A Microsoft divulgou em 13 de outubro uma falha no Windows SmartScreen que permite a um atacante com acesso local elevar o próprio privilégio no sistema. Registrada como CVE-2026-85851, recebeu nota 7.8 na escala CVSS e classificação Important. O problema é um use after free, da …
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]
Your IP address can reveal your location, ISP, connection type, and VPN use to websites, ad networks, and trackers before a page even loads.
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
Os ataques que desativaram sistemas de refrigeração em centenas de supermercados na França na noite de domingo, dia 11, têm origem em vulnerabilidades conhecidas pelo menos desde 9 de agosto, dia em que especialistas da equipe Team82, da Claroty, fizeram uma palestra sobre o assu…
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Pesquisadores publicaram uma prova de conceito para a Vghost, falha de alta gravidade no vhost do Linux rastreada como CVE-2026-74580 (CVSS de 8.8), que permite a um usuário local obter acesso root ou, em certas configurações de máquina virtual, escapar do convidado e afetar o ho…
Disclosure: This article was produced in partnership with FastDL. Hackread.com reviewed and edited the content before publication. “SaveVid.Net…
A Microsoft publicou atualizações que corrigem mais de 1.400 falhas de segurança em seus produtos, incluindo uma vulnerabilidade explorada ativamente antes da correção. Nunca antes a empresa havia fechado tantas brechas em uma única Patch Tuesday. Cerca de 1.100 dos problemas est…
A F5 publicou três avisos de segurança sobre falhas que permitem a atacantes remotos e não autenticados derrubar processos de trabalho do NGINX Plus e do NGINX Open Source por meio de requisições HTTP manipuladas. Os problemas afetam o plano de dados do servidor, que processa o t…
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]
HHS Launches Health Center Healthy Lifestyle Commitment to Advance Nutrition, Prevention, and Healthy Living HHS.gov
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through the gateway and, if it s…
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering. [...]
A Cisco corrigiu uma vulnerabilidade zero-day explorada ativamente em seu Secure Email Gateway (SEG) que permite a atacantes remotos não autenticados executar comandos com privilégios de root. Rastreada como CVE-2026-76519, a falha decorre de uma fraqueza de travessia de caminho …
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes …
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]
Continuing Cybersecurity Awareness Month with experts weighing in on topic #1 - Ransomware and Extortion Attacks. Healthcare is still the #1 most targeted industry for ransomware. The post Cybersecurity Awareness Month: Ransomware and Extortion Attacks appeared first on Health IT…
