SAP warns of maximum severity 'OVERPASS' kernel vulnerability
SAP has addressed 20 vulnerabilities across multiple products in its September 2026 security updates, including a maximum-severity memory corruption flaw in the SAP Kernel code. [...]
Últimas Notícias
3488 notíciasLiquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC
Whoever took nearly 4,000 bitcoin from the Liquid Network on Sunday, September 6, returned 3,400 of it the next day, Bitcoin's public record shows. About 598.5 bitcoin has not come back. Liquid is a Bitcoin sidechain that holds real bitcoin to back a token called L-BTC. The netw…
OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor
OpenAI confirmed that GPT-6 Astra is the first model it has broadly deployed to reach the "Critical level" for cybersecurity capabilities. [...]
HHS Office for Civil Rights Reaches Agreement with Pennsylvania Hospital Over Care of Deaf Patient in Emergency Department – HHS.gov
HHS Office for Civil Rights Reaches Agreement with Pennsylvania Hospital Over Care of Deaf Patient in Emergency Department HHS.gov
ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account
Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause ChatGPT to quietly work for an attacker while answering the user's question as usual. In the company's proof of concept, that hidden work read data from …
Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours
Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operations, with one financially motivated hacking group employing an autonomous, multi-agent attack framework to carry out a large-scale credential harvesting campaign within six hours. Go…
Adobe fixes critical Magento zero-day exploited to backdoor servers
Adobe has released an emergency fix for CVE-2026-75650, an actively exploited max-severity zero-day vulnerability dubbed StyleSmuggler, that impacts multiple versions of Magento and Adobe Commerce. [...]
OneTouchPoint Agrees to Multi-Million Dollar Data Breach Settlement – The HIPAA Journal
OneTouchPoint Agrees to Multi-Million Dollar Data Breach Settlement The HIPAA Journal
OneTouchPoint Agrees to Multi-Million Dollar Data Breach Settlement
The Wisconsin mailing and printing vendor OneTouchPoint Corp. has agreed to settle class action litigation over a 2022 ransomware attack […] The post OneTouchPoint Agrees to Multi-Million Dollar Data Breach Settlement appeared first on The HIPAA Journal.
Webinar: The forgotten Google Workspace access that can lead to a breach
Third-party applications connected to Google Workspace can retain access long after their original purpose is forgotten. This webinar examines how overly permissive integrations contribute to breaches and which security controls can help fast-growing companies reduce their exposu…
Hackers build AI frameworks for widescale credential theft
Threat actors are increasingly switching from AI-powered coding assistants to multi-agent frameworks that automate every stage of an attack. [...]
What Phasing Out the Fax Has to Do with a $50 Billion Rural Health Fix
By Bob Watson - One of the clearest tests of the federal government’s $50 billion Rural Health Transformation Program (RHTP) will be whether rural patients’ health information can move with them across the healthcare system. The post What Phasing Out the Fax Has to Do with a $50…
Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites
A Chinese-language group is compromising government and education sites to create a reverse-proxy network with gambling-themed sites.
Microsoft: Windows Server 2025 changes causing app crashes
Microsoft warned customers last week that they may experience application crashes on some Windows Server 2025 due to recent memory management changes. [...]
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called does not have to answer or touch their phone for it to work, but the caller must already …
Falha crítica no Adobe Commerce permite comprometer servidores de lojas virtuais
Uma vulnerabilidade zero day ainda sem correção oficial no Magento Open Source e Adobe Commerce está sendo explorada para executar código remotamente e instalar backdoors em lojas virtuais. A falha foi chamada de StyleSmuggler e os primeiros ataques foram observados em 4 de setem…
What It Took to Reach 1 Billion Build Manifests
In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also surpassed 3,000 unique container images and 675,000 image versions in our catalog. Those are the headline numbers, but I want to share what's actually …
Falha no ASUS Control Center permite controle total de sistemas
Uma vulnerabilidade crítica no ASUS Control Center Enterprise (ACC) pode permitir que invasores remotos assumam controle completo do servidor de gerenciamento e dos dispositivos administrados pela plataforma. A falha é identificada como CVE-2026-75754 e recebeu pontuação CVSS 10.…
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says. FreeIPA is the system that determines who may log in across a Linux domain and maintains all identities …
Cibercriminosos exploram falha no MikroTik RouterOS para comprometer roteadores
Uma vulnerabilidade grave no MikroTik RouterOS está sendo alvo de ataques contra roteadores expostos à internet. A falha pode permitir acesso não autenticado ao equipamento e abrir caminho para controle da rede administrada pelo dispositivo. A MikroTik confirmou o problema em 3 d…