A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker wo…
78.6M Records Exposed: Healthcare Data Governance [2026] shattered.io
Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company. Polymarket says it is refunding about …
Cybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government en…
The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899. The FBI, al…
Lehigh Valley Health Network to Pay $800,000 After Cancer Patients' Photos Were Leaked in Ransomware Attack Medical Daily
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys. [...]
Organizações que adotam agentes de inteligência artificial para automatizar operações de segurança, TI e nuvem passaram a enfrentar um risco conhecido como Agentic Denial of Service (ADoS). O conceito foi descrito pela diretora sênior de marketing de produto da Infoblox, Krupa Sr…
As tentativas de golpes bancários cresceram 35% nos últimos 12 meses, segundo o relatório Global Scams 2026, divulgado pela BioCatch, empresa especializada em prevenção de fraudes a partir do reconhecimento de padrões no comportamento dos usuários. O levantamento reúne dados de m…
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message. [...…
Polymarket confirms $2.7 million stolen through the compromised third-party script and pledges $3.9 million in refunds, including compensation for pause losses.
Reddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...]
By April Miller - Healthcare organizations rely on external vendors for critical services, from electronic health records to billing. Ongoing vendor oversight helps you protect sensitive data and maintain quality patient care. The post How Healthcare Leaders Can Reduce Cybersecur…
Vários especialistas de empresas brasileiras de TI e de segurança da informação trouxeram para o CISO Advisor comentários e interpretações que ajudam a explicar o incidente com a Binance, ocorrido na noite de quinta-feira, dia 29 de Outubro, que deixou um prejuízo da ordem de US$…
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. [...]
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that the breach did not result in unauthorized access to its investigation content, authen…
Monitor HIPAA Cloud Backups: 13 Steps, 90 Min [2026] tech-insider.org
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The vulnerabilities are listed below - C…
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty progr…
