Tentativas de explorar uma falha crítica no GitLab da infraestrutura de desenvolvimento do Alpine Linux, em 20 e 21 de outubro, levaram o projeto de código aberto a reconstruir o servidor do zero e redefinir todas as senhas. Os ataques miraram o CVE-2026-97229, falha de execução …
The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...]
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...]
By Jay Eisenstock - “Medicare for All” is a compelling slogan, but it obscures an important question: What exactly do we mean by Medicare for All? Before replacing the existing system with a single government payer, we should consider whether an enhanced Medicare Advantage model …
OpenAI has just confirmed that it's rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across ChatGPT and Codex. [...]
FBI links 628 crypto wallet addresses to North Korea’s TraderTraitor after the $6.3 billion Binance hack, asking services to block transfers involving stolen funds.
A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker wo…
78.6M Records Exposed: Healthcare Data Governance [2026] shattered.io
Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company. Polymarket says it is refunding about …
Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government en…
The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899. The FBI, al…
Lehigh Valley Health Network to Pay $800,000 After Cancer Patients' Photos Were Leaked in Ransomware Attack Medical Daily
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys. [...]
Organizações que adotam agentes de inteligência artificial para automatizar operações de segurança, TI e nuvem passaram a enfrentar um risco conhecido como Agentic Denial of Service (ADoS). O conceito foi descrito pela diretora sênior de marketing de produto da Infoblox, Krupa Sr…
As tentativas de golpes bancários cresceram 35% nos últimos 12 meses, segundo o relatório Global Scams 2026, divulgado pela BioCatch, empresa especializada em prevenção de fraudes a partir do reconhecimento de padrões no comportamento dos usuários. O levantamento reúne dados de m…
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message. [...…
Polymarket confirms $2.7 million stolen through the compromised third-party script and pledges $3.9 million in refunds, including compensation for pause losses.
Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...]
By April Miller - Healthcare organizations rely on external vendors for critical services, from electronic health records to billing. Ongoing vendor oversight helps you protect sensitive data and maintain quality patient care. The post How Healthcare Leaders Can Reduce Cybersecur…
Vários especialistas de empresas brasileiras de TI e de segurança da informação trouxeram para o CISO Advisor comentários e interpretações que ajudam a explicar o incidente com a Binance, ocorrido na noite de quinta-feira, dia 29 de Outubro, que deixou um prejuízo da ordem de US$…
