Max severity SonicWall SMA1000 flaw now exploited in attacks
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. [...]
Ameaças Cibernéticas
2117 notíciasFlax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed bel…
Plataforma de exploits para iOS rouba chaves de carteiras
A Censys revelou o funcionamento do DarkSword, plataforma que vende acesso a dispositivos iOS, e do Coruna, o malware que rouba carteiras de criptomoedas depois da invasão. A infraestrutura ficou exposta entre 15 e 17 de setembro. A entrada é pelo navegador. O DarkSword ataca o W…
FBI Warns FortiBleed Campaign Still Active, Hits 86,000+ FortiGate Devices
FortiBleed attacks continue to target Fortinet FortiGate devices, with SOCRadar reporting more than 86,644 compromised devices across 194…
Anúncio na dark web oferece chave de API do VirusTotal
Uma chave de API do VirusTotal Enterprise está à venda por 350 dólares em fórum criminoso. A oferta foi divulgada em 7 de outubro pelo canal Dark Web Informer, que monitora esses ambientes, e não traz prova de que a credencial seja autêntica. A chave de API permite que um softwar…
GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8…
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. [...]
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exp…
FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disruption of malicious tools used by a China-linked advanced persistent threat group known as Flax Typhoon. To that end, the agencies seized several domains and blocked access to p…
Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland
The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws. [...]
Check Point alerta para injeção de prompt em documentos
Documentos corporativos como PDFs, contratos, faturas e e-mails podem esconder instruções capazes de induzir agentes de inteligência artificial a executar ações não autorizadas. O alerta foi publicado pela Check Point Software, em comunicado divulgado em 7 de outubro de 2026, que…
FBI Seizes Flax Typhoon Hacking Tools Linked to Chinese Contractor
The FBI and DOJ seized domains and disrupted scanning and spear-phishing tools used by Flax Typhoon, a China-linked…
Warden Stealer caça chaves de IA e criptomoedas
Uma nova família de malware conhecida como Warden Stealer está ganhando tração em fóruns da dark web ao mirar credenciais de desenvolvedores de inteligência artificial e carteiras de criptomoedas. Anunciado por seus criadores como uma solução “tudo-em-um” que combina stealer, cli…
FBI disrupts Chinese hacking tools used to breach critical infrastructure
The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide. [...]
'AgentCorruption' Puts AWS Environments At Risk With Single Prompt
A now-patched vulnerability in AWS Bedrock AgentCore could allow an attacker to use one AI chatbot to take over an organization's entire fleet.
Cisco corrige falhas críticas em switches Nexus
A Cisco publicou comunicados de segurança para quatro vulnerabilidades críticas no sistema operacional NX-OS, que equipa switches da linha Nexus para data centers. As falhas podem ser exploradas para executar código arbitrário com privilégios de root nos equipamentos. Caso a exec…
Ransomware attack disrupts Japan's IDCF Cloud used by govt clients
IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targeted in a ransomware attack that caused an outage at a data center cluster serving the eastern part of the country. [...]
Αξιολόγηση κριτηρίων επιτυχίας με nines-casino-greece.com και μεθόδους βελτίωσης της εμπειρίας χρήστη
Αξιολόγηση κριτηρίων επιτυχίας με nines-casino-greece.com και μεθόδους βελτίωσης της εμπειρίας χρήστη Ασφάλεια και Αδειοδότηση Προστασία Δεδομένων και Ιδιωτικότητα Ποικιλία Παιχνιδιών και Πάροχοι Λογισμικού Επιλογή Παιχνιδιών με Ζωντανούς Κρουπιέρηδες Υποστήριξη Πελατών Πολυγλωσσ…
Genuine excitement awaits alongside https://the-kingdomcasinos.uk for passionate gamers
Genuine excitement awaits alongside https://the-kingdomcasinos.uk for passionate gamers Understanding the Appeal of Online Gaming The Role of Technology in Enhancing the Experience Key Considerations When Choosing an Online Casino Navigating Bonus Structures and Wagering Requirem…
Low-cost Android phones ship with residential proxy malware
A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. [...]