New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Microsoft Windows and Google Chrome. [...]
Últimas Notícias
4685 notíciasThe Top 4 Threats We Found by Investigating Every Alert for a Quarter
Identity was the target in roughly half of all confirmed malicious activity. Prophet Security breaks down the four main attack patterns seen across customer environments between May and July 2026, and explains why some attacks succeeded while others were blocked. [...]
Parceria com o Uruguai viabiliza primeira cirurgia ortopédica de paciente no Moinhos de Vento
Procedimento de alta complexidade marca avanço da cooperação entre o Moinhos de Vento e instituições hospitalares uruguaias. Após a cirurgia, paciente já retornou ao país, onde segue acompanhado por seu […] O post Parceria com o Uruguai viabiliza primeira cirurgia ortopédica de p…
Inovação e o futuro do cuidado ao paciente marcam I Simpósio de Educação Continuada do HNIPO
Com o tema “Ciência, Prática e Resultados”, o encontro reuniu especialistas, estudantes e profissionais de saúde para debater neurociência, raciocínio clínico e segurança do paciente. O Hospital Nipo-Brasileiro (HNIPO), em […] O post Inovação e o futuro do cuidado ao paciente ma…
Can a CEPA Wrongful Termination Claim Survive Dismissal for Refusing an Overbroad HIPAA Waiver? – Legal Wires
Can a CEPA Wrongful Termination Claim Survive Dismissal for Refusing an Overbroad HIPAA Waiver? Legal Wires
Capacity Is Created, Not Built: Why the Next Bed Is Already in Your Hospital
By Gina Kidder-The familiar phrase “death by a thousand cuts” describes how small problems accumulate into a major loss. Capacity works in reverse. Hospitals create meaningful room for more patients through hundreds of small, coordinated improvements that move people into, throug…
EUA acusam empresas chinesas de copiar recursos de Claude, GPT, Gemini e Grok
Agências dos Estados Unidos acusaram seis empresas chinesas de inteligência artificial de usar distilação em escala industrial para copiar capacidades de modelos avançados como Claude, GPT, Gemini e Grok. A atividade teria ocorrido desde pelo menos o fim de 2024. As empresas cita…
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only "under specific conditions" that it has not described. One fla…
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to independent reports from Blackpoi…
Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks
The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it, security firm Group-IB said in a report published on September 9. A work profile is a separate space that Android typically r…
Falha no Remote Desktop permite executar código pela rede
A Microsoft corrigiu uma vulnerabilidade de execução remota de código no Windows Remote Desktop Client que pode permitir a um invasor autenticado executar comandos em sistemas afetados. A falha é rastreada como CVE-2026-69485 e recebeu pontuação CVSS 8.8. O problema está relacion…
Microsoft says September updates fix mouse settings reset issues
Microsoft has fixed a known issue that wiped mouse settings on some Windows 11 systems after installing the KB5120998 August 2026 preview update. [...]
Cibercriminosos usam agentes autônomos de IA para roubar milhares de credenciais
Cibercriminosos estão usando agentes autônomos de inteligência artificial para acelerar ataques contra ambientes de nuvem e roubar credenciais em larga escala. Em um caso investigado pelo Google Threat Intelligence Group, toda a operação foi planejada e executada em menos de seis…
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by S…
Palomar Health Medical Group; Summit Medical Group Settle Data Breach Lawsuits
Settlements have been reached to resolve class action data breach lawsuits against Palomar Health Medical Group in California and Summit […] The post Palomar Health Medical Group; Summit Medical Group Settle Data Breach Lawsuits appeared first on The HIPAA Journal.
CISA: WatchGuard RCE flaw now exploited in ransomware attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a critical WatchGuard Firebox firewall vulnerability, which it flagged as actively exploited in December. [...]
Zimmer restructures Americas leadership team
The company promoted three executives and eliminated a fourth position as part of changes intended to support its ongoing commercial transformation.
Microsoft fixes bug that wiped Windows desktop settings
Microsoft says the September 2026 Patch Tuesday updates fix a known issue causing desktop settings to be lost or reset on some Windows devices. [...]
Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key
Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI gateway, the software a company puts between its applications and the model providers…
Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6
Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party systems, marking the latest in a growing list of cases that have raised concerns about the security risks posed by autonomous AI agents. The AI company …