Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage group it calls GTG-20006…
Threat actors are abusing trusted AI platforms to host malicious content, poison search results, and trick users into installing malware. Huntress examines campaigns targeting AI users through weaponized Claude Artifacts, shared AI conversations, sponsored search results, and Cli…
Orthanc DICOM Server Vulnerability Can Lead to Denial of Service The HIPAA Journal
A high-severity vulnerability has been identified in Orthanc DICOM Server that could be exploited by an authenticated remote attacker to […] The post Orthanc DICOM Server Vulnerability Can Lead to Denial of Service appeared first on The HIPAA Journal.
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
O Brasil enfrentou um mês de agosto de 2026 marcado pela convergência de diferentes vetores de ameaça cibernética, segundo relatório estratégico do NextGen SOC da DANRESA, parceiro Fortinet EPSP no Brasil. O documento, que monitorou o panorama de riscos entre os dias 3 e 30 de ag…
GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2026-85706. [...]
Cibercriminosos estão usando a expectativa em torno do GTA 6 para distribuir malware por meio de downloads falsos do jogo. A campanha foi identificada por analistas da Huntress e entrega desde ferramentas de acesso remoto até um programa que destrói arquivos. A distribuição combi…
A Check Point corrigiu duas vulnerabilidades críticas que afetam o Security Gateway, o Security Management Server e o Spark Firewall gerenciado localmente. As duas receberam pontuação CVSS 9.8 e permitem execução remota de código sem autenticação. A CVE-2026-85102 está na validaç…
Pesquisadores divulgaram três vulnerabilidades no LiteLLM, gateway de código aberto usado para centralizar o acesso a modelos de linguagem em ambientes corporativos. Exploradas em conjunto, elas permitem executar comandos como root e roubar credenciais de nuvem. A CVE-2026-59821 …
Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,500 users who clicked an embedded malicious link. [...]
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report. Wiz saw the attacks between August 15 and Septemb…
A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims' computers, security company Gen Digital said in research published Thursday. The attack started with…
A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022. [...]
PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation. The software development company said PaperCut NG/MF versions 26.0.5…
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities. The attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication by…
The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.
Uma vulnerabilidade crítica em firewalls Fortinet FortiGate está sendo explorada ativamente em ataques, segundo alertas da empresa de cibersegurança SOCRadar e da agência de segurança cibernética dos Estados Unidos (CISA). Por meio da falha, registrada como CVE-2025-25249, um ata…
Três grupos distintos de ameaças, incluindo afiliados de ransomware e atores ligados a um governo estrangeiro, exploraram duas vulnerabilidades recentemente corrigidas no Secure Firewall Management Center (FMC) da Cisco para comprometer dispositivos e realizar ataques. A informaç…
A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims. [...]
