Microsoft confirms Office apps launch issues after June updates
Microsoft is investigating a new issue preventing third-party applications from launching Microsoft Office applications or opening documents on up-to-date Windows systems. [...]
Últimas Notícias
3583 notíciasFalha crítica no LiteLLM permite contornar autenticação
Uma vulnerabilidade crítica no LiteLLM pode permitir que invasores burlem mecanismos de autenticação em determinadas configurações do proxy usado para gerenciar APIs de modelos de linguagem. A falha foi identificada como CVE-2026-49468 e afeta versões anteriores à 1.84.0. O LiteL…
Falhas no FortiSandbox permitem bypass de autenticação
Atacantes estão explorando três vulnerabilidades no Fortinet FortiSandbox, produto usado por empresas para analisar arquivos suspeitos e identificar possíveis ameaças antes que elas cheguem ao ambiente corporativo. A atividade foi observada pela empresa de inteligência de ameaças…
Cisco alerta para exploração limitada de vulnerabilidade no SD-WAN Manager
A Cisco lançou atualizações de segurança para corrigir uma vulnerabilidade no Catalyst SD-WAN Manager que já está sendo explorada em ataques reais. A falha, identificada como CVE-2026-20262, recebeu pontuação CVSS 6.5 e afeta a interface web da plataforma. O problema permite que …
Sweeping Credential-Harvesting Heist Compromises +30K Fortinet Devices
Attackers actively are targeting various sectors across nearly 200 countries and have already compiled a list of working credentials for tens of thousands of compromised devices
Falha no Microsoft 365 Copilot poderia vazar e-mails e arquivos
Uma falha no Microsoft 365 Copilot poderia permitir o vazamento de e-mails, arquivos, convites de calendário e até códigos temporários de autenticação a partir de um único clique em um link legítimo da Microsoft. A vulnerabilidade foi identificada por pesquisadores da Varonis Thr…
Registros nacionais podem transformar a gestão da saúde no Brasil
A consolidação de registros nacionais pode ampliar a rastreabilidade dos dispositivos médicos, apoiar decisões baseadas em evidências e impulsionar um modelo de saúde mais eficiente e sustentável. The post Registros nacionais podem transformar a gestão da saúde no Brasil appeare…
ESET MDR vs Sophos MDR: Compared Time to discover and respond to a threat
A detailed ESET MDR vs Sophos MDR comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach warranties to help you choose.
The Top 10 Attack Surface Exposures in 2026
Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous attack. But when a vulnerability does drop — like MongoBleed earlier this year, which let attackers pull credentials and session tokens from server memo…
Data Breaches Announced by Open Arms Care; Elmwood Home Care – The HIPAA Journal
Data Breaches Announced by Open Arms Care; Elmwood Home Care The HIPAA Journal
Data Breaches Announced by Open Arms Care; Elmwood Home Care
Data breaches have been announced by the Tennessee-based disability care provider Open Arms Care Corporation and the Rhode Island and […] The post Data Breaches Announced by Open Arms Care; Elmwood Home Care appeared first on The HIPAA Journal.
CISA orders feds to patch max severity Joomla plugin flaw by Friday
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity flaw in the Widget Factory Joomla Content Editor (JCE) plugin that is being actively exploited in the wild. [...]
FMC Services Agrees to $2.15M Settlement to End Data Breach Lawsuit – The HIPAA Journal
FMC Services Agrees to $2.15M Settlement to End Data Breach Lawsuit The HIPAA Journal
FMC Services Agrees to $2.15M Settlement to End Data Breach Lawsuit
FMC Services LLC, the operator of a network of primary care clinics in Amarillo and Canyon, Texas, experienced a cyberattack […] The post FMC Services Agrees to $2.15M Settlement to End Data Breach Lawsuit appeared first on The HIPAA Journal.
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats
Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less than 15 malicious plugins capable of exfiltrating artificial intelligence (AI) provider keys. "Every plugin poses as an AI coding assistant built on De…
Microsoft working on Defender patch for RoguePlanet zero-day
Microsoft confirmed that it's working on a security patch for a Defender zero-day vulnerability named "RoguePlanet," disclosed one week ago. [...]
15 Malicious JetBrains Plugins Caught Stealing DeepSeek, OpenAI API Keys
Hackers are using 15 malicious JetBrains plugins posing as AI coding assistants to steal DeepSeek, OpenAI, and other developer API keys.
UK Social Media Ban for Minors Has Privacy Experts Worried
The UK will ban adolescents under 16 years old from user-to-user social-media platforms, despite age-verification issues and privacy concerns.
144 Mastra npm Packages Compromised via Hijacked Contributor Account
As many as 144 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have been compromised as part of a software supply chain attack codenamed easy-day-js,…
Kodak confirms data breach claimed by ShinyHunters extortion gang
Kodak has confirmed that it's working with external cybersecurity experts to investigate a security breach after hackers gained access to some of the company's data. [...]