Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote access trojans (RATs) tracked as E4del and PINHOLE. While threat actors are known to abuse legitimate services to …
A Cisco corrigiu nove vulnerabilidades críticas nas plataformas Crosswork e Secure Workload, incluindo falhas com pontuação máxima CVSS 10.0. Segundo a empresa, não há indícios de exploração ativa. No Crosswork, as falhas são rastreadas como CVE-2026-20030, CVE-2026-20357, CVE-20…
Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerability and patch management teams has also existed for that time and has gone through waves of contention and thankfulness. Wh…
Uma vulnerabilidade de execução remota de código no Zimbra Collaboration Suite está sendo explorada ativamente em ataques, permitindo que invasores não autenticados executem comandos no sistema operacional de servidores vulneráveis. A falha é rastreada como CVE-2026-73570. O prob…
O maior risco da medicina de precisão não é a máquina errar. É formarmos uma geração incapaz de perceber quando ela erra - e essa conta chega ao caixa antes de chegar ao prontuário. The post Medicina de precisão exige médicos capazes de discordar da inteligência artificial appear…
RecruitTrap scam uses fake recruitment pages on mobile devices to hide URL clues, reject personal emails and steal corporate login credentials.
Law enforcement agencies from 22 countries helped identify 263 suspects and arrested 58 individuals linked to cybercrime networks coordinated by African crime groups. [...]
Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators. The vulnerabilities, as disclosed b…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabili…
Pesquisadores da Truffle Security identificaram 10.616 chaves de acesso da Amazon Web Services (AWS) ativas e válidas, expostas publicamente entre agosto de 2022 e agosto de 2026, conforme relatório publicado pela empresa em 19 de agosto de 2026. Do total, 817 chaves estavam vinc…
What Are the Key Components of HIPAA? A Detailed Breakdown for 2026 Security Boulevard
CISA has issued a three-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full takeover of a user's communications.
An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S. broadband providers allows remote, unauthenticated attackers to create port-forwarding rules that can expose local network devices to the public internet. [...]
ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer.
Uma nova campanha do trojan bancário Grandoreiro, identificada pela Unidade de Pesquisas de Ameaças da Acronis (Acronis Threat Research Unit – TRU), utiliza o aplicativo legítimo Duplicate Files Finder (DFF) para carregar código malicioso por meio da técnica de DLL sideloading, c…
Improve online privacy by limiting app permissions, securing accounts, updating devices, avoiding unsafe Wi-Fi, and sharing less personal information every day.
A Shield Security alerta que a barreira de entrada para cibercriminosos nunca foi tão baixa, pois a inteligência artificial permite campanhas mais convincentes, rápidas e escaláveis, ampliando prejuízos financeiros e reputacionais, conforme avaliação da empresa. Em um ano marcado…
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. [...]
The recent crypto market decline reflects global volatility, low risk appetite, uncertain monetary policy and doubts about Bitcoin's role as a safe-haven asset.
The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children's Online Privacy Protection Act (COPPA). [...]
