An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months before it was publicly disclosed, according to new findings from Google-owned Mandiant. The vulnerability, tracked as CVE-2026-202…
A 21-year-old using the alias "Snoopy" was sentenced to 18 months in prison for his role in hacking DraftKings accounts in the November 2022 cyberattack. [...]
New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices. [...]
Researchers believe rogue peering was used to connect to the victim's SD-WAN devices to gain admin privileges and root-level access.
A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor. [...]
Operation Endgame disrupts StealC malware infrastructure, seizing millions of stolen credentials and targeting servers used in global cybercrime campaigns.
Persistent cybercrime, social engineering, and infrastructure threats continue to plague the FIFA 2026 World Cup across the US, Canada, and Mexico.
Uma vulnerabilidade crítica no Cisco Unified Communications Manager (Unified CM), que permite ataques de SSRF e escalonamento de privilégios para root, está sendo explorada ativamente por hackers, de acordo com a empresa de inteligência em explorações Defused. A falha, registrada…
Uma nova linhagem de malware avançado do tipo Cavalo de Troia de Acesso Remoto, batizada de MisticRAT, foi identificada em campanhas ativas de espionagem e intrusão corporativa global. O agente malicioso atua de forma estratégica como um facilitador de infecções secundárias, forn…
Uma coalizão internacional liderada pela Microsoft, agências de aplicação da lei e diversas empresas de segurança cibernética desmantelou uma massiva rede de servidores e domínios compartilhada por duas das famílias de malware mais ativas do cenário de e-crime: o Amadey e o Steal…
Criar uma réplica convincente da voz ou da imagem de uma pessoa exigia, até pouco tempo atrás, equipamentos sofisticados, horas de processamento e conhecimento técnico avançado. A inteligência artificial mudou esse cenário. Hoje, poucos minutos de áudio ou vídeo disponível public…
OpenClaw removed five packages from ClawHub, its skills marketplace, that bypassed security checks even though they included infostealers and other threats.
A coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and Microsoft, has resulted in the takedown of criminal infrastructure powering Amadey and StealC. "The main common goal was to disrupt the 'assembly lin…
Healthcare Breach at AI Vendor Xsolis Exposes 1.4 Million Records Across Seven Major Hospitals Tech Times
Researchers warn GhostShell is using fake drone documents to target Ukrainian defence teams, stealing passwords and sensitive data in a new cyber campaign.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi OS and Lantronix serial-to-ethernet servers. [...]
Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as part of Operation Endgame, which targets cybercriminal services and ransomware gangs. [...]
Service desks have become a favored target for attackers seeking password resets, MFA changes, and access to corporate accounts. Specops Software breaks down how service desk social engineering attacks work and how organizations can defend against them. [...]
JFrog warns of malicious npm packages that mimic PostCSS tooling, drop a Windows RAT, and target Chrome-stored passwords through a staged infection setup route.
A empresa de pesquisa em segurança cibernética Paradigm Shift divulgou os detalhes técnicos de um novo exploit de BootROM que afeta milhões de dispositivos da Apple. Batizada de Usbliter8, a vulnerabilidade afeta diretamente a SecureROM, o primeiro código executado por um iPhone …
