A Meta corrigiu uma vulnerabilidade de média severidade no WhatsApp que poderia permitir o uso da integração com Reels do Instagram para acionar URLs maliciosas em dispositivos das vítimas. A falha foi rastreada como CVE-2026-23866. O problema está relacionado à validação incompl…
A Qualcomm divulgou correções para um conjunto de vulnerabilidades em softwares proprietários e de código aberto usados em chipsets da empresa, incluindo falhas críticas que podem permitir execução remota de código. A atualização é relevante porque componentes da Qualcomm estão p…
Analysts recently confirmed what identity security teams have quietly feared: AI agents are being deployed faster than enterprises can govern them. In their inaugural Market Guide for Guardian Agents, Gartner states that “enterprise adoption of AI agents is accelerating, outpacin…
In hard-to-detect attacks, hackers are dropping the CloudZ RAT and a fresh plugin, Pheno, to hijack the Windows-based bridge between PCs and smartphones.
AI-generated code is changing AppSec workflows, forcing teams to rethink SDLC security, dependency checks, code review, and risk prioritization.
Palo Alto Networks warned customers today that a critical-severity unpatched vulnerability in the PAN-OS User-ID Authentication Portal is being exploited in attacks. [...]
Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain attacks. "This new public ledger ensures the Google apps on your device are exactly what we intended to build and distribute," Google's product and security teams s…
Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool (RAT) and a previous undocumented plugin dubbed Pheno with the aim of facilitating credential theft. "According to the functionalities of the CloudZ RAT and Pheno…
DataDome researchers uncovered a massive low and slow DDoS attack that delivered 2.45 billion requests using 1.2 million IP addresses.
Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software has been exploited in the wild. The vulnerability, tracked as CVE-2026-0300, has been described as a case of unauthenticated remote code execution. It carries …
As the war with Iran continues, breach attempts targeting the United Arab Emirates tripled in a few weeks — many targeting critical infrastructure.
A inteligência artificial deixou de ser experimental e tornou-se uma carga de trabalho de produção crítica, mas 88% das organizações globais enfrentam desafios de segurança relacionados à IA. Os dados constam do relatório “State of Application Strategy 2026”, publicado ontem pela…
HIPAA—N.D. Tex.: Federal court enforces DOJ subpoena to Rhode Island Hospital amid emergency bid to quash VitalLaw.com
O Brasil está entre os países com maior número de infecções causadas pela distribuição de malware por meio do site oficial do Daemon Tools, software popular para montagem de imagens de disco. Segundo a empresa de antivírus Kaspersky, a plataforma oficial do programa vem dissemina…
A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers' systems with a mix of rootkit, backdoor, and credential-stealing capabilities. [...]
A plataforma de vídeos Vimeo teve os dados pessoais de 119 mil clientes e usuários vazados na internet. A informação foi divulgada ontem por Troy Hunt, responsável pela ferramenta de busca de vazamentos Have I Been Pwned. Hunt informou que o grupo criminoso ShinyHunters reivindic…
The hacker behind a breach at education technology giant Instructure claims to have stolen 280 million data records for students and staff from 8,809 colleges, school districts, and online education platforms. [...]
Info is scant, but such breaches can reveal where a security product's controls are located and how detections are designed, giving attackers a leg up.
O que fazer quando os números não mostram o cenário completo? Participe do debate e avance na maturidade da gestão em H&F! The post Congresso de Hotelaria e Facilities questiona a ilusão do quantitativo appeared first on Saúde Business.
The UC Berkeley Center for Long-Term Cybersecurity (CLTC) offers tools and support to schools, local governments, and non-profits as they defend themselves against a growing volume of cyberattacks.
