Threat actors are deploying an updated SHub Stealer variant named Reaper that exploits the native macOS Script Editor to bypass OS-level protections and compromise cryptocurrency assets.
O escritório de advocacia Weil Gotshal, sediado nos EUA, teria pagado entre USD 18 milhões e USD 20 milhões ao grupo de extorsão Luna Moth para evitar a publicação de dados confidenciais de clientes, conforme reportagem do portal Legal Cheek, citando informações do The Insurer. O…
Cybersecurity researchers have discovered a previously unreported threat cluster dubbed OP-512 that has been observed targeting Microsoft Internet Information Services (IIS) servers to deploy a bespoke web shell framework. ReliaQuest has assessed with moderate to high confidence…
Uma nova campanha maliciosa está usando pacotes npm comprometidos para roubar segredos de desenvolvedores, repositórios GitHub e ambientes de CI/CD. A ameaça, chamada IronWorm, foi desenvolvida em Rust e mira principalmente equipes de software, projetos Web3 e operações ligadas a…
A Cisco corrigiu uma vulnerabilidade crítica no Cisco Unified Communications Manager e no Unified Communications Manager Session Management Edition que pode permitir ataques de server-side request forgery contra sistemas afetados. A falha, rastreada como CVE-2026-20230, foi divul…
Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise. The vulnerability in question is CVE-2026-3300 (CVSS score: 9.8), a re…
Security researchers and the FBI are warning that a wave of FIFA-themed fraud is already hitting World Cup 2026 fans, days before the June 11 kickoff. Recent reports describe thousands of lookalike FIFA domains, banking malware hidden inside pirate streaming apps, and at least o…
On Thursday, Cisco warned of a high-severity, unpatched zero-day in the Cisco Catalyst SD-WAN Manager (tracked as CVE-2026-20245) actively exploited in attacks enabling root privilege escalation. [...]
The threat actor known as PCPJack has hijacked cloud servers associated with Amazon Web Services (AWS), Google Cloud, and Microsoft Azure to create a covert SMTP email relay network. "Compromised business servers across the U.S., Europe, and Asia were quietly converted into SMTP…
Like Shai-Hulud, the campaign targets developers to steal credentials and reuses them to propagate across the software supply channel.
The Windows version of the Hola Browser has been compromised in a supply chain attack that delivered an undeclared executable identified by researchers as a cryptocurrency miner. [...]
One of the world's most diverse, least-focused cybercrime groups is enlarging its footprint beyond East Asia.
The post Termite Ransomware: Steganographic In-Memory Attack Analysis appeared first on Clearwater.
Gartner analysts issued a call to action to bolster defenses against several emerging critical threats, such as deepfakes and prompt injections.
A new Magecart campaign is using Stripe's API infrastructure to host the credit card-stealing payload and the data exfiltrated from checkout pages. [...]
By targeting large numbers of users, attackers increased their chances of success.
Pesquisadores da Calif publicaram ontem um exploit de negação de serviço (DoS) chamado “HTTP/2 Bomb”. Ele afeta a configuração padrão dos principais servidores web, incluindo nginx, Apache httpd, Microsoft IIS, Envoy e Cloudflare Pingora, conforme artigo no blog da empresa. A fal…
Cisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root. It is tracked as CVE-2026-20230, and proof-of-concept exploit code is already public. Cisco's PSIRT says it has n…
A Cisco publicou, em 3 de junho de 2026, um aviso de segurança para corrigir uma vulnerabilidade de Server-Side Request Forgery (SSRF) no Cisco Unified Communications Manager (Unified CM) e na edição Session Management Edition (Unified CM SME), conforme comunicado oficial. A falh…
Cibercriminosos compraram entre 10% e 20% de todos os nomes de domínio de gTLDs criados em 2025, com pelo menos 8,5 milhões de domínios já incluídos em listas de bloqueio, segundo relatório do Interisle Consulting. O estudo estabelece que 10% é o piso, mas projeções indicam que o…
