VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices. The implants, named SPEAKIN…
The FBI and DOJ disrupted a global botnet used by QTFY to compromise IoT devices and conceal attacks against US government agencies and critical infrastructure.
ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation attacks. [...]
Azul Vision Settles HIPAA Right of Access Case for $50,000 The HIPAA Journal
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has announced its 9th financial penalty of […] The post Azul Vision Settles HIPAA Right of Access Case for $50,000 appeared first on The HIPAA Journal.
cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported ve…
Microsoft released the KB5120998 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 35 changes, including improvements to the Start menu, taskbar, and Windows search. [...]
PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to address the issue. It sa…
Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic organizations in Romania, Spain, and Türkiye between late September 2025 and early April 2026. These campaigns, per Recorded Future Insikt Group, have led to the deployment of a p…
Roteadores fabricados pela Shenzhen Zhibotong Electronics (ZBT) e vendidos como produtos white-label em todo o mundo contêm múltiplas backdoors embutidas, algumas com privilégios de root, de acordo com pesquisa divulgada por Jacob Baines, CTO da VulnCheck. A empresa, com produção…
A vulnerabilidade CVE-2026-63520 no Microsoft SharePoint, que permite execução remota de código, está sendo explorada ativamente em ataques, conforme relatou a empresa de segurança cibernética Defused. A falha, publicada pela Microsoft em 11 de agosto com atualizações de seguranç…
A PaperCut está alertando que hackers estão explorando ativamente uma vulnerabilidade em todas as versões de seus softwares de gerenciamento de impressão PaperCut NG e PaperCut MF em ataques do tipo zero-day. A empresa afirmou estar ciente de ataques confirmados a clientes e publ…
Disclosure: This article was provided by and published in collaboration with Arounda
CDN services help high-traffic websites load faster, handle sudden demand, protect origin servers and deliver consistent performance to users worldwide in 2026.
New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI's internal IM1 model coordinated the compromise through an unauthorized message board. [...]
Australian authorities have charged two alleged TeamPCP members after software supply chain attacks exposed over 500,000 credentials and at least 300GB of data.
An untold numbers of ZBT routers sold around the world as white-label products come with several implants built by the manufacturer.
A Clavis, empresa brasileira de Segurança da Informação, apresentou o Clavis Priority Hub, novo módulo desenvolvido para transformar um grande volume de indicadores de segurança em uma sequência de prioridades e ações, aproximando a gestão técnica de riscos das decisões de negóci…
A Agência de Segurança Cibernética e Infraestrutura dos EUA (CISA) reconheceu que os ataques cibernéticos a sistemas municipais de água em julho foram mais extensos do que o inicialmente reportado, com mais de 100 provedores em 12 estados sendo alvo de invasores. A agência inform…
A Boston Scientific identificou na última segunda-feira (25 de agosto) um incidente de segurança que afeta seus sistemas de TI, causando interrupção na rede e impedindo o processamento de pedidos e envios de produtos, conforme comunicado da empresa publicado ontem (26 de agosto).…
