The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russi…
O Ruby publicou em 23 de outubro as versões 4.0.9, 3.4.12 e 3.3.13, que corrigem três falhas no Onigmo, o motor de expressões regulares da linguagem. As três estão na origem de quatro vulnerabilidades críticas do GitLab, entre elas a CVE-2026-110264, de nota máxima, divulgada doi…
A Cloudflare publicou em 25 de outubro uma atualização emergencial do seu conjunto de regras de WAF para conter a exploração da CVE-2026-111497, uma escrita fora dos limites no decodificador da biblioteca Brotli que permite execução remota de código. A cobertura especializada cha…
Relatório da McKinsey destaca o potencial da IA na descoberta de medicamentos e na análise molecular de tumores, enquanto a adoção dessas soluções esbarra em custos, validação e desigualdades de acesso. The post Inteligência artificial na oncologia: do avanço científico à aplicaç…
HIPAA Kubernetes Backup: 13 Steps, 90 Min [2026] tech-insider.org
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices. [...]
A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained access to the criminal's operation's backend and cut …
French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners. [...]
OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's reasoning models work through a problem before answering, and the service normall…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring syste…
A WatchGuard Technologies, por meio de sua equipe de pesquisa Red Cell, investigou três campanhas de malware que utilizam scripts VBScript para distribuir códigos maliciosos e dificultar a detecção. A análise examina as operações associadas ao Overlord RAT, ao trojan bancário Lam…
Falhas quase simultâneas em equipamentos de refrigeração foram registradas em 14 instalações militares dos Estados Unidos, distribuídas por 11 estados, entre 26 e 27 de agosto, segundo comunicado da empresa de segurança Resiliant publicado em 23 de setembro. O episódio estragou a…
Measuring AI model security gets complex fast — a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and workflows.
The University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. [...]
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. [...]
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger models. [...]
