AI-driven attacks are exposing the limits of fragmented MSP security stacks and slow response workflows. Kaseya breaks down why integrated security, automation, and recovery are becoming essential. [...]
It's been one of those weeks. You expect the usual noise: recycled malware, sloppy attacks, another easy target getting hit. Instead, there's a supply chain attack kit in a public repo, a $5,000-a-month RAT that clones browsers, and research showing AI agents can be tricked into …
Hackers are using fake Claude Code guide and AI PDFs to spread AsyncRAT malware via Windows attack using PowerShell and Defender exclusions.
Duas vulnerabilidades no Windows Remote Desktop Protocol podem permitir que invasores exponham dados sensíveis de sistemas afetados. As falhas, rastreadas como CVE-2026-42908 e CVE-2026-45639, foram corrigidas pela Microsoft nas atualizações de segurança de 9 de junho de 2026. Os…
O OpenSSL lançou correções para vulnerabilidades que podem afetar aplicações responsáveis por validar mensagens assinadas, certificados e outros fluxos criptográficos. A falha mais grave, rastreada como CVE-2026-45447, pode permitir execução remota de código em cenários específic…
Uma falha no ServiceNow foi explorada por invasores para obter acesso não autorizado a instâncias de clientes, segundo alerta divulgado pela própria empresa. O problema permitia, em determinadas condições, que usuários não autenticados acessassem recursos além do previsto. A atua…
The Vietnam-aligned threat actor known as OceanLotus has been attributed to two distinct campaigns that targeted domestic entities and stock investors with a backdoor known as SPECTRALVIPER. The campaigns involve a prolonged cyber espionage operation aimed at a Vietnamese infras…
Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways. [...]
North Korea's gross domestic product (GDP) has grown, in part because of the cybercrime gains of groups linked to the nation, which target business and financial firms.
Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. [...]
The Justice Department and FBI seized 13 fake consulting websites that officials say targeted US clearance holders with paid research work designed to obtain sensitive government information.
The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. [...]
Bug bounty research inadvertently led organizations to believe they were being breached through their ServiceNow instances.
A empresa de segurança ofensiva watchTowr Labs publicou hoje detalhes de uma vulnerabilidade de injeção de comandos que permite a um invasor remoto não autenticado alcançar execução remota de código (em nível root) no Ivanti Sentry. A falha, registrada como CVE-2026-10520, recebe…
Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters extortion gang, which claims to have stolen data from over 100 organizations. [...]
ReversingLabs reveals how hackers exploit social media engagement metrics to deliver Vidar infostealer malware to thousands of unsuspecting users.
The disgruntled researcher released yet another PoC for a Windows Defender bug that allows for system takeover, showing no signs of abandoning their ongoing feud with Microsoft.
Cybersecurity researchers have warned of a "resurgence and expansion" of JDY, a covert network associated with China-nexus state-sponsored threat actors. "The JDY botnet comprises over 1,500 SOHO [small office and home office] and IoT devices and operates as a centrally controll…
A Kaspersky identificou uma nova tática em que cibercriminosos não usam imagens convencionais de QR Code (como arquivos JPG ou PNG), mas sim símbolos, blocos e caracteres de texto digitados juntos para desenhar o código na tela, conforme artigo publicado pela empresa em 21 de mai…
A high-severity unpatched security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applications, has come under active exploitation in the wild, according to findings from VulnCheck. The vulnerability in question is CVE-2026-5027 (CVSS sc…
