24 casos · pág. 2/2
The Hakai Security Research Team disclosed CVE-2026-44706, a SQL Injection in Chatwoot versions <= 4.11.1. Any authenticated user with agent privileges, the lowest access level, can read the entire PostgreSQL database. The flaw sits in the FilterService, where user input is interpolated directly into SQL. Exposed data includes bcrypt pass…
The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…
State Bank of India (SBI) said in an October 21 stock-exchange filing that it identified 3,897 customer records with personal information within a set of about 375,000 records circulating on the dark web (thehackernews.com). The bank does not yet know where the data came from or whether it is authentic. The figure matches a claim by a thr…
A threat actor using the handle ByteToBreach claims to have copied 10 databases from Ampath Laboratories, out of an environment said to contain roughly 375 databases. The claimed data includes HR and employee records, multiple patient databases, financial information and system-configuration data. The actor says the laboratory admissions …
