Social Engineering AI Agents: The New BEC for 2026
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.
Últimas Notícias
4658 notíciasResearchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described …
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing," Anthropic…
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4 score: 5.5) - An impr…
Introducing Our New Cybersecurity Partner: Blue Team Alpha
Introducing Our New Cybersecurity Partner: Blue Team Alpha Cyberattacks on healthcare organizations can do far more than expose data. They […] The post Introducing Our New Cybersecurity Partner: Blue Team Alpha appeared first on The HIPAA Journal.
Practical AI Integration for Modern Business Teams
Learn how businesses can use AI to reduce repetitive work, improve workflows, connect information, and support better everyday decisions.
Max severity SonicWall SMA1000 flaw now exploited in attacks
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. [...]
Shen Smiles Pays $140,000 to Resolve HIPAA Privacy Rule Violations
Dr. Linda L. Shen, the owner and operator of Shen Smiles, a Pennsylvania dental practice, has agreed to pay a […] The post Shen Smiles Pays $140,000 to Resolve HIPAA Privacy Rule Violations appeared first on The HIPAA Journal.
Why HIPAA compliance in martech goes beyond BAAs – MarTech
Why HIPAA compliance in martech goes beyond BAAs MarTech
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed bel…
Plataforma de exploits para iOS rouba chaves de carteiras
A Censys revelou o funcionamento do DarkSword, plataforma que vende acesso a dispositivos iOS, e do Coruna, o malware que rouba carteiras de criptomoedas depois da invasão. A infraestrutura ficou exposta entre 15 e 17 de setembro. A entrada é pelo navegador. O DarkSword ataca o W…
Cibercriminosos atacam câmeras Hikvision para executar código
A GreyNoise registrou tentativas de exploração da CVE-2021-36260 em câmeras e gravadores da Hikvision entre 21 de setembro e 1º de outubro. A falha tem nota 9.8 na escala CVSS e executa comandos no equipamento sem nenhuma credencial. O problema é uma injeção de comando no servido…
The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which orga…
Man admits to running network of 15,000 money mules for cybercriminals
A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals worldwide. [...]
FBI Warns FortiBleed Campaign Still Active, Hits 86,000+ FortiGate Devices
FortiBleed attacks continue to target Fortinet FortiGate devices, with SOCRadar reporting more than 86,644 compromised devices across 194…
Anúncio na dark web oferece chave de API do VirusTotal
Uma chave de API do VirusTotal Enterprise está à venda por 350 dólares em fórum criminoso. A oferta foi divulgada em 7 de outubro pelo canal Dark Web Informer, que monitora esses ambientes, e não traz prova de que a credencial seja autêntica. A chave de API permite que um softwar…
Ataque ao Einstein Hospital Israelita expõe dados de pacientes
O Einstein Hospital Israelita confirmou que foi alvo de um ataque cibernético que resultou na obtenção de parte da sua base de dados de pacientes. As informações incluem nome, CPF e data de nascimento, e podem conter prescrições e resultados de exames. A suspeita do incidente sur…
Microsoft: Outdated Windows devices will stop receiving security updates
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation. [...]
GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site's .onion address using only public information, and then take that address over. Searchlight Cyber, which disclosed the flaw on October 8…
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. [...]