/
source_confidence:news_report × limpar

Resultados

532 casos · pág. 2/27

zdnet.com · low

Microsoft PowerToys 0.102 adds Mouse Button Lock and CursorHide mouse utilities

Microsoft released PowerToys version 0.102, adding two mouse utilities: Mouse Button Lock and CursorHide. Mouse Button Lock lets users hold a mouse button briefly, release it, and extend a text selection by moving the cursor. It improves on the built-in Windows ClickLock setting by allowing a choice of left, right or middle button, a mill…

techcrunch.com · low

TechCrunch Disrupt 2026 Startup Battlefield 200 recognizes top startups; Intero Biosystems wins, with no direct threat content

TechCrunch recapped the Startup Battlefield 200 cohort at Disrupt 2026. The event selected 200 startups, and Intero Biosystems won the $100,000 equity-free prize and Disrupt Cup, with Apate as runner-up. The article is event and business news with no incident, vulnerability, threat actor or malware content. The only security-adjacent item…

techcrunch.com · high

Railway confirms breach exposing customer environment variables, urges all users to rotate keys and pauses deployments

Railway, a cloud development platform, confirmed that unidentified attackers may have accessed encrypted environment variables and, for some, obtained the decrypted contents. These variables typically hold passwords and API keys that apps use to reach cloud storage and databases. Railway's initial analysis points to a "subset of users", b…

cyberscoop.com · medium

eMudhra exits SSL/TLS certificate business after researchers recover weak private keys of eight intermediate CA certificates

Indian certificate authority eMudhra announced it will stop issuing SSL/TLS certificates, days after researchers showed that the private keys of eight of its intermediate certificates could be reconstructed in under a second. Major browser vendors blocked the certificates, Mozilla removed the eMudhra root from its trust store, and Google …

olhardigital.com.br · high

Russia-linked UAC-0099 and Sandworm use Yggdrasil network and SDelete in destructive attack on Ukrainian grain logistics firm

ESET reports that Russia-linked actors used the decentralized Yggdrasil mesh network to hide command-and-control traffic during an attack on a Ukrainian grain logistics company in July 2025. ESET says this is the first documented use of the technology by a state-linked group. The intrusion began with a phishing email sent in a campaign ag…

hipaajournal.com · low

State Attorneys General HIPAA Enforcement Overview: Penalties and Trends 2010-2026, Including Comstar and Orthopedics NY

State attorneys general share HIPAA enforcement with the HHS Office for Civil Rights (OCR) under authority granted by the HITECH Act. The first action came in 2010, when the Connecticut AG settled with Health Net for $250,000. Enforcement peaked in 2023 with 16 actions, including a $49.5 million penalty against Blackbaud over a 5.5 millio…

infosecurity-magazine.com · high

Iranian APT Prince of Persia hosts C2 infrastructure on US servers in Foudre, Tonnerre and Tornado espionage campaign

Researchers at Semperis reported on October 22 that the Iranian state-linked group Prince of Persia, active for about two decades, is hosting command-and-control (C2) infrastructure with a US hosting company. According to Semperis, this is the first time in at least 12 years that an Iranian threat group has been identified hosting its act…

infosecurity-magazine.com · medium

EU Commission opens DSA investigation into Booking.com over phishing and fraudulent listing risks

The European Commission opened formal proceedings against Booking.com on October 21, 2026, to assess possible breaches of the Digital Services Act (DSA) linked to phishing and fraud on the platform. The investigation follows a preliminary inquiry and covers how the company assesses and mitigates phishing risks, including how reservation a…

gbhackers.com · medium

Scammers abuse legitimate Dell and Staples order emails to deliver callback phishing lures that pass DKIM and DMARC

Cisco Talos observed roughly 1,400 messages across two callback phishing campaigns that abuse legitimate Dell and Staples order notification pipelines. The attackers inject fraudulent helpline numbers into fields the retailer platforms render in authenticated transactional emails, so the messages pass authentication without spoofed sender…