New phishing kits target Microsoft 365 accounts, evade MFA
Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using techniques that defeat multi-factor authentication (MFA). [...]
Últimas Notícias
3477 notícias11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
Cybersecurity researchers have discovered 11 old, Microsoft-signed, Unified Extensible Firmware Interface (UEFI) applications that could be abused to bypass Secure Boot on most systems using the modern firmware standard. "An attacker exploiting one of these vulnerable applicatio…
Telegram’s t.me Links Go Offline After Registry Places Domain on serverHold
Telegram's t.me links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown.
How to Deploy AI in Healthcare Without Causing AI Burnout
By Zac Amos - Artificial intelligence (AI) is helping healthcare organizations automate administrative tasks, improve workflows and support better decision-making. However, implementing AI without careful planning can create new challenges for employees, leading to AI burnout ins…
Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks
Researchers at KU Leuven tested 85 of the most popular crypto wallets that run as browser extensions and found that the wallets themselves leak enough to link and track the people using them. The way these wallets talk to websites and blockchain servers can tie a person's separa…
Nova atualização do Debian 13 corrige vulnerabilidades e falhas importantes
O Projeto Debian lançou o Debian 13.6, nova atualização de manutenção da versão “Trixie”, com correções de segurança e ajustes para falhas importantes encontradas em diferentes componentes do sistema operacional. O pacote não representa uma nova geração do Debian. Trata-se de uma…
SAP warns of critical flaws in NetWeaver and Commerce Cloud
SAP has addressed 16 vulnerabilities across multiple products as part of its July 2026 security updates, including three critical flaws in NetWeaver, Commerce Cloud, and AppRouter. [...]
NSA alerta para invasões em roteadores e switches Cisco
A Agência de Segurança Nacional dos Estados Unidos recomendou que organizações desativem o Cisco Smart Install após identificar ataques de hackers ligados ao governo russo contra roteadores e switches vulneráveis. O alerta foi publicado em conjunto com outras 17 agências internac…
How Pentera Turns AI Security Workflows into Validation Engines
AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams move faster. But most still rely on fragmented risk signals: scanner output, severity scores, threat intelligence, configura…
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate user accounts and validate stolen credentials in Microsoft Entra ID environment…
May 2026 Healthcare Data Breach Report – The HIPAA Journal
May 2026 Healthcare Data Breach Report The HIPAA Journal
Sites WordPress devem atualizar miniOrange após alerta crítico
Uma vulnerabilidade crítica no plugin miniOrange Social Login para WordPress pode permitir que invasores assumam contas de usuários, incluindo perfis administrativos, sem precisar conhecer a senha. A falha, identificada como CVE-2026-12761, recebeu pontuação CVSS 9.8 e afeta vers…
May 2026 Healthcare Data Breach Report
Based on the current data on the HHS’ Office for Civil Rights (OCR) breach portal, 61 healthcare data breaches affecting […] The post May 2026 Healthcare Data Breach Report appeared first on The HIPAA Journal.
Microsoft starts testing cleaner Windows Search without ads
Microsoft is now testing a cleaner and faster version of Windows Search that should prioritize relevant results over ads and promotional content. [...]
Lucent Health Solutions to Pay Up to 1.95M to Settle Data Breach Litigation – The HIPAA Journal
Lucent Health Solutions to Pay Up to 1.95M to Settle Data Breach Litigation The HIPAA Journal
Lucent Health Solutions to Pay Up to 1.95M to Settle Data Breach Litigation
A settlement has been agreed to resolve a class action lawsuit against the Nashville, TN-based health plan administration service provider, […] The post Lucent Health Solutions to Pay Up to 1.95M to Settle Data Breach Litigation appeared first on The HIPAA Journal.
US sanctions VPN, malware providers for enabling ransomware attacks
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) sanctioned two individuals and one entity for enabling ransomware attacks against U.S. organizations. [...]
Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns
Proofpoint details how attackers spoof OAuth client IDs to probe Microsoft Entra accounts, test credentials and bypass common sign-in detections at cloud scale.
Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads
xAI's Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed. A researcher publishing as cereblab, testing version 0.2.93, captured one of those uploads, clone…
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for enabling ransomware actors' and other cybercriminals' malicious activities, including ransomware attacks against Americans. The VPN, named First V…