Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organizations across the world. Targets of these attacks include healthcare and public health, financial services, government se…
Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant supplies heat to roughly 50,000 residents. Recove…
Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform's plugins team to temporarily disable their downloads. "Unlike traditional software supply chain attacks, zero s…
Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Technology) network. [...]
A Off-by-1 Labs, equipe de pesquisa da 1Password, publicou um estudo concluindo que patches gerados por LLMs para vulnerabilidades complexas são ineficazes ou introduzem novas falhas em 53,9% das tentativas, segundo o relatório da empresa. A pesquisa analisou 6.080 patches produz…
New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.
A Fortinet, empresa de segurança de rede, publicou um alerta sobre a presença de uma backdoor no software de VPN QuickFox. De acordo com o comunicado da fornecedora, o código malicioso está presente na aplicação desde agosto de 2025, e os desenvolvedores já lançaram uma nova vers…
Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts. [...]
O presidente da Câmara Municipal de Vitória, Anderson Goggi, afirmou nesta segunda-feira (10), durante a sessão da Casa, que um ex-funcionário da empresa responsável pelo sistema é o principal suspeito da invasão ao site da instituição, ocorrida no dia 6, quinta-feira passada. Go…
The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.
A Cisco Systems publicou, na sexta-feira, 7 de agosto, um aviso sobre sete vulnerabilidades de alta severidade que afetam o mecanismo de detecção de malware ClamAV, presentes em seus produtos Secure Endpoint Connector para Windows, macOS e Linux. Um atacante remoto não autenticad…
A CISA emitiu um alerta sobre a exploração ativa de uma vulnerabilidade crítica de injeção de comandos no Progress Kemp LoadMaster, rastreada como CVE-2026-8037. A falha permite que atacantes não autenticados executem comandos arbitrários em dispositivos não corrigidos, explorand…
A CISA confirmou que grupos de ransomware estão explorando duas vulnerabilidades recentemente corrigidas em gateways de acesso remoto SonicWall SMA1000, incluindo uma falha de severidade máxima do tipo SSRF. As vulnerabilidades, rastreadas como CVE-2026-15409 e CVE-2026-15410, fo…
OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing, incident response, and remediation. [...]
It's time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets.
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]
Starts October 26th in San Diego - We're in an era of rapid transformation across managed care pharmacy. Artificial intelligence, political volatility, and scientific breakthroughs have all made their mark on managed care, and AMCP Nexus 2026 is where leaders come together to mak…
Sophisticated iPhone exploit chains previously limited to nation-states are spreading far and wide to organized cybercrime groups.
Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The use of StormEncryptor marks a shift from the adversary's previous use of Medusa ransomware, the Micr…
