A botnet Dysphoria já comprometeu cerca de 296 mil dispositivos, incluindo roteadores, câmeras IP, gateways e equipamentos Linux embarcados. A infraestrutura é usada principalmente em ataques DDoS e passou a oferecer também funções de proxy residencial. A ameaça começou a ser aco…
Tech giants General Electric (GE) and Philips have also confirmed they're investigating claims that the Clop ransomware gang breached their systems and stole data. [...]
Uma plataforma criminosa de inteligência artificial chamada MessiahGPT está sendo comercializada para auxiliar na criação de ransomware, kits de phishing, ladrões de informações e outras ferramentas usadas em ataques cibernéticos. O serviço é promovido abertamente em fóruns frequ…
A Shell iniciou uma investigação sobre um possível incidente de segurança após o grupo de extorsão Cl0p afirmar ter roubado cerca de 89 GB de informações internas da companhia. A empresa confirmou que equipes de segurança e especialistas estão analisando o caso. Segundo os crimin…
Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call, with no fix from the chipset maker. The advisory, published August 17, 2026, is th…
Vishing Attack Provides Threat Act with Access to Quantum Health Network The HIPAA Journal
Data breaches have recently been announced by the healthcare navigation and care coordination company Quantum Health, Heart of America Medical […] The post Vishing Attack Provides Threat Act with Access to Quantum Health Network appeared first on The HIPAA Journal.
Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet source code and is equipped to turn internet-facing devices into SOCKS proxies. "While the malware reuses the DDoS engi…
Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability disclosed last week by security researcher "Nightmare Eclipse" and now tracked as CVE-2026-69414. [...]
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT). The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traver…
A Uber Freight, subsidiária de transporte logístico da Uber Technologies, confirmou ter identificado e contido um acesso não autorizado a partes de seus sistemas e repositórios, após o grupo de hackers autodenominado ‘Helix’ alegar ter roubado quase 1 milhão de arquivos da plataf…
Credenciais dos portais Azure/Entra de usuários de grandes corporações parecem ter sido comprometidas e foram usadas por um agente malicioso para obter enormes bancos de dados de funcionários dessas mesmas empresas, segundo a consultoria Hudson Rock. O agente agora está em uma ca…
Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing severe disruptions to communications. [...]
A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the attacker to interactively control the victim's web browser. [...]
O presidente dos Estados Unidos, Donald Trump, assinou na quarta-feira (12 de agosto) um memorando de segurança nacional que autoriza agências federais a realizar operações cibernéticas ofensivas contra organizações criminosas transnacionais que atacam cidadãos americanos, inclui…
A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes. [...]
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned. The vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authen…
Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those that get a second chance, where an expired domain …
Screen-sharing bug lets remote hackers log in without a password.
Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulnerability at a service provider, allowing them to withdraw funds from Commerzbank customers' bank accounts. [...]
