US-Estonian Suspect Arrested Over Alleged Scattered Spider Cyberattacks
US-Estonian suspect Peter Stokes arrested in Finland over alleged ties to Scattered Spider, facing US charges for cyberattacks, fraud, and data breaches.
Últimas Notícias
3583 notíciasWhy a recent supply-chain attack singled out security firms Checkmarx and Bitwarden
Security firms find themselves especially exposed.
Cibercriminosos desviam R$ 12 milhões de Prefeitura em Santa Catarina
A Prefeitura de Jaraguá do Sul, em Santa Catarina, informou que identificou na última quinta-feira, 23 de abril, um ataque cibernético que resultou no desvio de cerca de R$ 12 milhões de contas municipais mantidas em uma instituição financeira da cidade. Segundo a administração, …
Trump administration seeks access to medical records of millions of federal workers – WAMU
Trump administration seeks access to medical records of millions of federal workers WAMU
CISA orders feds to patch Windows flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. [...]
Invasão de sistema em 27 segundos: como os ataques cibernéticos mudaram em 2025
Em 2025, o intervalo médio entre a entrada de um invasor em uma rede corporativa e sua movimentação para outra máquina foi de 29 minutos, 65% abaixo dos 48 minutos registrados em 2024. 🎧Ouça o Podcast Canaltech no Spotify🎧Ouça o Podcast Canaltech na Deezer🎧Ouça o Podcast Canalte…
Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately
cPanel has released security updates to address a security issue impacting various authentication paths that could allow an attacker to obtain access to the control panel software. The problem affects all currently supported versions, according to an alert released by cPanel on T…
AI Analysis Identifies 38 Flaws in OpenEMR Platform – The HIPAA Journal
AI Analysis Identifies 38 Flaws in OpenEMR Platform The HIPAA Journal
AI Analysis Identifies 38 Flaws in OpenEMR Platform
An automated, AI-driven analysis of the most widely used electronic medical records platform uncovered 38 previously unknown vulnerabilities, including two […] The post AI Analysis Identifies 38 Flaws in OpenEMR Platform appeared first on The HIPAA Journal.
Cursor AI IDE vulnerability allows code execution via hidden Git hooks
Novee researchers find high-severity CVE-2026-26268 flaw in Cursor AI, allowing hackers to run malicious code when developers clone repositories.
Medtronic secures CE mark for Stealth AXiS surgical system
Receiving the clearance positions Medtronic to launch a product that combines surgical planning, navigation and robotics in Europe.
CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWise ScreenConnect and Microsoft Windows to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are l…
Microsoft says backend change broke Teams Free chat and calls
Microsoft is working to resolve a known issue that prevents some Microsoft Teams Free users from chatting and calling others. [...]
Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026
Top AI-powered vendor risk platforms for SaaS companies in 2026, compare tools, features, and how to choose the…
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI's LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge. The vulnerabil…
IA multiplica riscos e ataques a APIs
Ataques a APIs e custos de incidentes aumentam junto com a adoção da inteligência artificial, segundo pesquisa publicada ontem pela Akamai (NASDAQ: AKAM). O estudo intitulado “Impacto da Segurança de APIs“, em seu quarto ano, examina o cenário de proteção de APIs com base em uma …
BlueNoroff Uses Fake Zoom Calls to Turn Victims Into Attack Lures
The North Korean group is using stolen victim videos, AI-generated avatars, and fake Zoom calls to scale malware attacks against cryptocurrency executives.
New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords
Forcepoint’s X-Labs reports an 11-step DHL phishing scam that uses fake OTP codes and EmailJS to harvest user credentials and device telemetry.
Broken VECT 2.0 ransomware acts as a data wiper for large files
Researchers are warning that the VECT 2.0 ransomware has a problem in the way it handles encryption nonces that leads to permanently destroying larger files rather than encrypt them. [...]
GlassWorm: extensões adormecidas viram malware
Uma nova onda da campanha GlassWorm está alvejando o ecossistema OpenVSX com 73 extensões do tipo “sleeper” (adormecidas), que se tornam maliciosas após uma atualização. Seis das extensões já foram ativadas e entregam malware, enquanto as restantes estão dormentes ou são suspeita…