New Shai-Hulud malware wave compromises 600 npm packages
Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign. [...]
Últimas Notícias
3597 notícias7-Eleven confirms data breach claimed by the ShinyHunters gang
Convenience store chain giant 7-Eleven confirmed that its systems were breached in a cyberattack claimed by the ShinyHunters extortion group last month. [...]
Endue Software Agrees to $870,000 Data Breach Settlement – The HIPAA Journal
Endue Software Agrees to $870,000 Data Breach Settlement The HIPAA Journal
Criminal IP Returns to Infosecurity Europe 2026 with Advanced AI-Driven TI & ASM
Torrance, United States / California, 19th May 2026, CyberNewswire
Critical Microsoft Vulnerabilities Doubled: From Exposure to Escalation
Microsoft's total vulnerability count stayed steady in 2025, but critical flaws surged year over year. BeyondTrust breaks down why attackers are increasingly focused on privilege escalation and identity abuse. [...]
Endue Software Agrees to $870,000 Data Breach Settlement
Endue Software has agreed to pay $870,000 to settle a class action lawsuit that was filed in response to a […] The post Endue Software Agrees to $870,000 Data Breach Settlement appeared first on The HIPAA Journal.
Looking Back, Looking Forward: Digesting a Dynamic Bouillabaisse of Cyber Evolution
Dark Reading editors reflect on two decades of dramatic change — from perimeter defense to assume-breach strategies — and warn that while AI, cloud, and COVID-19 have transformed the threat landscape, organizations are still failing at fundamental security hygiene that could stop…
Two-Thirds of Nonhuman Accounts Are Unseen and Unmanaged, According to Orchid Security’s Identity Gap Report
New York, United States, 19th May 2026, CyberNewswire
Webinar: The hidden bottlenecks in network incident response
IT teams are increasingly overwhelmed by alerts from disconnected systems, forcing responders to manually coordinate investigations during network incidents. This webinar explores how automation and AI-assisted workflows can help reduce response delays and improve operational coo…
A Different Approach to eSource Starts with the Clinical Research Site
By Nick Frenzer - Developing new drugs and therapies is a contact sport for research sites. Investigators are on the frontlines, meeting and treating patients to help them live healthier lives. At the same time, sites are working through complex protocols, numerous disconnected s…
Malware ligado ao Equation Group adulterava simulações nucleares
Uma nova análise do malware Fast16 revelou que a ferramenta foi criada para adulterar simulações nucleares altamente especializadas, anos antes de o Stuxnet se tornar o caso mais conhecido de sabotagem cibernética contra processos físicos. O malware foi encontrado em arquivos vaz…
Falhas no PHP permitem vazamento de memória ao processar imagens
Duas vulnerabilidades em funções de processamento de imagens do PHP podem permitir vazamento de memória sensível e ataques de negação de serviço a partir de arquivos JPEG especialmente criados. As falhas afetam recursos usados por aplicações web, CMS, webmails e serviços que anal…
The New Phishing Click: How OAuth Consent Bypasses MFA
In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340 Microsoft 365 organizations across five countries. The targets of the platform received a message asking them to enter a short code at mic…
Microsoft confirms patching issues in restricted Windows networks
Microsoft says customers in restricted network environments may encounter Windows Update failures after installing the January 2026 optional non-security preview updates. [...]
Vulnerabilidade em plugin do WordPress permite bypass de autenticação
Uma vulnerabilidade crítica no plugin Burst Statistics para WordPress expôs mais de 200 mil sites a ataques de bypass de autenticação, com possibilidade de tomada completa de contas administrativas. A falha, rastreada como CVE-2026-8181, recebeu pontuação CVSS 9.8 e afeta as vers…
Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare
Drupal has issued an alert stating that it intends to release a "core security release" for all supported branches on May 20, 2026, from 5-9 p.m. UTC. "The Drupal Security Team urges you to reserve time for core updates at that time because exploits might be developed within hou…
Hosting Service Standards That Define High-Performing Agencies
There’s a quiet pattern among the agencies that consistently outperform their competitors. Their client retention rates are higher.…
Hackers Actively Exploit ‘Nginx Rift’ Vulnerability Affecting NGINX, F5 Products
Hackers are actively exploiting the Nginx Rift vulnerability affecting NGINX and F5 products, exposing servers to denial-of-service attacks.
SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access
Critical security vulnerabilities have been disclosed in SEPPMail Secure E-Mail Gateway, an enterprise-grade email security solution, that could be exploited to achieve remote code execution and enable an attacker to read arbitrary mails from the virtual appliance. "These vulnera…
Erie Family Health Centers Data Breach Affects 570,000 Individuals
Erie Family Health Centers, a Chicago, IL-based network of health centers providing primary medical, dental, and behavioral healthcare services to individuals regardless […] The post Erie Family Health Centers Data Breach Affects 570,000 Individuals appeared first on The HIPAA Jo…