O CERT Polska publicou um relatório complementar sobre o ataque cibernético de 29 de dezembro de 2025, no qual hackers comprometeram uma usina de cogeração que fornece energia a uma população calculada em 50 mil pessoas. O ataque, que resultou no desligamento de uma turbina a vap…
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity. [...]
A SAP publicou, nesta terça-feira, 11 de agosto, 28 novos boletins de segurança, duas atualizações de notas anteriores e um aviso no GitHub em seu Patch Day. A empresa corrigiu quatro vulnerabilidades críticas, sendo a mais severa uma falha de autorização incorreta no SAP Commerc…
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.
Hackers associated with the Russian threat group Sandworm have been targeting system administrators and IT professionals through fake job offers since at least May. [...]
A Cloudflare, empresa de infraestrutura e segurança web que protege cerca de 20% da internet, registrou um aumento de mais de cinco vezes nos ataques de negação de serviço distribuído (DDoS) que excederam 1 Tbps no segundo trimestre de 2026. De acordo com um relatório da companhi…
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to esca…
A Cisco Systems publicou um aviso sobre uma vulnerabilidade de alta severidade, identificada como CVE-2026-20349 (CVSS de 8.6), que está sendo explorada ativamente em ataques para derrubar remotamente dispositivos que executam os softwares Secure Firewall ASA e Threat Defense (FT…
Cisco is warning that a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense (FTD) software is being actively exploited in attacks to remotely crash affected devices. [...]
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements to improve its operational resilience and conduct distributed denial-of-service (DDoS) attacks. The new version, tra…
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked …
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware. CERT-U…
Delta Air Lines is investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta carrying passengers who had attended the DEF CON hacker convention. [...]
Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]
Microsoft has released Windows 11 KB5121003 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features. [...]
Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE-2026-55040 (CVSS 9.1), affects SharePoint Se…
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. "Its recovery ecosystem combines the Session messaging network with blockchain-bac…
Healthcare Orgs Warned About Gunra Ransomware Attacks The HIPAA Journal
CISA, the FBI, and international partners have issued a joint cybersecurity advisory about the Gunra ransomware-as-a-service (RaaS) operation, which is […] The post Healthcare Orgs Warned About Gunra Ransomware Attacks appeared first on The HIPAA Journal.
Global supply chain and distribution giant Wesco has confirmed in a statement for BleepingComputer that it is investigating a cybersecurity incident. [...]
