BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen from hot wallets on instances running older versions. "Our investigation found th…
Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks. The Taiwanese vendor said it observed threat actors exploiting a vulnerability patched in December 2024 to target devic…
Attackers remotely changed the settings on refrigeration controls at supermarkets in Belgium, Sweden, Estonia and other European countries overnight into Monday, November 2, warming fridges and freezers. No chain reported more than several dozen affected stores, and some had to …
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerability, tracked as CVE-2026-58115 (CVSS score: 10.0), is a case of missing authentication for a critical function that could…
Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful e…
Ahold Delhaize, Holanda.Carrefour, França.Colruyt Group, Bélgica.COOP, Suécia.Ikea, Suécia.De Laet and Van Haver, Bélgica.Musgrave, Irlanda.ICA, Suécia. Selver, Estônia. Todas essas redes de varejo na Europa foram atingidas por ataques cibernéticos contra seus freezers e refriger…
Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 countries. [...]
UNM cyberattack diverts ambulances, disrupts care and raises HIPAA concerns Acronis
Foi publicado um exploit proof-of-concept (PoC) para a CVE-2023-21768 que demonstra como atacantes com acesso local podem obter privilégios SYSTEM por meio do Windows Ancillary Function Driver for WinSock. Os pesquisadores Valentina Palmiotti, conhecida como chompie, e Ruben Boon…
Financial technology company Abrigo has restored its Sageworks risk management application, except for borrower-facing capabilities, following an outage triggered by "irregular activity" in its environment. [...]
Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says its manufacturer intentionally infected with malware to generate revenue through cybercrime activities. [...]
A QNAP publicou atualizações de segurança para corrigir as falhas PHP2Shell em seus sistemas NAS e orientou usuários a instalar imediatamente. A empresa já havia solicitado que os clientes mantivessem os dispositivos offline enquanto aguardavam a atualização. Softwares afetados O…
Versões adulteradas da extensão Claude Code, da Anthropic, foram distribuídas a usuários do editor Cursor em um ataque à cadeia de suprimentos. O episódio ocorreu em 29 de outubro e envolveu as versões 2.1.312 e 2.1.313 da extensão anthropic.claude-code, que permaneceram no Curso…
A Synology emitiu um alerta para que clientes atualizem imediatamente seus dispositivos de armazenamento em rede (NAS) devido a uma onda de ataques de ransomware C3RB3R. A empresa recomendou ativar atualizações automáticas e atualizar o software DiskStation Manager (DSM) para a v…
A Ivanti publicou atualizações de segurança para corrigir duas novas falhas no gateway de acesso remoto Connect Secure (ICS), exploradas em ataques zero-day encadeados desde pelo menos 1º de outubro. Os agentes de ameaça usaram os dois problemas, catalogados como CVE-2026-111357 …
Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that people barely think about. Yet each was enough to cause serious trouble. Then there were the bigger messes. Billions stole…
In a year where companies are grappling with cyberattacks, inflation and potential tariffs, Farrell, who is also CEO of Resmed, shared a bird’s eye view of the issues.
A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google says it is highly confident that device maker Videostrong intentionally put a backdoor in the boxes and sold access to crim…
The latest "Digital Defense Report" identifies government agencies as prime targets for AI attacks but doesn't mention that they are broadly being targeted through Microsoft bugs.
Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threat actor between August and October 2026. According to a report published by Dream Research Labs, the campaign has led to…
