Últimas Notícias

Ameaças Cibernéticas 🛡️Bleeping Computer 🇺🇸

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' slipped past AI code reviewers CodeRabbit and Bugbot, which never open image files at all, then convinced a coding agent to read a repo's .env and write …

há 2h

Ler

Ameaças Cibernéticas 💀The Hacker News 🇺🇸

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. The vulnerability has been described as a case of stored cross-site scripting (XSS) that could allow specially…

há 4h

Ler

Ameaças Cibernéticas 🛡️Bleeping Computer 🇺🇸

New U-Boot flaws could enable stealthy firmware attacks

Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections and install persistent malware. [...]

há 13h

Ler

Gestão de Riscos 🛡️CISO Advisor 🇧🇷

Grupo japonês perde 36% do lucro por ataque cibernético

A Asahi Group Holdings, uma holding japonesa de empresas de bebidas, sofreu uma redução de aproximadamente US$ 397,1 milhões na receita do quarto trimestre de 2025 devido ao ataque cibernético ocorrido em setembro daquele ano, segundo comunicado divulgado em 8 de julho último. O …

há 13h

Ler

Gestão de Riscos 🛡️CISO Advisor 🇧🇷

Incognia afirma ser o SDK antifraude mais baixado do país

A Incognia comunicou hoje ao mercado que é o SDK de prevenção a fraudes mais baixado no Brasil e na América Latina, de acordo com dados de participação de mercado da Sensor Tower. No Brasil, segundo o comunicado, a empresa registra mais que o dobro de downloads em relação ao segu…

há 13h

Ler

Ameaças Cibernéticas 🌑Dark Reading 🇺🇸

Turning the Tables on Email Scammers With 'ScamBuster'

An open source, AI-driven system adopts victim personas to engage with phishing attackers, allowing organizations and law enforcement to gather relevant data on cybercriminal operations.

há 15h

Ler

Governança & IA 🌑Dark Reading 🇺🇸

Jen Ellis: Connecting Cyber Community With Political Machinery

On the heels of her recent honors as a Member of the Order of the British Empire (MBE), we take a look back at the events that shaped Ellis' advocacy on behalf of security researchers.

há 15h

Ler

Gestão de Riscos 📡Canaltech 🇧🇷

IA muda ritmo dos ataques e força empresas a priorizar vulnerabilidades

As vulnerabilidades passaram a responder cerca de 40% das exposições críticas registradas em ambientes corporativos em 2026, mais que o dobro da proporção observada no ano anterior. Ainda assim, menos de um em cada 12 alertas exigia ação urgente. É o que mostra um levantamento d…

há 16h

Ler

Ameaças Cibernéticas 🛡️Bleeping Computer 🇺🇸

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

A 34-year-old Armenian man has pleaded guilty to hacking U.S. companies and deploying the infamous Ryuk ransomware to encrypt their systems. [...]

há 17h

Ler

Ameaças Cibernéticas 💀The Hacker News 🇺🇸

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages

Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malicious package on the npm registry to steal cryptocurrency wallet private keys and mnemonic seed phrases. The compromised version, @injectivelabs/sdk-ts@1.20.21,…

há 17h

Ler

Compliance & Regulação 🏥HIPAA Clicks 🇺🇸

Feds push back HIPAA security rule overhaul to July 2027 – Fierce Healthcare

Feds push back HIPAA security rule overhaul to July 2027  Fierce Healthcare

há 17h

Ler

Ameaças Cibernéticas 🌑Dark Reading 🇺🇸

Cybercriminals Flock to Healthcare Businesses as Attacks Surge

While cyberattacks against hospitals and clinics grew modestly in the first half of 2026, attacks on service providers and other healthcare businesses more than doubled.

há 18h

Ler

Ameaças Cibernéticas 🛡️Bleeping Computer 🇺🇸

Police suspects Dutch hackers were involved in Odido breach

The Dutch National Police (Politie) says it has found "strong indications" that Dutch hackers have been involved in a February breach at the telecommunications provider Odido. [...]

há 18h

Ler

Ameaças Cibernéticas 💀The Hacker News 🇺🇸

URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat

Progress Software has told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, confirming to The Hacker News that it is responding to a "credible external security threat." The company has temporarily disabled access to the affected accou…

há 18h

Ler

Ameaças Cibernéticas 🛡️Bleeping Computer 🇺🇸

Progress urges ShareFile admins to shut down servers over “credible” threat

Progress Software is emailing ShareFile customers who use Storage Zone Controllers to immediately shut down their servers after identifying what it describes as a "credible external security threat" targeting the on-premises secure file-sharing software. [...]

há 18h

Ler

Ameaças Cibernéticas 💀The Hacker News 🇺🇸

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart cameras, and the management chips inside data-center servers. Four of the bugs can crash a device. The other two could let…

há 19h

Ler

Ameaças Cibernéticas 🛡️Bleeping Computer 🇺🇸

Hackers exploit critical auth bypass in Gitea Docker image

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators. [...]

há 19h

Ler

Compliance & Regulação 🛡️Bleeping Computer 🇺🇸

Money launderer accused of stealing seized crypto while in prison

A Bulgarian national has been charged with stealing $290,000 in government-seized cryptocurrency while serving 121 months in prison for helping launder millions stolen from American fraud victims. [...]

há 19h

Ler

Governança & IA 🩺MedTech Dive 🇺🇸

Illumina builds out C-suite with 2 new execs

The gene sequencing company this week named a new chief commercial officer and chief legal officer.

há 20h

Ler

Gestão de Riscos 💡Health IT Answers 🇺🇸

The Quiet Surge in Outpatient Revenue Risk: What Health Systems Are Missing

By Dana Finnegan - Inpatient denials have long dominated health system revenue integrity efforts. Yet a surge in outpatient and ambulatory care coding errors and documentation gaps now threatens revenue, often slipping under the radar and creating significant new risks. The post…

há 20h

Ler