A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. [...]
Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted processes. ThreatLocker explains how endpoint verification, command authorization, strict input validation, and narrowly scoped privileges can help se…
New research shows how attacks against some unprotected TSN protocols could allow attackers to disrupt or manipulate physical processes
Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence (AI)-powered Linux implant dubbed RedC2 4.0. "When the module loads, it locates…
A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen. [...]
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-level file and registry operations on Windows systems ranging from Windows 7 through Windows 11 25H2, with no software fl…
Stryker, Medtronic and Abbott are among the collection of medical device firms that have disclosed cyberattacks this year. Check out MedTech Dive’s roundup of coverage.
Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to serve a multi-stage downloa…
By Lionel Litty -The incidents that slip past an organization's defenses show up as a routine email, an ordinary link, or a file that looks exactly like the hundreds of legitimate ones an employee opens every week. Across healthcare organizations, security teams are discovering t…
The coming threat of super-powerful computers capable of cracking today’s algorithms requires upgrading encryption now. Tech companies have begun building defenses.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform. [...]
Um novo malware para Android chamado Manic combina recursos de trojan bancário, spyware e controle remoto do aparelho. A ameaça chama atenção por conseguir enviar dados roubados por meio de outros celulares infectados próximos, mesmo quando o dispositivo original está sem acesso …
Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management (IAM) platform that has been exploited in attacks. [...]
Uma campanha de phishing conseguiu contornar a autenticação multifator do Microsoft 365 e comprometer a conta de um funcionário do setor financeiro, permitindo que criminosos acompanhassem conversas internas e tentassem desviar pagamentos destinados a fornecedores. O ataque começ…
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE. [...]
A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or…
Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required. The vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting …
A CISA adicionou ontem (19 de agosto) ao seu Catálogo de Vulnerabilidades Conhecidas Exploradas (KEV) a vulnerabilidade CVE-2026-64849, uma falha de Server-Side Request Forgery (SSRF) no MLflow, plataforma de gerenciamento do ciclo de vida de modelos de machine learning e IA. A v…
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that added a typosquatted dependency whose build script downloaded and executed a remote payload during compilation. The affe…
A Citrix alertou os clientes para que protejam imediatamente seus sistemas contra duas vulnerabilidades que afetam o NetScaler Gateway e o NetScaler ADC, conforme comunicado da empresa. A falha mais severa, rastreada como CVE-2026-19490, permite que atacantes remotos não autentic…
