/

Últimas ameaças

1.088 casos · pág. 14/55

thehackernews.com · high

Cyber Partisans (Partisan Zmiy) hid Vasilek backdoor in VMware Tools in two-year intrusion at Russian healthcare organization

Russian firm Solar (a Rostelecom subsidiary) reported a nearly two-year intrusion at an unnamed Russian healthcare organization, attributed to the Belarus-aligned hacktivist cluster Partisan Zmiy (Cyber Partisans). Solar found the compromise in December 2025, but the earliest signs date to early 2024. Unlike the group's usual destructive …

thehackernews.com · · 2 fontes · 2 atualizações high

SBI confirms 3,897 customer records in alleged 375,000-record dark web leak claimed by Siriusim

State Bank of India (SBI) said in an October 21 stock-exchange filing that it identified 3,897 customer records with personal information within a set of about 375,000 records circulating on the dark web (thehackernews.com). The bank does not yet know where the data came from or whether it is authentic. The figure matches a claim by a thr…

securityaffairs.com · · 3 fontes · 3 atualizações high

Pegasus zero-click spyware confirmed on Belgrade University rector's iPhone days before Serbia's election; prosecutor also targeted

Citizen Lab, working with the SHARE Foundation, confirmed with high confidence that the iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student-led anti-corruption protests, was infected with NSO Group's Pegasus in 2026 through a zero-click exploit (thehackernews.com, securityaffairs.com,…

gbhackers.com · exploit público critical

INC and The Gentlemen ransomware affiliates leak AI-assisted intrusion ops: 8,257 Claude messages, 46 INC encryptor builds, 62 victims

SOCRadar's Threat Research Unit (STRU) found open directories on 45.227.254.43 in late September 2026. They led to six more adversary servers tied to INC Ransom and The Gentlemen affiliates. The servers held 8,257 AI messages across 133 sessions, source code, stolen credentials, victim workspaces and 46 victim-specific INC encryptor build…

cyberscoop.com · medium

Philippines-based US citizen Robert Boling pleads guilty to identity theft and fraud scheme targeting thousands of US servicemembers and veterans

Robert Wayne Boling Jr., a 45-year-old US citizen living in Angeles City, Philippines, pleaded guilty to conspiracy to commit wire fraud and money laundering, the US Department of Justice announced. Prosecutors call him the principal orchestrator of a scheme that used stolen PII to compromise bank accounts of thousands of US servicemember…

aikido.dev · low

Aikido Security lists nine phishing simulation tools for 2026, promoting its own Noon platform; Gophish flagged for CVE-2022-45003

This vendor blog from Aikido Security compares nine phishing simulation tools for 2026 and ranks its own early-access platform Noon first. The others are KnowBe4, Hoxhunt, Adaptive Security, Keepnet, Cofense, IRONSCALES, Microsoft Defender for Office 365 Attack Simulation Training and Gophish. It argues that email-only programs miss multi…

theregister.com · medium

Auto tech startup IQ.Lvbs alleges hack attempts to steal NovaSpark model traced to rival Comma.ai IP address

Automotive AI startup IQ.Lvbs claims that between October 7 and 14, 2026 it faced repeated attempts to steal its NovaSpark driving model, access users' devices and private driving files, and exploit its sign-in system. The company says the first requests came from an IP address assigned to Comma.ai Inc., a rival whose camera hardware Nova…

cyberscoop.com · medium

Nigerian national Chukwuemeka Amachukwu sentenced to 8 years for hacking tax firms, tax fraud and fake investment scheme

A 40-year-old Nigerian national, Chukwuemeka Victor Amachukwu, was sentenced to eight years in prison by a US federal court for a 2019-2023 scheme that combined hacking of US tax preparation businesses, filing of fraudulent tax returns and fake investment fraud. He used identities stolen from victim organizations to file false returns wit…