517 casos · pág. 3/26
Microsoft released PowerToys 0.102 (bleepingcomputer.com, 2026-10-21), an update to its open-source Windows utility pack. It adds two mouse utilities, Mouse Button Lock and CursorHide, plus new command-line tools and Command Palette improvements. Both sources describe this as product news with no vulnerability, exploitation or threat acti…
Tesla said on its Q3 earnings call that it will begin selling the Cybercab, a two-seat autonomous vehicle with no steering wheel or traditional controls, by the end of 2026 (techcrunch.com). Initial production goes to Tesla's own robotaxi fleet, and external sales, which a later report describes as sales to fleet operators, will start sma…
This SecurityWeek profile covers Corey Thuen, founder and CEO of Gravwell, a security data analytics firm. It describes his hacker mindset, which he calls 'the evil bit': an adversarial streak he looks for when hiring offensive researchers. The article traces his career from the Idaho National Laboratory (INL) to Southfork Security, Digit…
Microsoft says Exchange Online administrators can temporarily re-enable the retired Exchange Web Services (EWS) API to restore apps that stopped working after the default block began on October 1, 2026. EWS is used by Outlook desktop add-ins, older Outlook for Windows versions, Apple Mail/Calendar on macOS and other apps. When EWS is disa…
INTERPOL announced the results of Operation Serengeti III on 22 October 2026. The coordinated action ran from June 29 to August 31, 2026 and targeted business email compromise (BEC), ransomware and online scams. It led to 1,462 arrests, the disruption of 10,909 malicious networks and the recovery of more than $105 million (bleepingcompute…
ESET reports that Russia-linked actors used the decentralized Yggdrasil mesh network to hide command-and-control traffic during an attack on a Ukrainian grain logistics company in July 2025. ESET says this is the first documented use of the technology by a state-linked group. The intrusion began with a phishing email sent in a campaign ag…
State attorneys general share HIPAA enforcement with the HHS Office for Civil Rights (OCR) under authority granted by the HITECH Act. The first action came in 2010, when the Connecticut AG settled with Health Net for $250,000. Enforcement peaked in 2023 with 16 actions, including a $49.5 million penalty against Blackbaud over a 5.5 millio…
Researchers at Semperis reported on October 22 that the Iranian state-linked group Prince of Persia, active for about two decades, is hosting command-and-control (C2) infrastructure with a US hosting company. According to Semperis, this is the first time in at least 12 years that an Iranian threat group has been identified hosting its act…
The European Commission opened formal proceedings on 2026-10-21 under the Digital Services Act (DSA) against Booking.com, a very large online platform with more than 45 million EU users (theregister.com, olhardigital.com.br, infosecurity-magazine.com). The probe examines whether the company does enough to stop fraudsters from using the pl…
Anthropic has launched Claude Duet, an agent app for professionals and small businesses that automates and manages tasks. It competes with Meta Muse, OpenAI Dots, Hark, Instinct, Grok Bot and Fo. Duet runs on the Claude Opus 5.5 model and works in the background in its own virtual machine, returning to the user when it needs approval. It …
Nirva, a startup founded in 2025 by ex-Meta Reality Labs employees Wei Lyu and Jason Chen with Hanying Hu, announced a $25 million pre-Series A round, bringing total funding to $33 million (earlier backers include Lightspeed and South Park Commons). Its first product is a roughly 8 g pendant, also wearable as a bracelet, priced at $249, w…
DeepSeek, the Hangzhou-based Chinese AI lab, has reportedly raised about $15 billion (roughly 100 billion yuan), according to Bloomberg as relayed by TechCrunch. The round came two days after the U.S. ordered federal civilian agencies to remove DeepSeek's AI technology from their systems over security concerns. Potential investors reporte…
Cisco Talos observed roughly 1,400 messages across two callback phishing campaigns that abuse legitimate Dell and Staples order notification pipelines. The attackers inject fraudulent helpline numbers into fields the retailer platforms render in authenticated transactional emails, so the messages pass authentication without spoofed sender…
ScarlettGroup is an emerging data-extortion operation that appeared around September 2026 and gained visibility in October. It runs a Tor-based leak site with public countdown timers to pressure organizations over allegedly stolen data, according to Foresiet research. Its public activity centers on threatened disclosure, not confirmed fil…
Group-IB research describes a widespread campaign by an operator tracked as k0t that targets FortiGate, FortiWeb and Palo Alto GlobalProtect appliances to steal credentials, persist and exfiltrate corporate data. More than 70,000 exposed credentials were identified across network-device records, LDAP dumps and other artifacts. Many FortiG…
Straiker reports that a criminal group it tracks as AiPT-67 (operating as Tr4nsHack Team under the name Hexagon Security Labs Mexico) used a multi-agent system called CARLIY0S to coordinate attacks against more than 400 financial institutions and payment providers in Latin America. The system combined commercial AI models, Anthropic's Cla…
Amsterdam-based industrial cybersecurity firm Indurex has raised €7 million (about $7.84 million) in a round led by Contrarian Ventures, with Axeleo Capital and Curiosity participating. The funding will go to research and development and to commercial expansion in Europe and the Middle East, followed by the United States and Asia-Pacific.…
The Massachusetts Attorney General settled alleged HIPAA and Massachusetts Data Security Law violations with former medical transportation provider Transformative Healthcare, LLC and its subsidiaries Lifeline and Fallon. The settlement also resolves MassHealth upcoding allegations, and the combined allegations carry a $1,000,000 penalty p…
Keeper Security has launched an opt-in Phishing Protection feature in the Keeper Browser Extension (version 18.2.0). It uses a local AI engine to detect look-alike domains, spoofed websites and brand impersonation before users enter credentials. The vendor cites the 2026 Verizon Data Breach Investigations Report, which found credential ab…
A study titled "Watching the Watchers: Privacy Analysis of US Smart TV Automatic Content Recognition" found that Samsung (Tizen) and Vizio (SmartCast) televisions kept sending traffic consistent with automatic content recognition (ACR) after researchers disabled the feature. The researchers ran 5,943 automated experiments on 12 TVs from 1…
