payment in exchange for not publicly releasing the stolen data.
HIPAA’s New Data Security Expectations Require More Than Encryption – Security Boulevard
HIPAA’s New Data Security Expectations Require More Than Encryption Security Boulevard
Amos Stealer Targets macOS Keychain Files and Browser Passwords
Amos Stealer targets macOS users through fake downloads, stealing Keychain files, browser passwords, cookies, and developer configs for data theft.
Avochato Brings HIPAA-Compliant AI Texting to Healthcare – PR Newswire
Avochato Brings HIPAA-Compliant AI Texting to Healthcare PR Newswire
Avochato Brings HIPAA-Compliant AI Texting to Healthcare – Yahoo Finance Singapore
Avochato Brings HIPAA-Compliant AI Texting to Healthcare Yahoo Finance Singapore
Avochato Brings HIPAA-Compliant AI Texting to Healthcare – Yahoo Finance
Avochato Brings HIPAA-Compliant AI Texting to Healthcare Yahoo Finance
J&J commits $1B to expand contact lens production in Florida
The investment will add J&J’s manufacturing, packaging and distribution capabilities to meet growing demand for its contact lenses.
'Lorem Ipsum' Malware Pivots to ClickFix Delivery
New analysis shows the campaign, which uses compromised WordPress sites, may be linked to the ransomware and data extortion group Vice Society.