EU Cyber Resilience Act to Enforce New Reporting Requirements
Starting Friday, businesses operating in the EU will have just 24 hours to notify the government any time they discover serious product security incidents.
Starting Friday, businesses operating in the EU will have just 24 hours to notify the government any time they discover serious product security incidents.
Trezor warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them in phishing attacks. [...]
A inteligência artificial deixou de ser uma tecnologia experimental para se tornar um elemento estratégico no sistema financeiro. Segundo o Logicalis CIO Report 2026 para o setor de serviços financeiros, 96% dos CIOs do setor registraram aumento no interesse por IA ao longo do úl…
Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]
Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters threat group. [...]
An analysis of Project Glasswing findings shows only a fraction have reached disclosure, and an even smaller number have been fixed.
The Carnegie Mellon University CERT Coordination Center (CERT/CC) is warning that Skullcandy Dime 3 wireless earbuds accept Bluetooth pairing requests from nearby unpaired devices without requiring user interaction. [...]
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
John Ternus subiu ao palco pela primeira vez como novo CEO da Apple para apresentar o iPhone Duo, o primeiro smartphone dobrável da empresa, com preço inicial de US$ 1.999. O evento de lançamento ocorreu hoje na sede da Apple, em Cupertino, Califórnia, e marcou a estreia do execu…
US agencies claim Chinese companies covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and SpaceX's Grok to reduce development costs.
The U.S. Department of Justice (DoJ) on Wednesday announced coordinated actions aimed at an illicit online marketplace called Xinbi Guarantee that offered scam services, including seizing Telegram channels used to run the service, confiscating two cryptocurrency wallets, and depl…
Os ataques de ransomware no Brasil aumentaram pelo terceiro mês consecutivo, chegando a 27 casos em agosto, o maior número registrado no país em 2026. Os dados são da plataforma Ransomware.live, de monitoramento contínuo de vazamentos, divulgados pela Cohesity, empresa especializ…
A digitalização acelerada e a democratização da inteligência artificial generativa transformaram o cibercrime, tornando a verificação da identidade real um pilar central para a segurança e a confiança nos negócios digitais. A conclusão é do relatório “Tendências para 2026: Identi…
O pesquisador de segurança conhecido como MSNightmare publicou um código de prova de conceito (PoC) para uma vulnerabilidade de dia zero no Windows Defender, denominada “ShieldCrash”. Segundo a publicação no GitHub, a falha permite a leitura arbitrária de arquivos com privilégios…
The Rural Residency Planning and Development (RRPD) Program awards will create new residency programs in family medicine, internal medicine, preventive medicine, psychiatry, and general surgery, helping to strengthen the health workforce in rural and tribal communities. The post …
Never give your personal medical information to a chatbot. Here’s why Transparency Coalition
U.S. cybersecurity and intelligence agencies say that six Chinese AI companies conducted industrial-scale distillation attacks on American frontier AI models since at least late 2024. [...]
Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed t…
Healthcare technology company Veradigm disclosed a data breach after a cybersecurity incident at one of its third-party vendors exposed patients' personal data. [...]
FBI Raises Alarm About OAuth Consent Phishing Activity The HIPAA Journal