Russian APT 'Gamaredon' Upgrades Its Arsenal, Requiring New Defenses
The FSB state-sponsored operation has gotten a lot better at loading its malware and hiding its servers.
Ameaças Cibernéticas
1624 notíciasProxies residenciais: 7,4 milhões de ataques em 2026
Pesquisadores da Gen, empresa responsável pela Avast, detectaram 7,4 milhões de incidentes maliciosos desde o início de 2026 roteados por redes de proxy residencial, afetando 572 mil usuários em todo o mundo. O Brasil figura como o terceiro país mais impactado, com 39 mil consumi…
Como foi explorado zero-day no Cisco SD-WAN Manager
A Mandiant, empresa de inteligência em ameaças do Google Cloud, documentou um ataque que utilizou uma vulnerabilidade zero-day no Cisco Catalyst SD-WAN Manager para escalonar privilégios de uma conta administrativa comprometida para acesso root. O caso, detalhado hoje no blog do …
EdTech Attackers Shift From Schools to Their Software Suppliers
Educational institutions, the edtech companies they rely on, and, more concerningly, the challenges they pose for schools are the focus of the latest Reporters' Notebook video series.
Correções no cURL tratam falhas de 25 anos atrás
Os desenvolvedores do cURL informaram à comunidade de TI ter corrigido um número recorde de vulnerabilidades no software, em sua versão mais recente , incluindo uma falha de segurança com 25 anos de existência. O anúncio foi feito por Daniel Stenberg, um dos mantenedores do cURL.…
GitLab corrige vulnerabilidades críticas
A GitLab lançou atualizações de segurança para as edições Community (CE) e Enterprise (EE) que resolvem 13 vulnerabilidades, incluindo três falhas de alta gravidade que poderiam permitir execução de código arbitrário e divulgação de informações sensíveis. A empresa recomenda que …
Order-tracking app Shop abused to push callback phishing attacks
Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order histories to trick them into providing sensitive data or installing remote access software. [...]
Local Police Collusion Hampers Crackdown on Asian Scam Centers
With tens of billions of dollars flowing into regional economies from cybercrime, scam centers continue to flourish, despite international and law-enforcement efforts.
Aumentam riscos cibernéticos durante Copa do Mundo
A Elytron Cybersecurity, empresa especializada em serviços ofensivos e defensivos de segurança da informação, alerta para a elevação dos riscos cibernéticos durante períodos de grande mobilização social, como a Copa do Mundo, quando cresce a incidência de golpes que exploram o co…
Fake GTA 6 Early Access Websites Target Gamers with Malware and Crypto Scams
GTA 6 scams are luring fans with fake early access, crypto payments and malware downloads. Learn why PC and Android gamers face the biggest risks online today.
New macOS malware embeds fake errors to confuse AI analysis tools
A newly discovered macOS malware dubbed "Gaslight" is designed to confuse AI-assisted malware analysis tools by hiding prompt injection strings and fake debugging data within the executable. [...]
Bluekit phishing kit adopts browser-in-the-middle for login theft
The Bluekit phishing-as-a-service platform continues to evolve with nearly 70 new hostnames identified over the past week and by adding browser-in-the-middle capabilities for improved data theft. [...]
Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript code. According to Island, the extension, named Adblock for YouTube (ID: cmedhionkhpnakcndndgjdbohmhepckk), has more than 10 million installs and carri…
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting to admit who left the door open — old creds still working, trusted apps doing sketchy crap, browser tricks jumping the fence, and “normal” workflows turning into phishing pipes because ap…
Webinar: Why account takeovers remain one of the hardest threats to stop
Account takeover attacks continue to challenge security teams because attackers often operate through legitimate accounts and trusted services. This webinar explores how behavioral AI can help organizations identify compromised accounts faster and automate response workflows. [..…
Suspected Cyberattack Sends Fake Emergency Alert to Phones Across Brazil
Brazil’s alert system was taken offline after a fake emergency alert reached phones, with officials investigating a suspected cyberattack and security failure.
Europe Evolves Into Ransomware's Favorite Region
After a global lull, ransomware gangs are setting sights on a rich new arena: attacking EU organizations and their suppliers.
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis
A previously undocumented Rust-based macOS implant and information stealer has been found to embed a prompt injection payload designed to trick a malware analyst's artificial intelligence (AI) tools and trick it into aborting or refusing an analysis of the artifact. The malware …
New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns
A new, stealthy backdoor named Mistic has been deployed as part of suspected financially motivated attacks aimed at multiple organizations spanning insurance, education, IT, and professional services sectors since April 2026. According to Symantec and Carbon Black's Threat Hunte…
British Scattered Spider Hacker Pleads Guilty to Cyberattacks on TfL; SSM Health Care; Sutter Health – The HIPAA Journal
British Scattered Spider Hacker Pleads Guilty to Cyberattacks on TfL; SSM Health Care; Sutter Health The HIPAA Journal