Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. [...]
HHS' Office for Civil Rights Launches Compliance Reviews of Five Medical Schools for Potential Title VI and Section 1557 Violations HHS.gov
Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy (BLE) path that can reach root on the robot's Locomotion PC. The flaws are tracked as CVE-2026-76639 and CVE-…
Hasbro, one of the world's largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees. [...]
A TeamViewer corrigiu duas vulnerabilidades de alta gravidade em seus clientes de acesso remoto. As falhas podem permitir execução de comandos e gravação de arquivos em locais não autorizados, afetando produtos como TeamViewer Remote, Tensor e ONE. A mais grave, CVE-2026-19042, r…
An Identity Fabric knits fragmented identity systems into a coherent layer that observes how identities behave across applications, APIs, and infrastructure. As enterprise access spans more cloud services and automated workloads, identity security depends less on static configura…
ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS scoring system and exploitable, in certain circumstances, by an unauthenticated attacker. The company said it deployed a security update to hosted i…
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
A Veeam corrigiu uma vulnerabilidade crítica no Veeam ONE que pode permitir a um invasor remoto e não autenticado forçar tentativas de autenticação SMB a partir da conta de serviço da plataforma. A falha é identificada como CVE-2026-65641 e recebeu pontuação CVSS 9.3. O problema …
VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices. The implants, named SPEAKIN…
The FBI and DOJ disrupted a global botnet used by QTFY to compromise IoT devices and conceal attacks against US government agencies and critical infrastructure.
ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation attacks. [...]
Azul Vision Settles HIPAA Right of Access Case for $50,000 The HIPAA Journal
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has announced its 9th financial penalty of […] The post Azul Vision Settles HIPAA Right of Access Case for $50,000 appeared first on The HIPAA Journal.
cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported ve…
Microsoft released the KB5120998 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 35 changes, including improvements to the Start menu, taskbar, and Windows search. [...]
PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to address the issue. It sa…
Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic organizations in Romania, Spain, and Türkiye between late September 2025 and early April 2026. These campaigns, per Recorded Future Insikt Group, have led to the deployment of a p…
Roteadores fabricados pela Shenzhen Zhibotong Electronics (ZBT) e vendidos como produtos white-label em todo o mundo contêm múltiplas backdoors embutidas, algumas com privilégios de root, de acordo com pesquisa divulgada por Jacob Baines, CTO da VulnCheck. A empresa, com produção…
A vulnerabilidade CVE-2026-63520 no Microsoft SharePoint, que permite execução remota de código, está sendo explorada ativamente em ataques, conforme relatou a empresa de segurança cibernética Defused. A falha, publicada pela Microsoft em 11 de agosto com atualizações de seguranç…
