CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerability
CVE-2026-119977 lets hackers hijack WordPress sites during core updates. CISA confirms exploitation as users are told to patch…
Últimas Notícias
4659 notíciasFalha crítica no OpenSSH dá acesso a contas sem senha
O projeto OpenSSH publicou em 5 de novembro de 2026 a versão 10.6p2, classificada por ele como correção crítica, para uma falha que deixa um invasor entrar em contas sem senha de servidores Alpine Linux. A distribuição liberou pacotes corrigidos para todas as versões a partir da …
A gestão hospitalar avançou. O sistema, não
A gestão hospitalar avançou, mas superar os gargalos do financiamento, ampliar o acesso e integrar o sistema são passos essenciais para transformar os avanços em resultados para toda a população. The post A gestão hospitalar avançou. O sistema, não appeared first on Saúde Busines…
MetaMask says recent attack didn't affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. [...]
Best HIPAA Cloud Backup: Terraform, 13 Steps, 90 Min [2026] – tech-insider.org
Best HIPAA Cloud Backup: Terraform, 13 Steps, 90 Min [2026] tech-insider.org
UK Warns Its Critical Infrastructure Faces Grave Risk
Britain's new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.
Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. "While we investigated, we removed access to Reactor and Data Soluti…
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week. The backdoored web server executes commands that attackers send via web requests, and those reques…
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security firm watchTowr detailed the attack chain on …
FGC confirma acesso não autorizado a dados pessoais
O Fundo Garantidor de Créditos (FGC) identificou acesso não autorizado a informações pessoais em ambientes ligados aos seus processos de garantia. A suspeita foi detectada em 26 de outubro de 2026, quando começaram as providências de resposta ao incidente, incluindo contenção, re…
FBI, CISA warn of cyberattacks targeting refrigeration systems
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards. [...]
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Certain configurations of Alpine are affected. Other distros may be as well.
How Governments Detect VPN Traffic, and Why Encryption Alone Doesn’t Hide It
Learn how governments detect VPN traffic using IP addresses, protocol fingerprints and active probing, and why encryption alone cannot prevent blocking.
Operação de influência russa tem como alvo generalizado a América Latina
A operação, que contou com o uso de inteligência artificial, utilizou e-mails falsos, documentos governamentais falsificados e a criação de uma organização local para atacar escolas no Peru e no Equador, entre outras ações.
How Democrats’ Win Could Reshape Healthcare Cyber Policy – BankInfoSecurity
How Democrats' Win Could Reshape Healthcare Cyber Policy BankInfoSecurity
Tempest e Vision se fundem e formam novo grupo
A Vision Cybersecurity e a Tempest Security Intelligence anunciam a conclusão formal (closing) de sua fusão, após a aprovação sem restrições pelo Conselho Administrativo de Defesa Econômica (CADE). O movimento consolida a criação do Grupo Vision Tempest, empresa independente com …
US Government Email Systems Open to Abuse Thanks to Typos
Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions. [...]
Citrix corrige falha crítica no XenServer
A Citrix divulgou uma vulnerabilidade crítica no XenServer que pode permitir a um atacante não autenticado comprometer hosts de virtualização e appliances de suporte. A falha, rastreada como CVE-2026-98432, exige acesso à rede de gerenciamento, limite importante para avaliar quai…
What We Missed: Knicks Phishing Test Goes Out of Bounds
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from an ill-conceived phishing simulation to a hacktivist attack on a US government agency.