/

Últimas ameaças

886 casos · pág. 1/45

aikido.dev · low

Aikido Security lists nine phishing simulation tools for 2026, promoting its own Noon platform; Gophish flagged for CVE-2022-45003

This vendor blog from Aikido Security compares nine phishing simulation tools for 2026 and ranks its own early-access platform Noon first. The others are KnowBe4, Hoxhunt, Adaptive Security, Keepnet, Cofense, IRONSCALES, Microsoft Defender for Office 365 Attack Simulation Training and Gophish. It argues that email-only programs miss multi…

blog.cloudflare.com · critical

Private keys of eight eMudhra intermediate certificates compromised, enabling forged TLS certificates for any domain

On October 19, 2026, Cloudflare learned that the private keys of eight eMudhra intermediate certificates had been compromised. The certificates were widely trusted by browsers, operating systems and Cloudflare itself. Because the keys are weak, an attacker could forge a certificate for any domain and impersonate servers to intercept or mo…

techcrunch.com · low

Leaked Anthropic S-1 reveals cloud capacity shortfalls, $80.7B H1 loss and uninsurable AI liability risk ahead of planned IPO

A leaked Anthropic S-1 filing, reported by The Wall Street Journal and summarized by TechCrunch, says the company is struggling to secure enough cloud capacity from AWS, Google and Microsoft, which increasingly see it as a competitor. Anthropic expects to spend more than $750 billion on cloud contracts, some still under negotiation. It is…

theregister.com · high

eMudhra CA private keys compromised: eight intermediate certificates used trivially guessable keys, including the number 4

Mozilla received a report on 17 October 2026 that private keys for eight eMudhra intermediate certificates were compromised. The Indian certification authority says it has issued over 60 million certificates. Researchers found some of the keys were trivially small integers, so anyone could forge HTTPS certificates for arbitrary domains an…

theregister.com · medium

Auto tech startup IQ.Lvbs alleges hack attempts to steal NovaSpark model traced to rival Comma.ai IP address

Automotive AI startup IQ.Lvbs claims that between October 7 and 14, 2026 it faced repeated attempts to steal its NovaSpark driving model, access users' devices and private driving files, and exploit its sign-in system. The company says the first requests came from an IP address assigned to Comma.ai Inc., a rival whose camera hardware Nova…

cisa.gov · critical

CISA adds six exploited flaws in Plex Media Server, SiteGuard Server Edition and Siemens Software Center to KEV

CISA added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. Four affect Plex Media Server: CVE-2026-96652 and CVE-2026-96655 (SSRF), CVE-2026-96654 (improper neutralization of encoded URI schemes) and CVE-2026-96656 (external control of file name or path). The other two are…

cyberscoop.com · medium

Nigerian national Chukwuemeka Amachukwu sentenced to 8 years for hacking tax firms, tax fraud and fake investment scheme

A 40-year-old Nigerian national, Chukwuemeka Victor Amachukwu, was sentenced to eight years in prison by a US federal court for a 2019-2023 scheme that combined hacking of US tax preparation businesses, filing of fraudulent tax returns and fake investment fraud. He used identities stolen from victim organizations to file false returns wit…

techcrunch.com · low

Google rolls out Gemini 'Personal Intelligence' in Android Auto, drawing on Gmail, Calendar, YouTube and Maps data

Google announced on 20 October 2026 that it is upgrading the Gemini assistant in vehicles with a Personal Intelligence feature. The feature draws on data from Gmail, Google Calendar, YouTube, Maps, Google Search history and other connected Google services. It launches today in Android Auto and will reach cars with Google Built-in in the c…