Hackers Pushing Remote Access Tool Through Fake Adobe Acrobat Pages
Fake Adobe Acrobat pages distribute signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs, CloudSEK’s researchers say.
Últimas Notícias
4662 notíciasAttackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certificate Services (AD CS) settings to obtain login certificates for privileged accounts, including one for a domain control…
Abbott starts pivotal trial for mitral valve replacement device
The study is testing a device that Abbott executives believe can expand the mitral valve market.
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Cybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government entities and state-affiliated infrastructure. The activity, observed by Palo Alto Networks Unit 42 between October 2025 and April…
Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. [...]
HIPAA Compliant Cloud Storage Cost: 13 Steps, 90 Min [2026] – tech-insider.org
HIPAA Compliant Cloud Storage Cost: 13 Steps, 90 Min [2026] tech-insider.org
Azure Backup HIPAA Vault: 13 Steps, 90 Min [2026] – tech-insider.org
Azure Backup HIPAA Vault: 13 Steps, 90 Min [2026] tech-insider.org
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their monetization value. Like other typical stealer families, VOLTA is equipped to har…
Falha “SMS of Death” derruba celulares Android sem clique
Uma falha grave no Android, apelidada de “SMS of Death“, permite que um atacante derrube o sinal e as ligações de um celular apenas com o conhecimento do número de telefone. Divulgada em 29 de outubro de 2026 e catalogada como CVE-2026-58882, a vulnerabilidade afeta o sistema de …
Webinar sobre cibersegurança no agronegócio
O CISO Advisor, principal portal brasileiro de segurança da informação, promove no dia 12 de novembro, às 17h, o webinar “Cyber Agro”, focado nos riscos e soluções para proteger o agronegócio da nova fronteira dos ataques cibernéticos. O evento, online e gratuito, reunirá Ana Por…
Accurate Provider Data: A Foundation for Better Patient Access
Newly released FINN Voices episode with Beth Friedman and Dr. Alex Ding, Chief Medical and Public Affairs Officer at DataSpring, for a conversation on the state of provider data, its impact across the ecosystem, and the path toward industry standardization. The post Accurate Pro…
WordPress: nova falha explorada horas após correção
Atacantes começaram a explorar uma nova vulnerabilidade de alta gravidade no WordPress poucas horas após a disponibilização das correções. A falha, corrigida em 28 de outubro na versão 7.1.4, afeta o processo de atualização do sistema e pode ser usada para execução remota de códi…
Grupo chinês explora PHP2Shell em firewalls Palo Alto
Um grupo de hackers associado à China explorou falhas críticas no PHP, conhecidas como PHP2Shell, para obter acesso root em firewalls Palo Alto Networks. O ataque combinou dois exploits distintos e resultou no comprometimento de pelo menos 25 dispositivos, segundo a empresa de se…
Falha crítica no kernel Linux permite root em servidores MPTCP
Pesquisadores de segurança da Anthropic desenvolveram um exploit para uma vulnerabilidade crítica no kernel Linux que permite a atacantes não autenticados executar comandos remotamente como root em servidores que rodam listeners de Multipath TCP (MPTCP). A falha, rastreada como C…
Alpine Linux reconstrói GitLab após tentativa de invasão
Tentativas de explorar uma falha crítica no GitLab da infraestrutura de desenvolvimento do Alpine Linux, em 20 e 21 de outubro, levaram o projeto de código aberto a reconstruir o servidor do zero e redefinir todas as senhas. Os ataques miraram o CVE-2026-97229, falha de execução …
FBI links $6.3 billion Binance crypto heist to North Korean hackers
The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...]
Alpine Linux rebuilds GitLab after attempted RCE attack
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. [...]
A Better Path to Universal Coverage
By Jay Eisenstock - “Medicare for All” is a compelling slogan, but it obscures an important question: What exactly do we mean by Medicare for All? Before replacing the existing system with a single government payer, we should consider whether an enhanced Medicare Advantage model …
OpenAI says it's doubling Pro usage limits and bringing Work features to Chat
OpenAI has just confirmed that it's rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across ChatGPT and Codex. [...]
FBI Links 628 Crypto Wallet Addresses to North Korea’s Binance Hack
FBI links 628 crypto wallet addresses to North Korea’s TraderTraitor after the $6.3 billion Binance hack, asking services to block transfers involving stolen funds.