O GitHub Advisory Database atingiu um volume recorde de publicações em maio de 2026, com 1.560 alertas de segurança revisados. O número representa mais de cinco vezes a média mensal normalmente registrada pela plataforma. O crescimento mostra uma pressão cada vez maior sobre o ec…
Organizations have never had greater awareness of cyber risk. Yet turning that awareness into operational resilience has never been more challenging. The 2026 Bitdefender Cybersecurity Assessment confirms this is the case, as this year's findings reveal a series of surprising con…
Uma busca comum no Bing por “ManageEngine OpManager” levou à instalação de ransomware em uma rede corporativa, após criminosos manipularem resultados de pesquisa para promover uma página falsa de download. O ataque começou quando um usuário procurou pela ferramenta de monitoramen…
Microsoft has fixed the GIF functionality in the Emoji Panel for Windows 11 and Windows Server users after the provider shut down its service. [...]
Microsoft on Tuesday said it's accelerating its quantum safe security roadmap, stating technology advances in quantum computing are making it essential to replace existing encryption standards sooner than previously expected. "Advances in quantum research and development have sh…
The U.S. Federal Trade Commission (FTC) says Amazon will pay a $2.25 million civil penalty to settle charges that it blocked identity theft victims' access to transaction records. [...]
Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform and the Campaign Classic marketing automation platform. [...]
Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone else can, then hosting phishing pages on them to catch traffic that AI tools point their way. Palo Alto Networks' Unit 42 calls the trick phant…
Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it had imposed on Fable and its more tightly controlled sibling Mythos 5 about two and a half weeks earlier. Fable 5 returns to users on Wednesday, July…
Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack" aimed at Microsoft's Azure command-line interface (CLI), compromising dozens of accounts in the process. The activity, per Huntress, originates from an IPv6 address range (2a0a:d683::/…
ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malicious commands behind its fake "prove you're human" pages are now handed out by API-driven servers that give each visitor the same malware in a differe…
Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-of-service (DoS) condition. …
Uma campanha de monitorização oculta foi descoberta ativa na loja oficial de extensões do Google Chrome (Chrome Web Store), onde agentes maliciosos clonaram com sucesso a identidade visual e o nome da plataforma de pesquisa assistida por inteligência artificial Perplexity. A exte…
The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.
Anthropic has confirmed that the Department of Commerce has lifted export controls on Claude's two most powerful models, Fable 5 and Mythos 5. [...]
Um relatório encomendado pelo Ministério do Interior da Holanda alerta os órgãos públicos sobre os riscos da dependência da VMware e discute caminhos para a autonomia digital em virtualização, conforme documento publicado no dia 29 de junho. O estudo, intitulado “Op weg naar Weer…
Pesquisadores da LayerX Security descobriram uma técnica de ataque, batizada de “BioShocking”, que manipula navegadores com inteligência artificial para ignorar suas salvaguardas de segurança e executar ações maliciosas, como roubo de credenciais, conforme detalhado em relatório …
Anthropic is now rolling out Sonnet 5, and it's almost as good as the Opus range, but it is designed to be cheaper than the company's flagship model. [...]
Uma campanha ativa desde novembro de 2025, denominada “Operation Navy Ghost”, tem como alvo desenvolvedores de bots para Telegram. A campanha cria pacotes maliciosos no repositório PyPI; os pacotes instalam um backdoor completo em servidores, conforme análise publicada pela Check…
A inteligência artificial está evoluindo para sistemas autônomos que podem transformar rapidamente o sistema financeiro, exigindo que bancos centrais se adaptem e fortaleçam a resiliência para evitar que a próxima surpresa tecnológica se torne um teste de estabilidade financeira,…
