O Django lançou as versões 6.0.8 e 5.2.17 para corrigir quatro vulnerabilidades que podem causar gravação de arquivos, requisições indevidas, negação de serviço e ataques de cross-site scripting. Desenvolvedores devem atualizar aplicações e servidores com prioridade. A falha mais…
Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScript cryptography library 12 years ago, the function supplied weak entropy that affected wallet apps used to generate recovery…
Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool that can expose a user's real IP address. Introduced with iOS 15, iCloud Private Relay employs a dual-hop architecture to ensure users' privacy by routing their Safari web traffic th…
A OpenAI desativou uma rede coordenada de contas do ChatGPT usada para apoiar golpes financeiros, românticos e de falsificação de identidade. Os criminosos utilizavam a inteligência artificial para criar personagens falsos, traduzir conversas e produzir mensagens direcionadas às …
A new class of prompt injection is spreading across commercial websites. It requires no malware, no stolen credentials, and no zero-day exploit. It abuses a standard feature built into almost every major AI assistant: pre-filled deep links. We observed production websites embedd…
The Department of Health and Human Services Office of Inspector General (HHS-OIG) has announced that two settlements have been agreed […] The post Merit Health Central Hospital & NorthShore University Health System Settle EMTALA Violations appeared first on The HIPAA Journal.
O Open VSX removeu 77 extensões maliciosas que imitavam ferramentas legítimas para coletar informações de computadores de desenvolvedores e ambientes de integração contínua. Os pacotes foram publicados entre 26 de julho e 1º de agosto de 2026 e retirados em 3 de agosto. A campanh…
At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines.
Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to disk. They fed Java source code to the database, let Oracle compile it into stored s…
Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent's tools with no check that a model turn had authorized them. In several of the attack paths, the model never ran at all, so system prompt…
Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware images currently available from Zbtlink that span more t…
A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and running Ransom Cartel, the ransomware-as-a-service operation he stood up in 2021. Between 2021 and 2023, Ransom Cartel conspirators attacked at least 18 companie…
A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The vulnerability in question is CVE-2026-63077 (CVSS score: 9.8), a c…
Connor Riley Moucka pleaded guilty in Seattle federal court on Wednesday to computer fraud, wire fraud, aggravated identity theft and a related conspiracy over the 2024 breaches of Snowflake customer accounts. The intrusions reached at least 165 organizations and exposed records…
Blaze raises $5M pre-seed to keep health apps HIPAA-compliant app.dealroom.co
Attackers can take control of agents through malicious instructions hidden in content supplied to AI browsers, and there's no simple fix for the threat.
Maksim Silnikau, the creator and administrator of the Ransom Cartel ransomware operation, was sentenced to 16 years in prison for his role in ransomware attacks against at least 18 companies worldwide. [...]
A Akamai publicou hoje 5 de agosto o relatório Enterprise AI Usage Risk Report 2026, revelando que 47,11% das conversas com ferramentas de IA em ambientes corporativos ocorrem por meio de identidades pessoais, fora do controle de segurança, compliance e auditoria das empresas. O …
Baseboard management controllers from the world's biggest manufacturers are a security mess.
O Tesouro da Hungria sofreu um ataque cibernético com roubo de dados e criptografia de arquivos, executado pelo mesmo hacker que invadiu e apagou o banco de dados de registros de terras da Romênia no mês passado, segundo informações da newsletter Risky Biz e do site húngaro Telex…
