Imagine um cenário em que senhas, dados bancários e comunicações sigilosas pudessem ser interceptados em minutos por máquinas ultrarrápidas. O que parece ficção científica é, em 2026, um desafio real para especialistas em cibersegurança: o avanço da computação quântica ameaça tor…
Fake CAPTCHA ClickFix attack tricks users into running malicious commands, using cmdkey and regsvr32 to maintain persistence and avoid detection on Windows
A new financially motivated hacking group tracked as BlackFile has been linked to a wave of data theft and extortion attacks against retail and hospitality organizations since February 2026. [...]
The post Advisory for Microsoft Teams Helpdesk Impersonation Attacks appeared first on Clearwater.
A new vulnerability dubbed Pack2TheRoot could be exploited in the PackageKit daemon to allow local Linux users to install or remove system packages and gain root permissions. [...]
É ano de Copa do Mundo, e, além dos produtos e publicidades oficiais do evento, é claro que golpistas também aproveitariam a oportunidade para capitalizar em cima dos fãs do esporte. Um estudo da empresa de segurança Kaspersky identificou, em estudo, pelo menos 20 domínios falsos…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed that an unnamed federal civilian agency's Cisco Firepower device running Adaptive Security Appliance (ASA) software was compromised in September 2025 with malware called FIRESTARTER. FIRESTARTER, per CI…
The Office of Inspector General (OIG) of the U.S. National Aeronautics and Space Administration (NASA) has revealed how a Chinese national posed as a U.S. researcher as part of a spear-phishing campaign to obtain sensitive information from the space agency, as well as from govern…
GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools.
Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cross-site scripting (XSS) security flaw. [...]
In the last six months, companies have seen a significant influx of AI-powered phishing, as cyberattackers progress from small campaigns to 1-to-1 personalized attacks.
A Prefeitura de Jaraguá do Sul, em Santa Catarina, foi alvo de um ataque hacker que resultou na movimentação suspeita de cerca de R$ 19 milhões em contas bancárias entre os dias 22 e 23 de abril de 2026. As transferências foram direcionadas para diversas contas bancárias e não ti…
Lazarus continues leveraging ClickFix for initial access and data theft, in this case, against Mac-centric organizations and their high-value leaders.
Cybersecurity researchers have discovered a set of malicious apps on the Apple App Store that impersonate popular cryptocurrency wallets in an attempt to steal recovery phrases and private keys since at least fall 2025. "Once launched, these apps redirect users to browser pages d…
Pesquisadores identificaram uma campanha destrutiva voltada ao setor de energia e utilidades da Venezuela, marcada pelo uso de um novo limpador de disco batizado de Lotus Wiper. A análise indica que os artefatos da operação foram encontrados em um recurso publicamente acessível e…
Uma campanha de ataque à cadeia de suprimentos associada à Checkmarx alcançou agora o Bitwarden CLI, após a distribuição de um pacote malicioso do @bitwarden/cli no npm. A ocorrência foi confirmada pelo próprio Bitwarden, que afirmou ter identificado e contido a publicação compro…
French police arrest HexDex hacker, a 20-year-old suspect accused of mass data theft and leaks targeting government, sports groups, and firms.
Chinese-speaking individuals are the target of a new campaign that uses a trojanized version of SumatraPDF reader to deploy the AdaptixC2 Beacon post-exploitation agent and ultimately facilitate the abuse of Microsoft Visual Studio Code (VS Code) tunnels for remote access. Zscale…
A high-severity security flaw in LMDeploy, an open-source toolkit for compressing, deploying, and serving LLMs, has come under active exploitation in the wild less than 13 hours after its public disclosure. The vulnerability, tracked as CVE-2026-33626 (CVSS score: 7.5), relates t…
The threat actor gave itself plenty of options to support command and control, tapping Microsoft Outlook, Slack, Discord, and file.io for online espionage.
