Cybersecurity researchers are calling attention to a new campaign dubbed GemStuffer that has targeted the RubyGems repository with more than 150 gems that use the registry as a data exfiltration channel rather than for malware distribution. "The packages do not appear designed fo…
Google on Tuesday unveiled a new opt-in Android feature called Intrusion Logging for storing forensic logs to better analyze sophisticated spyware attacks. Intrusion Logging, available as part of Advanced Protection Mode, enables "persistent and privacy-preserving forensics loggi…
The U.S. House Committee on Homeland Security is calling on Instructure executives to testify about two cyberattacks by the ShinyHunters extortion group that targeted the company's Canvas platform, allowing threat actors to steal student data and disrupt schools during final exam…
ShinyHunters says its shinyhunte.rs domain was suspended after the Canvas LMS attacks, forcing the group to move fully to its dark web (.onion) site.
Centenas de pacotes nos repositórios npm e PyPI foram comprometidos na campanha Shai-Hulud (TeamPCP), que rouba credenciais de desenvolvedores. O invasor sequestrou tokens OIDC válidos para publicar versões maliciosas com assinaturas legítimas, informou a empresa StepSecurity. O …
A SAP publicou hoje um pacote de atualizações de segurança que aborda 15 vulnerabilidades em produtos corporativos, com destaque para duas falhas críticas no SAP Commerce Cloud e no S/4HANA. Código arbitrário no SAP Commerce Cloud A primeira vulnerabilidade crítica, registrada co…
A Fortinet publicou ontem (12 de maio de 2026) atualizações de segurança para corrigir duas vulnerabilidades críticas no FortiSandbox e no FortiAuthenticator, que permitem a execução remota de comandos ou códigos (RCE) em sistemas não corrigidos. Falha no FortiAuthenticator A pri…
Signal has introduced new in-app confirmations and warning messages as additional safeguards against phishing and social engineering attempts that could lead to various forms of fraud. [...]
Uma segunda vulnerabilidade grave no kernel do Linux, apelidada de “Dirty Frag“, permite que qualquer usuário com uma conta básica em um computador afetado assuma o controle administrativo total e realize escape de contêineres. A falha foi descoberta por um pesquisador independen…
Fortinet has released security patches for two critical vulnerabilities in FortiSandbox and FortiAuthenticator that could enable attackers to run commands or arbitrary code. [...]
Researchers at Ontinue have discovered an undocumented malware campaign targeting developers with fake Claude Code installers to steal browser passwords and cookies.
Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution. Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver …
Pwn2Own Berlin 2026 reportedly reached full capacity for the first time, prompting rejected researchers to publicly disclose zero-day exploits targeting Firefox, NVIDIA, and AI platforms.
RubyGems, the standard package manager for the Ruby programming language, has temporarily paused account sign ups following what has been described as a "major malicious attack." "We're dealing with a major malicious attack on Ruby Gems right now," Maciej Mensfeld, senior product…
O Google Threat Intelligence Group (GTIG) identificou e interrompeu, pela primeira vez, um ataque de dia zero desenvolvido com auxílio de inteligência artificial. O grupo de cibercriminosos responsável,descrito como "proeminente", mas não identificado pela empresa, planejava usar…
A tokenizer library file present in Hugging Face AI models can be manipulated to hijack the model's outputs and exfiltrate data.
Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network (TON) for command-and-control (C2). The new variant, observed by ThreatFabric between January and February 2026, has been observed actively targeting banking and …
Operation HumanitarianBait uses fake aid documents, GitHub-hosted payloads, and Python spyware to target Russian-speaking victims.
Autoridades europeias desmantelaram a nova versão da plataforma CrimeNetwork, um dos principais mercados ilegais do submundo digital em língua alemã. A operação expôs mais de 22 mil usuários e mais de 100 vendedores ativos ligados ao ambiente criminoso. O suposto operador da plat…
Uma nova técnica chamada GhostLock demonstra como invasores podem paralisar compartilhamentos de arquivos do Windows sem criptografar dados, simulando o impacto operacional de um ataque de ransomware. O método explora comportamentos legítimos do SMB e do sistema operacional, sem …
