Dutch govt disrupts malware botnet with 17 million infected devices
Dutch authorities have taken offline a massive botnet of 17 million devices and seized more than 200 servers at a local provider that supported the operation. [...]
Últimas Notícias
3599 notíciasO conceito de saúde deixou de ser reativo
Da medicina reativa à saúde conectada, tecnologias inteligentes transformam o cuidado, ampliam a longevidade e reposicionam o paciente no centro da jornada assistencial. The post O conceito de saúde deixou de ser reativo appeared first on Saúde Business.
With Complex Cloud Integrations, Small Errors Lead to Major Compromises
Researchers discover an exploit chain combining over-permissioned roles, secrets discovery, and non-human identities that could have compromised a popular automation service.
Google Chrome adds session cookie theft protection for all users
Google says the Chrome Device Bound Session Credentials (DBSC) security feature is now generally available and is rolling out to all users to prevent account takeovers. [...]
Cyber ataque é o risco mais temido pelos top CEOs
O índice de confiança de CEOs caiu para 47 pontos no segundo trimestre de 2026, ante 59 no trimestre anterior, segundo pesquisa do The Conference Board em parceria com o Business Council – fórum de CEOs de 22 grandes multinacionais – divulgada em 28 de maio. Uma leitura abaixo de…
'The Com' Cyberattacks Support Violence & Sexploitation
Your organization's security failures have consequences for everyone else too, since this neo-Nazi-infested criminal gang uses its cyber winnings to support more violent and widespread crimes.
Usuários do Notepad++ devem atualizar após alerta sobre falhas críticas
O Notepad++ lançou uma atualização urgente para corrigir três vulnerabilidades de segurança, incluindo duas falhas críticas que podem permitir execução arbitrária de código em computadores Windows. A correção foi disponibilizada na versão 8.9.6.1, publicada em 26 de maio de 2026.…
New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks
A previously undocumented threat actor dubbed GREYVIBE has been attributed to ongoing and persistent attacks targeting Ukraine and Ukraine-related entities since at least August 2025. GREYVIBE, per WithSecure, is assessed to be a Russian-speaking group operating broadly in the R…
Veeam corrige falha que permite escalonamento de privilégios
A Veeam corrigiu uma vulnerabilidade de alta severidade no Veeam Backup & Replication que pode permitir escalonamento local de privilégios em ambientes corporativos. A falha é rastreada como CVE-2026-32996 e afeta builds da versão 13 anteriores à 13.0.2.29. O problema está ligado…
Man sent to prison for selling data of 7 millions elderly Americans
A North Carolina man was sentenced to more than 10 years in prison for selling the personal information of over 7 million elderly Americans to Jamaican scammers. [...]
Falha crítica no OpenVPN Connect permite execução de comandos
Uma vulnerabilidade crítica no OpenVPN Connect para macOS pode permitir que invasores locais executem comandos arbitrários com privilégios elevados. A falha é rastreada como CVE-2026-9560 e afeta versões de 3.5.1 até 3.8.1. O problema está no componente privilegiado auxiliar do O…
California AG Files Lawsuit Over 23andMe Data Breach – The HIPAA Journal
California AG Files Lawsuit Over 23andMe Data Breach The HIPAA Journal
California AG Files Lawsuit Over 23andMe Data Breach
California Attorney General Rob Bonta has filed a lawsuit against the genetic testing company formerly known as 23andMe over its […] The post California AG Files Lawsuit Over 23andMe Data Breach appeared first on The HIPAA Journal.
What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks
Shadow AI used to mean employees pasting things they shouldn't into ChatGPT. It now means something bigger: employees building full applications with AI, wiring them into production systems, and publishing them on the open internet. Without Security or IT in the loop. The artifa…
US charges Google security engineer with Polymarket insider trading
A Google security engineer was charged with insider trading after winning $1.2 million using confidential company data to place bets on the cryptocurrency-based Polymarket decentralized prediction market. [...]
The Deliverability Problem: How New Platforms Are Solving Inbox Placement
Email still reaches more people than any other digital channel. Getting it to actually land in the inbox…
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil's largest cooperative financial systems, to siphon client IDs and PFX certificates. According to Socket, versions 2.0.0 through 2.0.4 o…
Charter Communications data breach affects 4.9 million accounts
The ShinyHunters extortion gang stole personal information from 4.9 million accounts after hacking the U.S. telecom giant Charter Communications in early April, according to data breach notification service Have I Been Pwned. [...]
Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels
The North Korean state-sponsored threat actor known as Kimsuky (aka Velvet Chollima) has been attributed to a fresh set of cyber attacks targeting South Korean military and corporate entities through March and April 2026. "Kimsuky employed a range of tailored social engineering …
Claroty organiza no Brasil seu Nexus Day
A Claroty anuncia a realização da primeira edição brasileira do Nexus Days, seu evento global voltado à cibersegurança de infraestruturas críticas. O encontro será realizado no dia 9 de junho, no Baleia Rooftop, em São Paulo, reunindo CISOs, diretores de operações e líderes dos s…