1.100 casos · pág. 11/55
OpenAI announced Locked Chats for ChatGPT on 2026-10-20. The feature lets users hide individual conversations behind a four-digit PIN or, on supported devices, Face ID, Touch ID or the device unlock method (techcrunch.com, olhardigital.com.br). It is a local privacy control for shared or exposed screens and devices, not a security boundar…
The European Commission has opened a formal investigation under the Digital Services Act (DSA) into Booking.com, a very large online platform with more than 45 million EU users. It will examine whether the company does enough to stop fraudsters from using the platform for fake listings, impersonation fraud, phishing and smishing (theregis…
A joint StopRansomware advisory (AA26-293A) from CISA, the FBI, the USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026 (cisa.gov). The group has been active since August 2024 and has compromised …
Symantec's Threat Hunter Team used an AI honeypot to capture the full instruction set of a malicious autonomous AI agent in summer 2026. The agent is designed to run up to 100,000 malicious actions without human approval: scanning for targets, exploiting vulnerabilities, stealing credentials, deploying cryptocurrency miners and reinfectin…
CrowdStrike researchers analyzed AI infrastructure left openly exposed on web servers by four previously unreported criminal groups (Chinese-, Spanish/English-, Indonesian- and Russian-speaking). The groups ran attacks between May and August 2026 using mostly older versions of Anthropic's Claude and open-weight Deepseek models. All four b…
Researchers at Abnormal AI identified a new phishing-as-a-service (PhaaS) platform, Athena StealthRoute, which uses AI tooling to both create and conceal phishing attacks. Linked infrastructure was first seen during an August 2026 phishing campaign. In the six months to October 9, the firm found about 89,700 attack-related messages with t…
Wiz Research disclosed multiple memory-safety vulnerabilities in the core PHP engine, grouped under two CVEs with severity up to CVSS 9.2, and patched by the PHP team on October 21, 2026. The flaws allow unauthenticated remote code execution or disclosure of process memory (passwords, tokens, API keys, certificates) on any site running an…
Huntress announced Attack Reduction, a new capability in Huntress Managed ESPM (Early Access) that disables the "Windows key + R" shortcut for users who never use the Run dialog, aiming to break the most common ClickFix attack chain. The post opens with an attempted fake-CAPTCHA lure that targeted a Huntress employee on a spoofed airport …
A ClickFix malvertising campaign uses sponsored Google results for "amazon business" to lure victims to a fake Amazon login page on Google Sites and then to a fake CAPTCHA. The CAPTCHA pastejacks a command into the clipboard that the victim is told to run in the Windows Run box. The command abuses the legacy finger.exe utility to fetch a …
CrowdStrike Counter Adversary Operations published a blog post on 21 October 2026 titled "CrowdStrike Uncovers New Agentic AI Campaigns". The captured text contains only site navigation and a list of related post headlines. It has no body text, so the campaigns, actors, targets, tooling and indicators are not described. No attribution, ma…
Cloudflare has made generally available to all customers, including Free plans, two new WAF capabilities: full transaction detections, which correlate each HTTP request with the origin's response to confirm exploitation, and response rules, which block the origin's response before it reaches the requester. The first managed protections ta…
The US Federal Trade Commission (FTC) opened a rulemaking in September asking whether platforms should be required to stop impersonation scam ads from reaching consumers, citing ad tools that generate copy, images and video and optimize targeting regardless of whether an ad is legitimate. The article reports that nearly one trillion scam …
Cloudflare and Commerce.com describe enabling WebMCP, an experimental Google browser standard that exposes structured tools (e.g. searchproducts, addtocart) to AI shopping agents, across almost 100,000 Commerce.com storefronts. Cloudflare injects a script at the edge, so merchants do not have to edit their themes. This is product and part…
Check Point Exposure Management researchers identified a campaign that mass-produces fraudulent customer support PDFs and posts impersonating more than 20 travel brands, including airlines, travel agencies and transportation companies. The documents are uploaded to trusted university, government and commercial websites through public uplo…
A Check Point vendor blog post argues that AI training and inference workloads, private models, GPU infrastructure, containers, APIs and autonomous agents are changing data center security. It cites the 2026 Check Point Cloud Security Report: 29% of organizations are already moving AI workloads to on-premises or private cloud, and another…
Unit 42 analyzed the operational environment of a previously unreported, financially motivated, English-speaking actor using the handle BUGSTER. The actor ran the Hermes Agent framework with DeepSeek V4 as its reasoning engine and the Cursor IDE as a secondary tool, with safety controls disabled in both. With AI-generated scripts and reco…
Salt Security won three categories at Cyber Defense Magazine's 2026 Top InfoSec Innovators awards, announced at CyberDefenseCon 2026 in Orlando: Most Promising Agentic AI Security Solution, Trailblazing AI-based Cybersecurity Innovation and Transformational API Security Solution. This is vendor and industry news with no direct threat or i…
A Nielsen survey of 1,700 directors and senior managers in seven countries, commissioned by Monday.com, finds that AI adoption is creating management and governance problems. It is not a security incident. More than half of senior leaders say it is harder to evaluate employee work now that output arrives polished by AI. Nearly half say th…
Pascal, a startup co-founded by CEO Adam Slavney and CTO Jinyoung Seo, raised $8.5 million in a follow-on to its seed round. The round was co-led by Sazze Partners and LB Investment, with participation from KDB Silicon Valley. The company is developing a solid-state refrigeration approach that compresses carbon dioxide into cartridges hol…
Infillion, an advertising company, acquired location-data platform Foursquare last month at an undisclosed value. In a blog post, co-founder and former CEO Dennis Crowley said that neither preferred nor common stockholders appear to have received any value from the deal, and that he was heartbroken by the outcome. He blamed the result on …
