Uma vulnerabilidade zero day ainda sem correção oficial no Magento Open Source e Adobe Commerce está sendo explorada para executar código remotamente e instalar backdoors em lojas virtuais. A falha foi chamada de StyleSmuggler e os primeiros ataques foram observados em 4 de setem…
In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also surpassed 3,000 unique container images and 675,000 image versions in our catalog. Those are the headline numbers, but I want to share what's actually …
Uma vulnerabilidade crítica no ASUS Control Center Enterprise (ACC) pode permitir que invasores remotos assumam controle completo do servidor de gerenciamento e dos dispositivos administrados pela plataforma. A falha é identificada como CVE-2026-75754 e recebeu pontuação CVSS 10.…
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says. FreeIPA is the system that determines who may log in across a Linux domain and maintains all identities …
Uma vulnerabilidade grave no MikroTik RouterOS está sendo alvo de ataques contra roteadores expostos à internet. A falha pode permitir acesso não autenticado ao equipamento e abrir caminho para controle da rede administrada pelo dispositivo. A MikroTik confirmou o problema em 3 d…
NFI North Data Breach Affects Almost 50,000 Individuals The HIPAA Journal
Data breaches have been announced by NFI North in New Hampshire, Nephrology Associates in Kansas, PAMCAH-UA Local 675 Health and […] The post NFI North Data Breach Affects Almost 50,000 Individuals appeared first on The HIPAA Journal.
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggle…
Elucid, which gained a large medtech company as an investor, plans to grow industry partnerships as it looks to expand its AI-powered imaging platform.
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams. The campaign, discovered by the DFIR Report in March 2026, has been codenamed BengalSEO. It has o…
Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing names, passport numbers, dates of birth, nationalities, and flight details spanning 2017 to 2026. Researchers accessed the Vietnam-linked system throu…
Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users' personal information, including their HIV status, with third-parties. Grindr, which is the largest LGBTQ+ dating app, was sued in April 20…
Cibercriminosos estão explorando ativamente duas vulnerabilidades críticas no sistema operacional RouterOS para assumir o controle remoto de roteadores MikroTik sem necessidade de autenticação, conforme alertas emitidos pela fabricante e pelo governo da Polônia. As falhas, regist…
A Microsoft e o governo da Bélgica emitiram alertas sobre campanhas de ataque que utilizam o Microsoft Teams como vetor principal. O Safeonweb, uma iniciativa do Centro de Cibersegurança da Bélgica (CBB), relatou ter recebido múltiplas notificações de casos de fraude contra diret…
Um ataque em larga escala explora uma vulnerabilidade zero-day no Magento e no Adobe Commerce, plataformas que equipam mais de 160 mil sites, para instalar um backdoor persistente em servidores Linux. A primeira tentativa de invasão foi registrada em 4 de setembro. A falha, batiz…
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "Requiring prior administrative or code execution access, its installer injects the extension directl…
A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks to deploy a backdoor. [...]
Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (SaaS) offerings through information technology (IT) help desk vishing, adversary-in-the-middle (AitM) token theft, and res…
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials. [...]
Luminis Health Working to Restore Systems After Cyberattack The HIPAA Journal
