Novocure data breach affects more than 1,400 cancer patients
Healthtech company Novocure says the data of an undisclosed number of employees and more than 1,400 U.S. cancer patients has been exposed in a mid-August cyberattack. [...]
Últimas Notícias
4695 notícias13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic streaming sites that install those libraries and initiate the deployment of spyware aimed at unpatched iOS d…
Why Even the Best Edge Security Still Misses High-Risk Sessions
Attackers can hide behind residential proxies, VPNs, and other infrastructure that makes malicious sessions appear legitimate to existing edge security controls. Spur explains how session enrichment adds data points that help organizations identify risky sessions and make stronge…
ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain
The campaign uses EtherHiding to dynamically update its command-and-control server, abusing the blockchain as an attacker-controlled address book.
HHS Convenes Leaders at the Live Real Life Symposium to Address Harms of Screen Use in Children – HHS.gov
HHS Convenes Leaders at the Live Real Life Symposium to Address Harms of Screen Use in Children HHS.gov
Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests
The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the continued evolution of its toolset and likely expand its targeting footprint to infect Linux and Apple macOS systems using cross-platform remote acces…
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks
Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attackers to hijack all user mailboxes. [...]
The Governance Challenge of Agentic AI in Healthcare Operations
By Nikhil Bavaskar - Artificial intelligence is entering a new age of health care. Hospitals and health systems have been deploying AI in recent years to summarize clinical notes, automate administrative work, and enhance patient communication. These tools have shown measurable i…
Como desenvolver de forma segura com Vibe Coding
Desenvolver com IA virou o caminho natural para tirar uma ideia do papel rápido. O problema é que a maior parte das falhas em aplicações criadas dessa forma não nasce de um erro do modelo, e sim de uma suposição do desenvolvedor. A IA entrega o que foi pedido, e segurança quase n…
Malware brasileiro usa IA para vender redes corporativas invadidas
Pesquisadores identificaram um novo malware para Windows chamado BraZetsu, usado para mapear redes corporativas comprometidas, identificar sistemas de maior valor e preparar esses acessos para venda a outros criminosos. A operação tem foco principalmente no Brasil e em outros paí…
Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones
The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they read the instructions, it quietly places a command on their clipboard. Then it talks them through opening a terminal and pasting it in. The technique i…
DaVita Agrees to Pay $15 Million to Settle Data Breach Litigation
In 2025, the kidney dialysis giant DaVita experienced a ransomware attack that involved the theft of sensitive patient data. Some […] The post DaVita Agrees to Pay $15 Million to Settle Data Breach Litigation appeared first on The HIPAA Journal.
Android 17 bloqueia aplicativos de rastrear dispositivos na rede Wi-Fi
O Android 17 ganhou novas proteções para reduzir o rastreamento de usuários em redes Wi-Fi e limitar o acesso de aplicativos a dispositivos conectados à mesma rede local. A mudança aumenta o controle sobre informações que antes poderiam ser coletadas sem autorização explícita. Co…
Five Venezuelans plead guilty to ATM jackpotting attacks in US
Five Venezuelan nationals pleaded guilty to attempting to empty automated teller machines (ATMs) using malware in a series of ATM jackpotting attacks. [...]
Falha no Kaspersky Endpoint Security pode permitir elevação de privilégios no Windows
Um pesquisador publicou um exploit chamado HardBreacher que demonstra uma falha de elevação de privilégios no Kaspersky Endpoint Security para Windows. A Kaspersky confirmou o problema e informou que a correção já foi distribuída aos usuários. O código foi divulgado por Nightmare…
Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to carry out long-horizon, agentic tasks, disclosed that it suffered "two notable security incidents" …
D-Link corrige vulnerabilidades que expõem credenciais de rede sem fio
A D-Link corrigiu duas falhas de segurança no roteador DIR-X1860Z que permitem a um invasor conectado à rede local alterar a senha de administrador e acessar informações da configuração Wi-Fi sem autenticação. Os problemas estão na interface de gerenciamento ubus JSON-RPC, basead…
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence (AI)-assisted analysis. The idea, ESET said in…
Recently patched PaperCut zero-days used in data theft attacks
Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited as zero-days, are now being abused in data theft attacks. [...]
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below - CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerabi…