A Infrawatch identificou, em relatório publicado no dia 21 de abril de 2026, 87 instâncias expostas do painel de controle ProxySmart em 17 países, vinculadas a pelo menos 24 provedores de proxy comerciais e 35 operadoras de celular. A empresa de inteligência em infraestrutura de …
Wiz used an AI reverse-engineering tool to pinpoint a vulnerability that previously would have been too costly and time-consuming to undertake.
Flaws in OpenEMR's platform — used by more than 100,000 healthcare providers — enabled database compromise, remote code execution, and data theft.
A crescente sofisticação dos ataques digitais já se reflete em dados concretos no país. Em 2025, a solução de Compartilhamento de Incidentes Cibernéticos (CIC), da Confederação Nacional das Seguradoras (CNseg), emitiu 527 alertas de incidentes. No primeiro trimestre de 2026, fora…
Apenas 30% dos maiores sites de apostas e jogos online do Brasil implementaram o nível mais forte de proteção DMARC para rejeitar e-mails fraudulentos ou falsificados, deixando 70% dos apostadores expostos a fraudes por e-mail, golpes de phishing e falsificação de marca, conforme…
The Ukrainian police have arrested three individuals who hacked more than 610,000 Roblox gaming accounts and sold them for a profit of $225,000. [...]
Bluekit Phishing Kit is a new PhaaS tool that targets major platforms, using AiTM techniques to steal session data and bypass MFA protections.
Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages with credential-stealing malware. According to reports from Aikido Security, SafeDep, Socket, StepSecurity, and Google-owned Wiz, the campaign – calling it…
A hacker using the alias "Xorcat" claims to have breached Polymarket using API flaws, but research suggests the leak could be just data scraping incident.
A critical vulnerability affecting all but the latest versions of cPanel and the WebHost Manager (WHM) dashboard could be exploited to obtain access to the control panel without authentication. [...]
The emerging ransomware has been deployed against victims of the TeamPCP supply chain attacks, but organizations should think twice before paying for a decryptor.
Cybersecurity researchers have discovered malicious code in an npm package after a malicious package as a dependency to the project by Anthropic's Claude Opus large language model (LLM). The package in question is "@validate-sdk/v2," which is listed on npm as a utility software d…
An analysis of the destructive malware reveals sophisticated living-off-the-land (LotL) techniques and detailed strategies for the widespread deletion of data.
WILMINGTON, Delaware, 29th April 2026, CyberNewswire
In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed attackers to access millions of private repositories. [...]
In February 2026, researchers uncovered a shift that completely changed the game: threat actors are now using custom AI setups to automate attacks directly into the kill chain. We aren't just talking about AI writing better phishing emails anymore. We’re talking about autonomous …
Uma nova vulnerabilidade de zero clique no Windows entrou no radar após ser explorada em ataques atribuídos ao grupo APT28 para contornar o Defender SmartScreen e forçar a autenticação automática da vítima em um servidor controlado pelo invasor. A falha, identificada como CVE-202…
Pesquisadores divulgaram três falhas no OpenClaw, framework de agentes de IA distribuído como pacote npm, que podem abrir caminho para bypass de políticas, alteração indevida de configurações críticas e redirecionamento de requisições com vazamento de credenciais. O projeto, ante…
US-Estonian suspect Peter Stokes arrested in Finland over alleged ties to Scattered Spider, facing US charges for cyberattacks, fraud, and data breaches.
Security firms find themselves especially exposed.
