Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-20262, carries a CVSS score of 6.5 out of 10.0. "A vulnerability in the web UI of Cisco…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 18, 2026. The…
A equipe de desenvolvedores do gerenciador de pacotes npm anunciou três alterações estruturais focadas em segurança para modificar as configurações padrão do sistema. A informação foi publicada ontem em um artigo técnico detalhando que a iniciativa da plataforma controlada pela G…
The U.S. Department of Justice announced Friday that it has seized the CFAKE.com and SOCFAKE.com websites, which allegedly hosted nonconsensual AI-generated nude images and videos of women, in what appears to be the first publicly announced domain seizure under the TAKE IT DOWN A…
O Supervisor Europeu de Proteção de Dados (EDPS) alertou hoje para os riscos de violações de dados decorrentes do uso de ferramentas de IA não autorizadas por funcionários de organizações, fenômeno conhecido como “shadow AI”, de acordo com comunicado oficial. “O que parece uma ma…
A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged technician accounts on servers using the OpenID Connect (OIDC) authentication protocol. [...]
A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense email. The way in was a backdoor on their REDCap research servers that stole login credentials. The ex…
Uma vulnerabilidade crítica no Microsoft 365 Copilot tornava possível o roubo de e-mails e arquivos da caixa de correio, do SharePoint e do OneDrive de uma vítima, além de garantir acesso ao calendário com apenas um clique. A informação foi publicada hoje em uma reportagem técnic…
Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster known as Contagious Interview (aka Famous Chollima, HexagonalRodent, and Void Dokkaebi). According to a report published by Proofpoint, th…
O FBI e o Google anunciaram ontem o desmonte da Outsider Enterprise, uma grande plataforma de phishing coordenada por meio do Telegram e operada a partir da China. A ação fez parte da Operação Riptide do FBI, um esforço para desarticular redes criminosas cibernéticas. As autorida…
The denial-of-service (DoS) exploit takes advantage of two features in HTTP/2 that were designed to save Internet bandwith, not power massive amplification attacks.
The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.
O grupo de extorsão reivindicou a invasão à organização internacional e afirma ter obtido informações pessoais de funcionários. Grupo ameaça divulgar dados roubados O coletivo ShinyHunters, conhecido por ataques e vazamentos de dados, anunciou ontem ter invadido os sistemas do Co…
WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a supply-chain attack impacting Awesome Motive-s content distribution network (CDN). [...]
In this week’s special edition of “News You Can Use” on Healthcare NOW Radio Dr. Nick sits down with Joe Sardano, Founder, Chairman, and CEO of Sensus Healthcare, to explore Sensus and the technology they are bringing to the treatment of skin cancer. The post Skin Cancer Alternat…
Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root privileges. [...]
Google discovered and disrupted the sprawling campaign, which stole RedCAP credentials to target numerous institutions and exfiltrate sensitive data.
Executive leaders may not be saying it aloud, but business objectives and priorities don't always promote timely disclosures.
A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model provi…
The Council of Europe, the continent's oldest intergovernmental body, is probing claims of a data breach made by the ShinyHunters extortion group over the weekend. [...]
