Uma campanha ativa desde novembro de 2025, denominada “Operation Navy Ghost”, tem como alvo desenvolvedores de bots para Telegram. A campanha cria pacotes maliciosos no repositório PyPI; os pacotes instalam um backdoor completo em servidores, conforme análise publicada pela Check…
A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky actions as part of a fictional scenario, causing them to ignore any safety guardrails. [...]
"Agentjacking" is the latest demonstration of how easily attackers can exploit an AI agent's inability to differentiate between content and instructions.
A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks that allow attackers to read arbitrary files on compromised servers. [...]
Attackers don't need any special authentication to reach a target endpoint — they just need to know where it is.
As Forças de Autodefesa do Japão utilizaram, por quase um ano, drives USB infectados com um vírus atribuído a hackers chineses em computadores com acesso a informações classificadas, de acordo com uma investigação publicada pela agência Nikkei. A reportagem, baseada em documentos…
Telling an LLM that 2 + 2 = 5 is enough to make it follow forbidden instructions.
Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social engineering and obsfucation, including blockchain abuse.
New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned tool description to make the agent quietly hand over company data to an outsider. The trick is that the agent never breaks a rule. Every step looks rou…
A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock websites and online services offline. Researchers at QiAnXin's XLab have tracked it since February 2…
EvilTokens phishing hides takeover clues until browser execution leaving SOC teams needing deeper visibility to validate threats faster and reduce account risk.
A adoção de chatbots e assistentes com inteligência artificial nas empresas acelerou nos últimos meses. Equipes de atendimento, suporte interno, jurídico e financeiro passaram a contar com interfaces conversacionais alimentadas por LLMs para automatizar tarefas e responder pergun…
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.3), an unauthenticated remote code execution (RCE) vulnera…
A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and collecting browsing information. [...]
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses when unsuspecting users initiate a transaction. The cryptocurrency clipper activity has been codenamed Silent Swap by McA…
A fake FIFA World Cup 2026 T-shirt giveaway scam is spreading Voidrift malware through personalized emails using company logos and trusted websites to bypass security filters.
Business Email Compromise is more than an email scam. It's a coordinated operation involving compromised accounts, financial research, and cash-out networks. Flare explores how underground forums reveal how BEC attacks are planned and executed. [...]
Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In many cases, the path in was visible just by watching what the app sent: a plaintext API key, a reusable token, or a backend s…
Cibercriminosos estão explorando ativamente uma vulnerabilidade crítica no Oracle E-Business Suite, sistema usado por empresas para processos financeiros, pagamentos e operações corporativas. A falha foi identificada como CVE-2026-46817 e recebeu pontuação CVSS 9.8. O problema af…
Uma vulnerabilidade de execução remota de código no Microsoft 365 Apps pode permitir que invasores comprometam computadores por meio de um arquivo Excel malicioso. A falha foi identificada como CVE-2025-60727 e afeta diferentes versões do Microsoft Office. O problema está na form…
