Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts. […
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could iss…
Black Friday 2026 is coming! Explore Samsung Galaxy S25 Ultra, S24, foldable phones, tablets and watches, plus refurbished…
A OpenCode informou que um invasor alcançou um sistema legado na noite de 16 de outubro e que chaves de API de provedores externas, salvas pelos usuários no Console, podem ter sido expostas. O grupo afetado é de 1.4% dos usuários do Console. O sistema alcançado já estava em proce…
Go 1.27.3 and Go 1.26.10, released on October 20, make Go's certificate verifier reject any certificate chain that passes through one of eight intermediate certificate authority keys. Programs built on the new release will refuse connections to sites and services whose certifica…
ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing application credentials, as it continues to respond to a security incident that led to unauthorized access to application i…
Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today. [...]
Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010). [...]
Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems. [...]
An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic…
Um usuário de um fórum frequentado por cibercriminosos anunciou no último dia 15 a venda de um pacote de dados obtido, segundo ele, de uma instituição financeira do Brasil em uma operação no mês de Junho. A instituição opera como cooperativa de crédito. O anúncio afirma que o con…
Um modelo de pesquisa interno da Anthropic rastreou em menos de 30 minutos a origem das cinco sementes fornecidas pela NSA que geraram as curvas elípticas P-192, P-224, P-256, P-384 e P-521 do NIST, pergunta aberta havia cerca de 25 anos. O incômodo era concreto. As sementes publ…
À medida que os negócios dependem mais de seus ambientes digitais, temas como disponibilidade, proteção de dados e resposta a incidentes ganham peso na continuidade das operações. É justamente entre as empresas menores que a defesa está menos estruturada. Pesquisa do Sebrae em pa…
Edwards is asking customers to return some of the delivery systems used with its Sapien M3 devices after receiving three reports of balloons bursting when inflated during the procedure.
Uma falha explorável remotamente e sem autenticação no NGINX está presente em toda versão desde a 0.1.29, de maio de 2005. A CVE-2026-15176 é um estouro de buffer no ngx_http_core_module, com nota 8.1, e recebeu correção em 14 de outubro. Ela não alcança qualquer instalação. Depe…
Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update. [...]
A adoção de agentes de inteligência artificial capazes de consultar documentos, acessar aplicações, alcançar dados, usar credenciais, chamar APIs e executar tarefas exige que instituições financeiras ampliem controles de identidade, monitoramento e resposta a incidentes. Segundo …
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. [...]
Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems.
