Go 1.27.3 and Go 1.26.10, released on October 20, make Go's certificate verifier reject any certificate chain that passes through one of eight intermediate certificate authority keys. Programs built on the new release will refuse connections to sites and services whose certifica…
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware. [...]
A EG Secure Solutions confirmou exploração da CVE-2026-106931 no SiteGuard Server Edition, firewall de aplicação instalado no próprio servidor protegido. A falha permite executar comandos do sistema como root no Unix e como SYSTEM no Windows. O problema é uma injeção de comando n…
Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October 2026 security update. [...]
Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores across Europe and the United States. [...]
The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO). The Symantec Threat Hunter Team, which is tracking the ac…
FBI investigates misuse of medical records after alleged sexual abuse of child by classmate The Guardian
NSA, CISA e NIST publicaram em 16 de outubro uma orientação voluntária com dez práticas para preparar, detectar e responder a incidentes em que agentes de IA altamente capazes agem fora dos limites definidos para a tarefa. O documento chama esses casos de incidentes de controle. …
ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing application credentials, as it continues to respond to a security incident that led to unauthorized access to application i…
Japanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen credit card details for purchases.
Sign a HIPAA BAA for Cloud Backup: 13 Steps, 90 Min [2026] tech-insider.org
Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today. [...]
Compare five healthcare software development firms and learn how to build secure, compliant products under HIPAA, GDPR and FDA requirements.
An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any mach…
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL…
The CE mark clears Medtronic to sell conduction system pacing therapy devices in Europe.
A U.S. court on Monday granted the U.S. government's request to detain a former OpenAI engineer accused of planting a recording device in an executive conference room at the company's San Francisco office to allegedly steal sensitive secrets. In a new court filing Sunday, prosec…
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader. According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware delivery service that employs ClickFix-style…
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]
O Sicredi confirmou hoje ao CISO Advisor a ocorrêcia de um incidente de exposição de dados relacionados à cooperativa no ambiente de um fornecedor. Em nota enviada ao portal, o Sicredi informou que houve exposição pontual de informações técnicas internas. A cooperativa afirmou qu…
