Why the FDA’s top spot could sit empty for months
Multiple factors could get in the way of confirming a new commissioner before the midterm elections, experts said, leaving the agency’s long-term initiatives in limbo.
Últimas Notícias
3477 notíciasFalso instalador do Claude no Bing entrega malware SectopRAT
Uma campanha de malvertising no serviço de busca Bing está promovendo um falso instalador do aplicativo desktop do Claude, hospedado em um domínio legítimo da Anthropic, para entregar o trojan de acesso remoto SectopRAT. A operação, batizada de FakeAgent pelos pesquisadores da Hu…
Plataforma Vakinha comunica intrusão em sua rede
A plataforma Vakinha, sediada em Porto Alegre e especializada na organização de coletas de valores para objetivos comuns, comunicou hoje ao mercado a ocorrência de uma intrusão em sua rede, com acesso de leitura a dados cadastrais armazenados no sistema. Em contato com o CISO Adv…
Microsoft blames massive Microsoft 365 outage on maintenance bug
Microsoft says a bug in its automated network maintenance request system caused Thursday's massive outage by mistakenly removing IP routes from more devices than intended, disrupting Azure and Microsoft 365 services. [...]
Seeing More, Closing Less: The Healthcare Remediation Gap
By Russell Teague - Healthcare is getting better at seeing its risk. The hard part is now what we do after the finding. During the first half of 2026, organizations have been identifying more risk than ever, but they are remediating less of it according to Fortified Health Securi…
GE HealthCare CFO Jay Saccaro steps down
An analyst said Saccaro’s decision was “surprising,” adding that investors were not calling for his departure.
Edwards posts strong TAVR sales ahead of potential Medicare coverage expansion
An upcoming Medicare coverage decision for transcatheter aortic valve replacement devices and study readout for patients with moderate disease are expected to help the company maintain its momentum.
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate an active phishing kit to impersonate the videoconferencing platforms in social engineering campaigns designed to deliver malwar…
Anahp Apoia | XI Simpósio Einstein de Cardiologia
Estão abertas as inscrições para o XI Simpósio Einstein de Cardiologia, que será realizado nos dias 13 e 14 de novembro de 2026 e reunirá grandes especialistas nacionais e internacionais […] O post Anahp Apoia | XI Simpósio Einstein de Cardiologia apareceu primeiro em Anahp.
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry …
Chick-fil-A data breach affects more than 13,000 customers
Chick-fil-A has confirmed that over 13,000 customers had their accounts breached in a wave of credential stuffing attacks targeting its website and mobile app between June 17 and June 19. [...]
Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack
Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents trust hallucinated package, repo, or domain names. ActiveState explains how pre-fetch verification and governed dependency management can help stop these …
HIPAA-Compliant VPN Solutions for Business in 2026 – Cybernews
HIPAA-Compliant VPN Solutions for Business in 2026 Cybernews
Vatican's Official Prayer App Leaks 700K+ Global Users' PII
A porous API endpoint exposes, names, email addresses, location, and site status, all of which can be easily gleaned by anyone with a browser.
Europol flags 4,340 URLs for removal in 'The Com' crackdown
Europol has flagged 4,340 URLs for removal during a multi-week operation targeting online content linked to "The Com," a loosely organized network of nihilistic violent extremist groups. [...]
Default Azure Automation Setting Enables Cross-Tenant Identity Takeover
Microsoft addressed a public-by-default configuration and chain of code flaws in Azure Automation which could have let attackers seize another tenant's identity and access other tenants' data, credentials, and cloud workloads.
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence (AI) agent inside a victim's organization. The v…
Check Point corrige falha crítica explorada no SmartConsole
A Check Point lançou correções urgentes para uma vulnerabilidade crítica no login do SmartConsole que já está sendo explorada em ataques. Registrada como CVE-2026-16232, a falha recebeu pontuação CVSS 9,3 e permite obter privilégios administrativos completos. O problema possibili…
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet. XBOW's testing got the same result on workers across different hosts and network ranges, so…
Ransomware Chaos usa navegador invisível para ocultar tráfego de ransomware
O grupo de ransomware Chaos passou a usar o novo trojan msaRAT para ocultar comunicações de comando e controle em conexões legítimas do Chrome e do Edge. O malware foi identificado em uma máquina Windows comprometida antes da execução do criptografador. Escrito em Rust, o msaRAT …