Trend Micro warns of Apex One zero-day exploited in the wild
Japanese cybersecurity software company Trend Micro has addressed an Apex One zero-day vulnerability exploited in attacks targeting Windows systems. [...]
Ameaças Cibernéticas
1629 notíciasVerizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks
Ransomware and vendor breaches persist, but the 2026 Data Breach Investigations Report (DBIR) highlights how evolving social engineering tactics make the sector more vulnerable.
Drupal: Critical SQL injection flaw now targeted in attacks
Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. [...]
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows
Cybersecurity researchers have disclosed details of a new automated campaign called Megalodon that has pushed 5,718 malicious commits to 5,561 GitHub repositories within a six-hour window. "Using throwaway accounts and forged author identities (build-bot, auto-ci, ci-bot, pipeli…
Botnet escrita em Rust mira ambientes Kubernetes
A botnet P2PInfect passou a comprometer clusters Kubernetes por meio de instâncias Redis expostas à internet, ampliando o risco para ambientes de nuvem e aplicações corporativas. A ameaça, escrita em Rust e ativa desde 2023, foi observada em ataques contra clusters do Google Kube…
Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective
1 Introduction This article provides a technical analysis of how many Windows kernel mode drivers can be interacted with from user mode without the hardware they were developed for. This work was motivated by driver-oriented vulnerability research and the need to evaluate the ex…
Novo ransomware WantToCry abusa de compartilhamentos SMB
O ransomware WantToCry está sendo usado contra empresas ao abusar de serviços SMB expostos na internet para criptografar arquivos remotamente, sem instalar malware no sistema da vítima. A técnica reduz a visibilidade do ataque e dificulta a detecção por ferramentas tradicionais d…
A hacker group is poisoning open source code at an unprecedented scale
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.
US and Canada arrest and charge suspected Kimwolf botnet admin
U.S. and Canadian authorities arrested and charged a Canadian man with operating the KimWolf distributed denial-of-service (DDoS) botnet, which infected nearly two million devices worldwide. [...]
Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks
The U.S. Department of Justice (DoJ) on Thursday announced the arrest of a Canadian man in connection with allegedly operating a distributed denial-of-service (DDoS) botnet known as Kimwolf. In tandem, Jacob Butler (aka Dort), 23, Ottawa, Canada, has been charged with offenses r…
China's Webworm Uses Discord, Microsoft Graphs to Hack EU Govts.
The advanced persistent threat group also relied on SOCKS proxies like SoftEther VPN, tunneling tools that act as a middleman between victim and attacker.
CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are lis…
Tráfego de bots maliciosos já consome 40% da web
Mais da metade do tráfego global da internet não é gerado por seres humanos, aponta a 13ª edição do Relatório de Bots Maliciosos da Thales Group, publicado em 30 de abril de 2026. A pesquisa indica que 53% das requisições em sites vêm de programas automatizados, sendo que 40% são…
Microsoft corrige falhas do Defender exploradas como zero-day
A Microsoft lançou patches para duas vulnerabilidades no Microsoft Defender, ambas já exploradas em ataques como falhas do tipo dia-zero. As brechas, registradas como CVE-2026-41091 e CVE-2026-45498, foram corrigidas na versão 4.18.26040.7 da plataforma antimalware. A primeira pe…
Cisco corrige falha crítica no Secure Workload
A Cisco publicou atualizações de segurança para uma vulnerabilidade de gravidade máxima em sua plataforma Secure Workload, anteriormente conhecida como Tetration. A falha, registrada como CVE-2026-20223, está localizada nas APIs REST internas do produto e permite que atacantes nã…
Google vaza dados de falha crítica não corrigida no Chromium
A Google divulgou involuntariamente informações sobre uma vulnerabilidade não corrigida no Chromium que mantém JavaScript em execução em segundo plano mesmo após o navegador ser fechado, permitindo execução remota de código no dispositivo. A falha foi relatada pela pesquisadora L…
Google accidentally exposed details of unfixed Chromium flaw
Google has accidentally leaked details about an unfixed issue in Chromium that keeps JavaScript running in the background even when the browser is closed, allowing remote code execution on the device. [...]
Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a campaign targeting a telecommunications provider in the Middle East since at least mid-2022. "Showboat is a modular post-exploitation framework designed for Linu…
Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet
Modern crypto drainers don't hack wallets. They trick users into approving malicious transactions. Flare explores how the Lucifer DaaS platform scales wallet theft through phishing and automation. [...]
Chinese hackers target telcos with new Linux, Windows malware
A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered Linux and Windows malware dubbed Showboat and JFMBackdoor, respectively. [...]