Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack
Daemon Tools users: It's time to check your machines for stealthy infections stat.
Últimas Notícias
3577 notíciasGoogle alerta e corrige zero-day no Android
O boletim de segurança Android publicado ontem revela que o Google descobriu e está corrigindo uma vulnerabilidade crítica na plataforma (CVE-2026-0073, ainda sem CVSS). Ela permite a execução remota de código por um atacante em proximidade física (adjacente), sem necessidade de …
DAEMON Tools trojanized in supply-chain attack to deploy backdoor
Hackers trojanized installers for the DAEMON Tools software and since April 8, delivered a backdoor to thousands of systems that downloaded the product from the official website. [...]
Tsunami de patches está a caminho das empresas
O centro de cibersegurança do Reino Unido (NCSC) está urging organizações a se prepararem para uma onda de atualizações de segurança, impulsionada pelo uso de inteligência artificial na descoberta de vulnerabilidades. O alerta consta de um artigo publicado no dia 1º de maio no bl…
Why Security Leadership Makes or Breaks a Pen Test
Well-run security drills go beyond checking audit boxes to identify and address trouble spots. Effective leaders can ensure proper scope, access, and follow-through, but it’s not easy.
Irlanda investiga Shein por transferência de dados à China
A comissão de proteção de dados da Irlanda (DPC) abriu um processo de investigação contra a varejista online Shein para avaliar se o envio de informações de usuários europeus para a China respeita as regras de privacidade do bloco. A informação foi divulgada pela agência Reuters.…
Segurança do paciente e eficiência guiam lançamentos de 15 marcas na Hospitalar 2026
Entre os destaques, suporte avançado à vida, IA para diagnóstico em segundos e soluções que ampliam a capacidade assistencial com controle e padronização. The post Segurança do paciente e eficiência guiam lançamentos de 15 marcas na Hospitalar 2026 appeared first on Saúde Busines…
Student hacked Taiwan high-speed rail to trigger emergency brakes
A 23-year-old university student in Taiwan was arrested for interfering with the TETRA communication system used by the country's high-speed railway network (THSR). [...]
Microsoft Agent 365 pretende descobrir e barrar shadow IA
A Microsoft tornou disponível em geral o Agent 365, plataforma de controle para observar, governar e proteger agentes de IA autônomos em ambientes corporativos. O anúncio foi publicado em 1º de maio no Microsoft Security Blog. A empresa alerta que agentes de IA já estão presentes…
The Pulse of Progress: How Cardiac Device Management Data Defined HRS 2026
By Kaitlyn Bookout - More than 10,000 heart rhythm experts gathered at McCormick Place for HRS 2026. This year, the focus shifted from clinical skill alone to the necessity of a strong data strategy for cardiac device management. The post The Pulse of Progress: How Cardiac Devic…
Former Maryland Pharmacist Indicted Over 8-Year Cyber Spying Campaign – The HIPAA Journal
Former Maryland Pharmacist Indicted Over 8-Year Cyber Spying Campaign The HIPAA Journal
Former Maryland Pharmacist Indicted Over 8-Year Cyber Spying Campaign
A former Maryland hospital pharmacist who is alleged to have engaged in a multi-year cyber spying campaign is facing up […] The post Former Maryland Pharmacist Indicted Over 8-Year Cyber Spying Campaign appeared first on The HIPAA Journal.
Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE
The Apache Software Foundation (ASF) has released security updates to address several security vulnerabilities in the HTTP Server, including a severe vulnerability that could potentially lead to remote code execution (RCE). The vulnerability, tracked as CVE-2026-23918 (CVSS score…
DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware
A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from Kaspersky. "These installers are distributed from the legitimate website of DAEMON Tools and are signed with digital cert…
Delta Dental Fined $2.25 Million Over 2023 MOVEit Transfer Hack
Delta Dental Insurance and Delta Dental of New York (Delta Dental) have agreed to pay a fine of $2.25 million […] The post Delta Dental Fined $2.25 Million Over 2023 MOVEit Transfer Hack appeared first on The HIPAA Journal.
What Health Systems Are Discovering About International Direct Hire
International direct hire is not new, but what’s changing is how health leaders are approaching it. Rather than viewing global recruitment as a situational solution, explored when domestic recruitment cannot fully meet demand, more and more health organizations are integrating it…
Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk
A proof-of-concept exploit (PoC) shows how someone with admin privileges can exploit the issue to steal passwords, and thus use them to engage in further malicious activity.
Patient Privacy and Professionalism in Recorded Operating Rooms – Specialty Pharmacy Continuum
Patient Privacy and Professionalism in Recorded Operating Rooms Specialty Pharmacy Continuum
FTC to ban data broker Kochava from selling Americans’ location data
The FTC will ban data broker Kochava and its subsidiary, Collective Data Solutions (CDS), from selling location data without consumers' explicit consent to settle charges alleging that it sold precise geolocation data collected from hundreds of millions of mobile devices. [...]
China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions
A sophisticated China-nexus advanced persistent threat (APT) group has been attributed to attacks targeting government entities in South America since at least late 2024 and government agencies in southeastern Europe in 2025. The activity is being tracked by Cisco Talos under the…