544 casos · pág. 2/28
Microsoft researchers report that China state-aligned hackers breached ConnectWise's cloud backup service and stole application credentials used to link ConnectWise with its customers' Microsoft-hosted environments. With these credentials the attackers could sign in as authorized users and access emails and other files. Microsoft says the…
Indian certification authority eMudhra announced on 22 October 2026 that it is withdrawing from the global SSL/TLS certificate business. The announcement follows public reports that the private keys of eight intermediate CAs were trivially weak. The issue was reported to Mozilla on 17 October. The key values were 4, 56, 66, 115, 155, 156,…
GitLab released security patches for CVE-2026-110264, a maximum-severity integer overflow flaw in its Regular Expression Compiler that can let an unauthenticated remote attacker execute arbitrary code on vulnerable servers. The researcher joaxcar reported it through GitLab's HackerOne bug bounty program; theregister.com names the reporter…
A New Mexico state court ordered Meta to pay $25 billion in penalties for more than 43 million violations of the state's unfair practices law. The case was filed in 2021 and stems from the Cambridge Analytica scandal. District Court Judge Francis J. Mathew found that Facebook falsely promised users they controlled their data. Meta's chief…
Two critical PHP vulnerabilities, reportedly allowing unauthenticated attackers to take control of servers, led Anatel and several Brazilian federal courts (TRF1, TRF4, TRF6) to suspend external access to systems including the Sistema Eletrônico de Informações (SEI). The Brazilian CISC issued an alert on 21 October 2026. GSI instructed fe…
American Renal Management LLC, doing business as Innovative Renal Care, a kidney care provider with more than 200 locations in 28 U.S. states, has proposed a $900,000 settlement to resolve consolidated class action litigation (In re American Renal Management LLC Data Breach Litigation, U.S. District Court for the Middle District of Tennes…
Ridgeway Pharmacy Ltd, a Victor, Montana mail order and community pharmacy, disclosed that a security incident involving its third-party designed and developed website exposed the personal and health information of 258,920 customers. The company became aware of the exposure on August 21, 2026. Forensic experts confirmed the incident was l…
Forescout's Vedere Labs published research on internet-exposed refrigeration control systems after reported October 2026 cyberattacks that disrupted refrigeration at hundreds of French supermarkets, causing temperature fluctuations and spoiled stock. The researchers observed 12,976 exposed service observations across ten product groups, t…
UK-based secure data exchange provider DOQEX, headquartered in York, has obtained Cyber Essentials certification. It adds to the company's existing ISO 27001, ISO 27017 and ISO 27018 accreditations. Cyber Essentials is a UK Government-backed scheme that assesses five areas: firewalls, secure configuration, security update management, user…
Cybersecurity vendor Huntress has expanded its distribution agreement with Ingram Micro beyond the United States to cover Canada, Latin America and the Caribbean. The deal gives MSPs and VARs a single distribution route to Huntress services across the Americas. In Latin America, Huntress will work through Ingram Micro's export division ra…
Two critical vulnerabilities in the PHP engine, collectively referred to as PHP2Shell, prompted emergency security releases on 21 October 2026 after details leaked on 20 October ahead of the planned disclosure. The UK NCSC urged organisations to identify affected systems and update immediately, and Amazon threat intelligence reported expl…
Tesla said on its Q3 earnings call that it will expand Cybercab service from Austin to Dallas next month and to other cities by the end of 2026. It also plans to sell Cybercabs to fleet operators by year-end. CFO Vaibhav Taneja said Tesla wants to "own transportation of any kind on Earth". The expansion could put Tesla in direct competiti…
Spotify confirmed during its Q3 investor call that it is rolling out QR code verification for Family Plan members, which co-CEO Alex Norström called a "routine improvement" to existing verification tools rather than a crackdown. The app prompts members to confirm they live with the plan manager by scanning a QR code shown on the manager's…
Uber and OpenAI announced an expanded partnership under which Uber's whole global workforce, about 30,000 employees, will use ChatGPT Work. OpenAI introduced ChatGPT Work in July as an enterprise-focused AI agent for corporate workflows. Uber first piloted it with 1,000 employees, about 80% of them non-engineers across finance, operations…
Microsoft released PowerToys version 0.102, adding two mouse utilities: Mouse Button Lock and CursorHide. Mouse Button Lock lets users hold a mouse button briefly, release it, and extend a text selection by moving the cursor. It improves on the built-in Windows ClickLock setting by allowing a choice of left, right or middle button, a mill…
TechCrunch recapped the Startup Battlefield 200 cohort at Disrupt 2026. The event selected 200 startups, and Intero Biosystems won the $100,000 equity-free prize and Disrupt Cup, with Apate as runner-up. The article is event and business news with no incident, vulnerability, threat actor or malware content. The only security-adjacent item…
Railway, a cloud development platform, confirmed that unidentified attackers may have accessed encrypted environment variables and, for some, obtained the decrypted contents. These variables typically hold passwords and API keys that apps use to reach cloud storage and databases. Railway's initial analysis points to a "subset of users", b…
At TechCrunch Disrupt, three investors from Peak XV, Index Ventures and Bessemer described how founders can raise a Series A in the current market. Shailendra Singh of Peak XV called seed and venture markets the most dysfunctional he has seen and predicted a correction as soon as 2027. He cited inflated ARR figures, rounds priced at up to…
Spotify reported 788 million monthly active users and nearly €5 billion in Q3 revenue. On the earnings call, co-CEO Gustav Söderström said AI agents will help the business because entertainment is not a chore people want to delegate. Spotify wants to be the music service agents choose, and it already integrates with ChatGPT, Claude and Me…
Helion, a fusion startup, announced a three-year, $175 million award from the U.S. Department of Commerce under the CHIPS Act. The money will fund R&D and manufacturing of advanced semiconductors and power electronics for its fusion power plants. Helion also disclosed a new $50 million private investment from an undisclosed investor, brin…
