O grupo de ransomware Emperador incluiu a AB InBev em sua lista de vítimas, com a publicação detectada em 25 de outubro às 03h22 no horário UTC. O grupo alega ter 3,9 GB de dados internos da cervejari...
A Arista Networks publicou atualizações de segurança para corrigir uma vulnerabilidade zero-day explorada ativamente que afeta implantações on-premises do VeloCloud Orchestrator (VCO). O VCO é um port...
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, dark...
A Cisco anunciou na quarta-feira (21) correções para 34 vulnerabilidades que afetam as linhas Expressway Series, IOS XR, Snort 3 e produtos de Unified Communications. Entre as falhas estão defeitos cr...
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who m...
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that ...
Atacantes comprometeram o pacote PyPI do projeto LiteLLM e publicaram imagens Docker maliciosas com um payload que rouba credenciais, segredos e variáveis de ambiente. O ataque à cadeia de suprimentos...
A Lumu anunciou uma nova integração com o CrowdStrike Falcon Next-Gen SIEM. A integração incorpora os dados de comprometimento de rede identificados pela Lumu ao Falcon Next-Gen SIEM, onde podem ser c...
A Oracle publicou sua Atualização Crítica de Patch (CPU) de outubro de 2026, com 1.295 novas correções em dezenas de produtos. Segundo análise da Tenable, a atualização aborda 1.209 CVEs únicos, inclu...
Nunca se escreveu tanto software quanto em 2026, e a fatia dele que passa por um teste de segurança encolheu. O NVD registrou mais de 72 mil vulnerabilidades-CVEs entre janeiro e setembro, contra 48.2...
O Ruby publicou em 23 de outubro as versões 4.0.9, 3.4.12 e 3.3.13, que corrigem três falhas no Onigmo, o motor de expressões regulares da linguagem. As três estão na origem de quatro vulnerabilidades...
An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key coul...
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices. [...]
Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones. The post iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Bac...
Japan's GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.
Quest is the latest in a series of healthcare technology companies that have been hacked in recent months.
A Cloudflare publicou em 25 de outubro uma atualização emergencial do seu conjunto de regras de WAF para conter a exploração da CVE-2026-111497, uma escrita fora dos limites no decodificador da biblio...
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more. [...]
Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses. Huntress Labs ranks the threats...
A Group-IB, em relatório publicado em 21 de outubro com a NyxLab, descreveu uma campanha atribuída a um operador conhecido como k0t contra firewalls e portais de VPN expostos na internet. O conjunto r...
Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became a victim of the abuse herself.
Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers.
O Moto G47 Power se diferencia da versão convencional pela bateria de 7.000 mAh.
Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
Measuring AI model security gets complex, fast, thanks to a growing patchwork of benchmarks targeting different variables in the equation. But none replace testing against your own code and workflows.
AI chatbot virtual assistant interacting with users through AI conversation bubbles, symbolizing AI automation, smart communication, and AI digital artificial intelligence help support Latch
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assis...
Brazil's President and re-election candidate for the Workers' Party (PT) Luiz Inacio Lula da Silva reacts after knowing the first results of the presidential runoff election, in Sao Paulo, Brazil, on ...
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.
The moment you realize the internet is "held together by glue and dreams."