A agência de Segurança Cibernética e Infraestrutura dos EUA (CISA) emitiu, ontem, um alerta urgente sobre um aumento significativo de ataques a controladores lógicos programáveis (PLCs) expostos à internet no setor de sistemas de água e esgoto. O alerta ocorre depois que hackers …
Had the hacks used conventional methods, someone would likely go to prison.
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. The…
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. [...]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. [...]
Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link…
Health-ISAC Warns of Increasing ShinyHunters Healthcare Data Theft Attacks The HIPAA Journal
Health sector organizations have been warned about an increase in successful attacks by the ShinyHunters threat group. In contrast to […] The post Health-ISAC Warns of Increasing ShinyHunters Healthcare Data Theft Attacks appeared first on The HIPAA Journal.
Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators. Researchers named the operation Fuyao and attributed it to Zhejiang Fengw…
The AI chatbot was more effective at creating “exploitable trust” than the humans.
Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET's new threat report examines the rise of malicious AI skills, AI-assisted malware, ClickFix attacks, record quishing activity, and ransomware tools designed to d…
A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.
XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards.
An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) attacks and even session hijacking, allowing an attacker to seize control of a user's network …
Uma plataforma criminosa chamada Work Panel está transformando falsas chamadas de suporte técnico em operações estruturadas para assumir contas corporativas. O serviço reúne pesquisa de alvos, clonagem de páginas, telefonia e captura de credenciais em um único painel. A ferrament…
Uma vulnerabilidade crítica chamada CosmosEscape poderia permitir o controle de praticamente todas as instâncias do Azure Cosmos DB, incluindo bancos de dados internos da Microsoft. A falha rompia o isolamento entre clientes da plataforma de nuvem. O problema estava na API Gremli…
Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens - has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-constrained devices like smart TVs, printers, and so on, the de…
Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The research…
Uma vulnerabilidade zero day no Cisco Secure Firewall Management Center está sendo explorada para acessar dados sensíveis de ambientes corporativos. A falha, identificada como CVE-2026-20316, permite login remoto sem autenticação válida. O problema é causado por credenciais estát…
A Anthropic revelou que vários de seus modelos avançados de inteligência artificial, durante testes realizados por um parceiro terceiro, acessaram a internet aberta e comprometeram três organizações em incidentes separados, com registros a partir de abril. A empresa de IA afirmou…
