A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by breaking into internet-facing networking devices. According to findings from Cisco Talos, UAT-7810 is an advanced persistent threat (APT) acto…
Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw that can be exploited in command injection attacks. [...]
The world's digital testing ground plans to help people use AI agents for government purposes.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commercial web app development platform by Friday. [...]
"HalluSquatting" weaponizes LLMs' inability to say "I don't know."
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched. The vulnerable code has shipped by default in essentially every mainstream distri…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-48282 (CVSS score: 10.0) - A pa…
Lumexa data breach exposes medical records of Butte residents KBZK News
Learn why Unity is still a trusted engine for mobile games, from faster prototyping and Android and iOS support to tools that help studios scale after releases.
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company. [...]
5 Security Mistakes That Kill Healthcare AI Startups HackerNoon
The phishing campaign uses several tactics, including nested redirects, to evade detection and steal credentials from unsuspecting targets.
Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a fresh look at their AI Infrastructure security.
Atacantes estão explorando ativamente a vulnerabilidade CVE-2026-20896 (CVSS 9.8) no Gitea, plataforma de desenvolvimento auto-hospedada, para contornar a autenticação e acessar repositórios e segredos de código. A falha, específica das imagens oficiais Docker do Gitea, permite q…
Organizações nos Estados Unidos estão integrando a cibersegurança à gestão de risco empresarial e à tomada de decisões executivas, impulsionadas pela adoção de IA, ambientes digitais em expansão e um cenário regulatório complexo. A conclusão está num relatório publicado hoje pela…
Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network by compromising internet-facing networking devices, primarily unpatched Ruckus routers. [...]
Pesquisadores da Positive Technologies identificaram que o acesso inicial à infraestrutura de organizações está sendo comercializado no mercado oculto por valores que variam de US$ 100 a US$ 10 mil – ao passo que os prejuízos de um ataque bem-sucedido podem alcançar milhões de dó…
Atores de ameaça estão abusando de chamadas de voz no Microsoft Teams, se passando por funcionários do suporte de TI corporativo para enganar funcionários e instalar o malware EtherRAT, conforme alertou ontem a Unit 42, da Palo Alto Networks. A campanha combina e-mails de phishin…
A BeyondTrust alertou ontem seus clientes sobre duas vulnerabilidades críticas em suas plataformas Remote Support (RS) e Privileged Remote Access (PRA), que poderiam permitir que atacantes não autenticados contornassem controles de acesso. As falhas, registradas como CVE-2026-401…
A hidden authentication backdoor has been found in multiple Tenda router firmware versions, potentially allowing an attacker to gain administrative access to the device's web management panel. [...]
