Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials…
Últimas Notícias
4657 notíciasLiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.…
Authorities disrupt nearly 11,000 cybercrime networks in Africa
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. [...]
804 Healthcare Data Breaches Put HIPAA Compliance Monitoring in Focus – DesignRush
804 Healthcare Data Breaches Put HIPAA Compliance Monitoring in Focus DesignRush
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacke…
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-concept code. By sending a small batch of compressed HTTP headers that expands in memory to a much larger set, the attack…
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following the release of the patche…
UAE Transitions 50% of Gov't Services to Agentic AI
The United Arab Emirates says it's creating a foundation of security and safety as it transforms its public service footprint.
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was…
MS acusa grupo chinês de ataque à ConnectWise
A Microsoft atribuiu ao Storm-0940, ator alinhado ao Estado chinês, o comprometimento da cadeia de suprimentos da ConnectWise. Desde setembro de 2026, o grupo usou o módulo de testes de invasão com IA ARTEX para automatizar ataques contra centenas de organizações. Em vários casos…
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks. [...]
HIPAA Security Rule Delayed to 2027: Why Healthcare Can’t Wait – Akamai
HIPAA Security Rule Delayed to 2027: Why Healthcare Can’t Wait Akamai
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers' servers. [...]
TiDB Breach Exposes Flawed Cloud Security Assumptions
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
Node.js corrige falhas graves em TLS, DNS e Brotli
O Node.js lançou atualizações de segurança para as ramificações 26.x, 24.x e 22.x com o objetivo de corrigir dez vulnerabilidades, incluindo quatro falhas de alta severidade que afetam consultas DNS, verificações de certificados TLS e descompressão Brotli. As versões corrigidas s…
LiteLLM é comprometido com infostealer e RAT no PyPI
A versão 1.107.0 do LiteLLM foi comprometida no PyPI em 21 de outubro de 2026, distribuindo um ladrão de credenciais e um trojan de acesso remoto (RAT) por meio de todos os sete arquivos wheel publicados. A versão maliciosa também chegou a imagens Docker, colocando em risco siste…
SafePay atinge 600 organizações de infraestrutura crítica
O grupo de ransomware SafePay invadiu mais de 600 organizações de infraestrutura crítica em todo o mundo desde 2024, segundo a Agência de Segurança Cibernética e Infraestrutura dos Estados Unidos (CISA). Em relatório conjunto com o FBI, o Serviço Secreto dos EUA (USSS), o Landesk…
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. [...]
Hospital Márcio Cunha, em Minas Gerais, realiza procedimento inovador de reconstrução microcirúrgica de língua
Procedimento realizado em Ipatinga amplia as possibilidades de tratamento do câncer de língua e reforça a capacidade do HMC em cirurgias de alta complexidade O Hospital Márcio Cunha (HMC), em […] O post Hospital Márcio Cunha, em Minas Gerais, realiza procedimento inovador de reco…
CISA alerta para exploração ativa de falhas no Plex Media Server
A CISA alertou que atacantes exploram ativamente quatro vulnerabilidades no Plex Media Server, reunidas sob a designação Plex2Shell. Quando encadeadas em um exploit, as falhas permitem que um atacante obtenha o token de administrador do proprietário e execute código com privilégi…