Pesquisa do ISC2, publicada em 14 de julho, revela que a inteligência artificial está remodelando a profissão de cibersegurança. De acordo com o levantamento, 56% dos profissionais afirmam que a IA reduziu a necessidade de posições de nível inicial no último ano, enquanto 53% acr…
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.…
Newly released FINN Voices episode with Beth Friedman and Bobby Reddy Jr., leading Prenosis, a precision medicine company redefining how hospitals understand and treat their most critically ill patients. Reddy explains why decades of clinical trials for sepsis, acute heart failur…
O setor de comércio tornou-se o principal alvo de ataques impulsionados por inteligência artificial, com quase metade de todo o tráfego (47,9%) registrado na rede global da Akamai em dezembro de 2025 sendo composto por bots de IA, conforme relatório “Securing the Agentic Storefro…
O grupo de ransomware The Gentlemen assumiu a primeira posição em número de vítimas no segundo trimestre de 2026, com 300 organizações listadas em seu site de vazamentos, superando o Qilin (289 vítimas), que liderava há quatro trimestres consecutivos, conforme relatório da ReliaQ…
A quarta edição da pesquisa de maturidade da auditoria interna, realizada pelo IIA Brasil em parceria com a KPMG entre novembro de 2025 e março de 2026, revelou que 46% das áreas de auditoria interna no país cumprem as normas internacionais e já passaram por avaliação externa de …
An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian organizations, including government agencies. [...]
Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emergency Response Team of Ukraine (CERT-UA), the activity has be…
By Shawn Spurlock and Liz Turi - We are excited to announce the 2026 standards approved by the National Coordinator through ONC’s Standards Version Advancement Process (SVAP). This year, we highlight two important groups of standards. The post ONC’s 2026 Approved SVAP Standards a…
A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026. Cybersecurity company Volexity is tracking the act…
7-Zip version 26.02 was released to fix a remote code execution vulnerability that could allow attackers to execute malicious code by convincing users to open specially crafted compressed files. [...]
Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. [...]
Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication tokens, and sensitive documents from its enterprise customers. [...]
The thought leaders in our community are good about sharing their thoughts on the issues of today. Here are the top read and shared guest posts of June that we think deserve sharing again. The post Health IT Issues that Deserve a Second Read – June 2026 appeared first on Health I…
As age verification laws expand worldwide, organizations face growing pressure to protect users' privacy while meeting regulatory requirements. Incode explains how on-device age estimation verifies age without transmitting or storing facial images, reducing biometric privacy risk…
Pesquisadores da Okta identificaram uma vulnerabilidade, denominada HollowByte, que permite que atacantes não autenticados provoquem uma condição de negação de serviço (DoS) em servidores OpenSSL com um payload malicioso de apenas 11 bytes. A equipe do OpenSSL corrigiu silenciosa…
Final action on HIPAA Security Rule modifications now projected for July 2027 McDermott Will & Schulte
An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6.9 and 7.0 site was in range until Friday, when WordPress shipped 6.9.5 and 7.0.2 and enabled what it calls forced updates through its auto-…
Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its Cancer Diagnostics business, while also investigating a separate claim that attackers breached its LabCentral portal and…
Is Microsoft Teams HIPAA-Compliant? BBN Times
