A critical vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited by an unauthenticated remote attacker to execute arbitrary code. [...]
A cybersecurity researcher has published proof-of-concept (PoC) exploits for two unpatched Microsoft Windows vulnerabilities named YellowKey and GreenPlasma, which are a BitLocker bypass and a privilege-escalation flaw. [...]
Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and UiPath packages with the self-propagating Mini Shai-Hulud worm.
Attackers uniquely fingerprint victims before delivering spear-phishing payloads aimed at espionage, in the latest campaign from the Belarussian nation-state threat group.
Two threat campaigns heavily leveraged AI agents to support attacks against entities in Mexico and Brazil.
The cyberthreat group targets an Azerbaijani oil and gas firm with repeated attacks, as the China-linked actors extend targeting beyond hospitality, telecom, and government sectors.
A threat actor with affiliations to China has been linked to a "multi-wave intrusion" targeting an unnamed Azerbaijani oil and gas company between late December 2025 and late February 2026, marking an expansion of its targeting. The activity has been attributed by Bitdefender wit…
Foxconn, the world's largest electronics manufacturer, says some of its North American factories are now working to resume normal operations after a cyberattack. [...]
A Slovakian administrator tied to the dark web Kingdom Market received a 16 year US prison sentence for drug trafficking and cybercrime activity.
A fabricante de eletrônicos Foxconn, conhecida formalmente como Hon Hai Precision Industry, confirmou ontem em comunicado que algumas de suas fábricas na América do Norte sofreram um ataque cibernético. A empresa informou que as unidades afetadas estão retomando a produção normal…
Grupos ligados ao ecossistema Magecart estão abusando do Google Tag Manager para inserir skimmers de cartão em lojas virtuais comprometidas, usando uma ferramenta legítima e amplamente confiável como ponto de entrega de código malicioso. O Google Tag Manager é usado por milhões d…
Pesquisadores identificaram uma vulnerabilidade na extensão “Claude in Chrome” que poderia permitir a extensões maliciosas sem permissões declaradas controlar o assistente de IA e acessar dados sensíveis do usuário. O problema está relacionado a uma violação de limite de confianç…
Canadian telecom providers face mounting cyber threats from ransomware, SIM swapping, data breaches, and nation-state attacks targeting critical infrastructure.
Cybersecurity researchers are calling attention to a new campaign dubbed GemStuffer that has targeted the RubyGems repository with more than 150 gems that use the registry as a data exfiltration channel rather than for malware distribution. "The packages do not appear designed fo…
Google on Tuesday unveiled a new opt-in Android feature called Intrusion Logging for storing forensic logs to better analyze sophisticated spyware attacks. Intrusion Logging, available as part of Advanced Protection Mode, enables "persistent and privacy-preserving forensics loggi…
The U.S. House Committee on Homeland Security is calling on Instructure executives to testify about two cyberattacks by the ShinyHunters extortion group that targeted the company's Canvas platform, allowing threat actors to steal student data and disrupt schools during final exam…
ShinyHunters says its shinyhunte.rs domain was suspended after the Canvas LMS attacks, forcing the group to move fully to its dark web (.onion) site.
Centenas de pacotes nos repositórios npm e PyPI foram comprometidos na campanha Shai-Hulud (TeamPCP), que rouba credenciais de desenvolvedores. O invasor sequestrou tokens OIDC válidos para publicar versões maliciosas com assinaturas legítimas, informou a empresa StepSecurity. O …
A SAP publicou hoje um pacote de atualizações de segurança que aborda 15 vulnerabilidades em produtos corporativos, com destaque para duas falhas críticas no SAP Commerce Cloud e no S/4HANA. Código arbitrário no SAP Commerce Cloud A primeira vulnerabilidade crítica, registrada co…
A Fortinet publicou ontem (12 de maio de 2026) atualizações de segurança para corrigir duas vulnerabilidades críticas no FortiSandbox e no FortiAuthenticator, que permitem a execução remota de comandos ou códigos (RCE) em sistemas não corrigidos. Falha no FortiAuthenticator A pri…
