Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.
Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Google downgrading two Antigravity findings. [...]
The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, such as training datasets, vector databases, and model checkpoints. [...]
An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.
Ivanti CSO Daniel Spicer says frontier models have shown surprising effectiveness in early stages; but cost and human-in-the-loop viability remain open questions.
O Hospital São Vicente de Paulo (HSVP), de Passo Fundo (RS), passa a oferecer uma nova alternativa de tratamento para pacientes oncológicos com a realização de procedimentos de crioablação por […] O post HSVP realiza primeira crioablação por gás argônio e amplia opções de tratame…
Um hacker invadiu a Agência Nacional de Cadastro e de Publicidade Imobiliária da Romênia (ANCPI) e apagou todo o banco de dados do registro de terras do país, depois de fracassar numa tentativa de extorsão, conforme informações divulgadas pelo jornalista Catalin Cimpanu em sua ne…
A Microsoft observou um aumento significativo em ataques utilizando o malware ACR Stealer para roubar senhas, tokens de autenticação e documentos confidenciais de clientes empresariais, conforme comunicado publicado na sexta-feira. Entre o final de abril e meados de junho, o ator…
Marc Maiffret reflects on Code Red's legacy and the security lessons helping organizations navigate AI risk today.
Pesquisadores da Group-IB identificaram um novo malware, denominado HollowGraph, que utiliza o recurso de calendário em caixas de correio do Microsoft 365 comprometidas como canal de comando e controle (C2) para receber instruções e exfiltrar dados roubados. De acordo com relatór…
Job pressures have increased as companies run headlong into AI adoption, causing 26% of top security executives to consider leaving their position.
A Abbott Laboratories confirmou que está investigando dois incidentes cibernéticos distintos – um em sua unidade de diagnóstico de câncer e outro no portal LabCentral –, segundo comunicado publicado em 16 de julho de 2026. O primeiro incidente afeta sistemas herdados da aquisição…
Tempus AI’s planned acquisition follows recent interest in blood-based cancer tests across the medtech industry.
"The TFF Trap" uses fileless techniques and loaders with low detection rates to deploy various RATs and stealers, including Agent Tesla, Remcos, XWorm, and Best Private Logger.
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign cod…
OMB Publishes 2026 Unified Agenda Signaling Upcoming Health Privacy and Interoperability Updates from HHS Inside Privacy
A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data. [...]
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains. One was already live against Windows users in Me…
By Cheryl Cruver - For the better part of the last three years, healthcare has been fascinated by artificial intelligence (AI). Conferences, board meetings, and strategic plans have all focused on AI's capacity to reshape everything from clinical documentation to revenue cycle ma…
Abbott Investigating Cyberattack Claims From Two Threat Actors The HIPAA Journal
