Grok exfiltrates user data when malicious instructions are encrypted
Cryptographic Context Injection is only the latest way to break an LLM safety guardrail.
Últimas Notícias
3479 notíciasVitestro secures FDA nod for robotic blood draw device
The Food and Drug Administration hailed the potential of the first-of-its-kind device to counter the U.S. phlebotomist shortage.
Citrix urges admins to patch new NetScaler flaws as soon as possible
Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances. [...]
Vectra AI nomeia Ítalo Calvano VP para América Latina
A Vectra AI, plataforma de detecção e resposta a ameaças baseada em inteligência artificial, anunciou ontem a nomeação de Ítalo Calvano como vice-presidente regional para a América Latina, conforme comunicado da empresa. Calvano, que atuava como vice-presidente para a América Lat…
Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments
Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS) terminal reads over near-field communication (NFC), without bre…
Winning the Revenue Cycle Arms Race Starts With the Foundation
By Brian Robertson -To improve revenue cycle management (RCM) through AI, organizations first have to change how they see the revenue cycle itself. RCM is no longer operational support. It is a core driver of enterprise strategy, corner office and all. The post Winning the Revenu…
Why "Shady AI" is Security's Next Big Governance Problem
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it. The incident began when a Meta employee posted a technical question on an internal forum. An engineer use…
CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification
Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a low-bandwidth request stream by up to 350x aga…
Oracle libera correções para vulnerabilidades em servidores WebLogic
A Oracle publicou em 18 de agosto uma atualização emergencial de segurança com 943 novos patches para dezenas de famílias de produtos corporativos. O pacote corrige falhas em plataformas como WebLogic Server, Fusion Middleware, E-Business Suite, Oracle Database e Commerce. Entre …
Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices
A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as well as Russian and European financial institutions, global fintech and cryptocurrency services, and military-focused commun…
CISA warns of hackers exploiting critical MLflow vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical vulnerability in the MLflow open-source AI engineering platform. [...]
NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument comman…
Cursor é afetado por falha de execução de código via arquivo git.exe
Uma vulnerabilidade de alta gravidade no Cursor para Windows pode permitir a execução automática de código malicioso quando um desenvolvedor abre um repositório especialmente preparado. A falha é rastreada como CVE-2026-63093 e recebeu pontuação CVSS 8.7. O problema é classificad…
A quem interessa reduzir um debate tão relevante à ‘Máfia das Próteses’?
Ronaldo Sampaio, presidente da ABRAIDI, analisa os avanços e desafios da cadeia de dispositivos médicos dez anos após a CPI das Próteses. The post A quem interessa reduzir um debate tão relevante à ‘Máfia das Próteses’? appeared first on Saúde Business.
ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud
Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally. Zimperium zLabs, in a Wednesday report, said the Android m…
Patient & Employee Data Exposed in Baylor Genetics Cybersecurity Incident – The HIPAA Journal
Patient & Employee Data Exposed in Baylor Genetics Cybersecurity Incident The HIPAA Journal
New Manic Android malware can exfiltrate data through nearby devices
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices. [...]
Critical Zimbra RCE flaw now actively exploited in attacks
CERT Polska, the Polish Computer Emergency Response Team (CERT), warned that attackers have begun exploiting a critical vulnerability in Zimbra Collaboration Suite (ZCS). [...]
40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 products. According to the Socket Threat Research team, the extensions are part of a broader set of 77 browser add-ons th…
Medusa Ransomware Group Has Attacked 500+ Critical Infrastructure Orgs
CISA, the Department of Health and Human Services (HHS), and the Federal Bureau of Investigation (FBI) have issued an updated […] The post Medusa Ransomware Group Has Attacked 500+ Critical Infrastructure Orgs appeared first on The HIPAA Journal.