The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South Asian organizations with a previously unreported remote access trojan called PapRAT. "PapRAT has both C++ and Rust imple…
The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...]
A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or running safely become part of the attack. Elsewhere, attackers a…
By Dr. Musheer Ahmed - A regional health plan opens an investigation after finding unusual billing patterns from a high-volume orthopedic provider. The investigators review several previously paid lumbar spinal fusion claims, including physician notes, treatment histories, and di…
Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. [...]
A Wordfence bloqueou mais de 240 mil tentativas de ataque desde 28 de outubro contra uma falha no processo de atualização do núcleo do WordPress, registrada como CVE-2026-119977 e avaliada com nota 8,1 de 10. A contagem começa no dia em que o WordPress publicou a correção, e o pi…
Pesquisadores de segurança divulgaram em 6 de novembro de 2026 uma falha no Claude Dispatch, recurso da Anthropic que permite enviar tarefas do celular para o Claude Desktop. A falha deixava uma extensão de navegador dar ordens ao agente de IA como se fossem do usuário, e o Claud…
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the engine. Both apps signed customers in throug…
Hospitals and other critical infrastructure entities in the United States have been warned that internet-connected refrigeration and freezer systems could be targeted by threat actors, as they have been in Europe. Starting in mid-October, hackers started targeting internet-connec…
An Auckland ransomware case and three years of Spark disclosures reveal how little the headline numbers can tell…
Um relatório divulgado em 6 de novembro de 2026 mapeou o Dark Project, operação de ransomware com motivação financeira observada desde junho de 2026, que já lista 38 organizações como vítimas em 8 países. O que distingue o grupo não é a técnica, é o modelo de remuneração: ele pag…
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies…
Hackers stole around €100 million from Crédit Mutuel Arkéa through a supplier platform. Customer funds were unaffected, and…
Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be careful until they are out. One operator …
See where capital and deal activity are moving, with insights to inform stronger investment, growth and strategic decisions.
A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire department platform exposing patient data from 2018, including ECG readings and …
The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company's office has pleaded not guilty. According to reports from Bloomberg and CNBC, Saudi national Abdulrahman Alfozan made an appearance in San Francisco federal c…
U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim to cause service disruptions, fire hazards, and loss of inventory. "The actors may exploit vulnerabilities or weaknesses…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been exploited in real-world attacks. The vulnerabil…
Pesquisadores da Apiiro localizaram 2.539 credenciais distintas distribuídas em 1.994 repositórios públicos do GitHub, todas gravadas por um recurso de aprovação do Claude Code. O levantamento aponta 63 organizações atingidas, em sua maioria empresas de software, segundo relatóri…
