Cybersecurity Firm Cyberbit Shuts Down Israel Operations
Cyberbit is closing its Israeli operations and laying off local staff as the former Elbit Systems spin-off grows mainly in the US after buying RangeForce.
Últimas Notícias
3470 notíciasWebinar: Why business email compromise attacks keep succeeding
Business email compromise attacks increasingly rely on convincing impersonation rather than malware, making them harder for employees and traditional email defenses to detect. This webinar explores how behavioral AI can help identify sophisticated email threats and automate respo…
The Real Reason EHR Integrations Break: Unmapped Workflow
By Lara Dixit - EHR integration frequently fails for reasons other than a weak interface engine, an inaccessible API, or a lack of technical expertise on the part of the vendor. It fails because the clinical workflow was never clearly mapped before systems were connected. The pos…
236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers
New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate Chinese open-source, cross-platform application development framework called DCloud Uni-App. The templates power bogus cryptocurrency exchanges, m…
Bucket hijacking redireciona logs em AWS, Azure e Google
Pesquisadores do Unit 42, laboratório de inteligência de ameaças da Palo Alto Networks, identificaram uma técnica de ataque que explora uma falha arquitetônica comum a Google Cloud, AWS e Microsoft Azure. Batizado de “bucket hijacking”, o método permite que invasores redirecionem…
Amazon corrige falhas críticas em extensões do Amazon Q Developer
Uma vulnerabilidade de alta gravidade no Amazon Q Developer poderia permitir que invasores executassem comandos e roubassem credenciais de nuvem quando um desenvolvedor abrisse um repositório malicioso no ambiente de programação. As falhas foram identificadas como CVE-2026-12957 …
Amazon Q VS Extension Flaw Leads to Cloud Credential Theft
Adversaries could plant a malicious repository that can execute arbitrary code and steal cloud credentials by exploiting the vulnerability, which showcases growing MCP risk.
Why Post-Quantum Cryptography Starts With Credentials
Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon be broken by quantum computers. Although no machine today can break elliptic curve cryptography or RSA, quantum hardware is adv…
Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal as part of its ongoing cyber onslaught against Ukraine throughout 2025. Slovakian cybersecurity company ESET said it observed 35 distinct spear-phishing campaigns mounted by G…
J&J starts pivotal trials of Shockwave IVL device in carotid arteries
J&J is working to expand use of Shockwave’s technology as competition in intravascular lithotripsy builds from companies like Boston Scientific and Stryker.
Novo SharkLoader instala Cobalt Strike em campanha contra governos e empresas
Uma nova campanha de ciberataques chamada StrikeShark está usando um malware inédito, conhecido como SharkLoader, para instalar o Cobalt Strike em sistemas comprometidos. A atividade foi identificada pela Kaspersky e teve como alvos organizações governamentais, diplomáticas e emp…
US seizes hundreds of FIFA World Cup illegal streaming domains
The U.S. Justice Department's Criminal Division has seized nearly 400 web domains used for illegally streaming matches at the FIFA World Cup. [...]
Bucket hijacking preocupa empresas que usam AWS, Google Cloud e Azure
Um novo método de ataque chamado bucket hijacking pode permitir que invasores desviem fluxos de dados em nuvem para contas externas controladas por eles. A técnica afeta cenários em grandes provedores, incluindo Google Cloud, AWS e Microsoft Azure. O ataque explora uma caracterís…
Quando a imprevisibilidade ameaça a inovação em saúde
A ausência de previsibilidade na cadeia de saúde desloca o risco para fornecedores e compromete a sustentabilidade do setor de dispositivos médicos no país. The post Quando a imprevisibilidade ameaça a inovação em saúde appeared first on Saúde Business.
Copa do Mundo amplia golpes de bets e deepfakes no Brasil
A Copa do Mundo de 2026 amplia uma área de risco que já estava em expansão no Brasil. Mais de 4,3 mil sites falsos foram identificados explorando o torneio, e as casas de apostas continuam sendo o principal vetor de fraude. Para Daniel Tupinambá, CISO Strategy da Elytron Cybersec…
Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection
A new phishing-as-a-service (PHaaS) platform called Bluekit is letting cybercriminals steal user accounts using a tricky method. While…
Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts
Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordinary image and font files, then woke up days after install to steal credentials and run ad fraud. The company calls it StegoAd, a mash-up of steganogra…
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH server trigger memory corruption on a connecting client, with possible code execution. No credentials, no user interaction. The bug affects every release u…
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts. "This attack avoids the most common npm execution paths through lifecycl…
Top Cyber Range Providers: A Comparison of 15 Leading Platforms
Compare 15 cyber range platforms across live-fire exercises, AI testing, SOC training, OT realism, deployment options, pricing models, and data residency needs.