Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Ameaças Cibernéticas
2119 notíciasYam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
PoC expõe falha no vhost do Linux
Pesquisadores publicaram uma prova de conceito para a Vghost, falha de alta gravidade no vhost do Linux rastreada como CVE-2026-74580 (CVSS de 8.8), que permite a um usuário local obter acesso root ou, em certas configurações de máquina virtual, escapar do convidado e afetar o ho…
NGINX tem três falhas graves de memória
A F5 publicou três avisos de segurança sobre falhas que permitem a atacantes remotos e não autenticados derrubar processos de trabalho do NGINX Plus e do NGINX Open Source por meio de requisições HTTP manipuladas. Os problemas afetam o plano de dados do servidor, que processa o t…
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through the gateway and, if it s…
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering. [...]
Cisco corrige zero-day explorado no secure email gateway
A Cisco corrigiu uma vulnerabilidade zero-day explorada ativamente em seu Secure Email Gateway (SEG) que permite a atacantes remotos não autenticados executar comandos com privilégios de root. Rastreada como CVE-2026-76519, a falha decorre de uma fraqueza de travessia de caminho …
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes …
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]
Cybersecurity Awareness Month: Ransomware and Extortion Attacks
Continuing Cybersecurity Awareness Month with experts weighing in on topic #1 - Ransomware and Extortion Attacks. Healthcare is still the #1 most targeted industry for ransomware. The post Cybersecurity Awareness Month: Ransomware and Extortion Attacks appeared first on Health IT…
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix…
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing efforts to disrupt North Korea's fraudulent remote IT worker (ITW) scheme. The indictment charges a mix of U.S. citizens and Chinese nationals for their roles …
Ivanti Connect Secure Zero Day Exploited in Attacks – The HIPAA Journal
Ivanti Connect Secure Zero Day Exploited in Attacks The HIPAA Journal
Global takedown hits network behind 1 billion phishing messages
A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 150 countries has been disrupted by law enforcement agencies and partners worldwide. [...]
Russian Influence Operation Widely Targeting Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]
Anthropic warns small AI models could self-replicate through IoT devices
"Small weight-based replicators" could usher in a new generation of computer worms.
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability. …