/
source_confidence:news_report × limpar

Resultados

528 casos · pág. 5/27

securityweek.com · high

Splunk and SolarWinds patch critical and high-severity flaws in Splunk Enterprise, Splunk SOAR, Observability and Patch Manager

Splunk and SolarWinds released security updates this week for vulnerabilities that allow code execution, privilege escalation, denial-of-service (DoS) and information disclosure. The article does not report exploitation in the wild. Splunk's updates cover Splunk Enterprise and Splunk SOAR, and SolarWinds fixed flaws in Observability and P…

infosecurity-magazine.com · low

SANS survey: 93% run cloud production workloads, but only 40% rate security strategy advanced; misconfiguration causes 45% of critical incidents

The 2026 SANS Cloud Security Survey Insights report (400 IT and security professionals) finds a persistent cloud security maturity gap. 93% of organizations run production workloads in the cloud and 65% use more than one provider. Only 40% rate their cloud security strategy as advanced or optimized, even though 73% have a dedicated cloud …

gbhackers.com · high

Chinese-speaking operator orchestrates ARTEX with Claude Code, Codex, DeepSeek, GLM and Grok to automate attacks worldwide

A Chinese-speaking threat operator combined the agentic penetration-testing framework ARTEX with Claude Code, Codex and configurations requesting DeepSeek, GLM and Grok models to coordinate attacks on organizations worldwide. Recovered prompts dated August 4 to October 4, 2026 referenced targets in financial services, cryptocurrency, reta…

gbhackers.com · · 2 fontes · 2 atualizações high

GMO Internet's Onamae.com Desktop Cloud breached: malware planted on customer VPS servers, up to 26,739 potentially affected, all plans suspended

Attackers gained unauthorized access to the infrastructure of Onamae.com Desktop Cloud, a VPS service run by GMO Internet in Japan, and installed "unauthorized programs" in some customers' server environments. GMO confirmed the intrusion on October 20, 2026 (bleepingcomputer.com, gbhackers.com). It began rolling shutdowns of all Desktop C…

olhardigital.com.br · low

Quishing in Brazil: Fraudsters Swap Payment QR Codes on Websites, Stickers and Printed Boletos to Divert Funds

Brazilian outlet Olhar Digital describes a quishing fraud pattern in which criminals create or tamper with payment QR Codes so that victims' money goes to accounts the fraudsters control. The scheme appears in online shopping, in physical venues such as bars, restaurants, street markets and car parks, and in printed boletos. The Federação…

techcrunch.com · low

Blackstone's Jas Khaira Calls AI-Buildout Debt Fears Overblown Amid CoreWeave Selloff and Firmus IPO Cancellation

This is a business and finance item with no cyber threat content. Blackstone executive Jas Khaira, who leads the firm's San Francisco AI hub Blackstone N1 (BXN1), said at TechCrunch Disrupt that concerns over AI infrastructure debt are overblown. Rising interest rates, wider credit spreads and the roughly $50 billion in CoreWeave debt hav…

darkreading.com · medium

TiDB breach highlights cloud providers holding customer data unknowingly

A TiDB breach is being used to illustrate flawed assumptions about cloud security. The article argues that cloud providers may be storing sensitive customer data without either the provider or the customer knowing it. When such a provider is breached, that hidden data is exposed. The excerpt gives no details on the breach itself, such as …

securityaffairs.com · medium

Russian satellite Kosmos 2612 closes to within meters of ICEYE-X36, a commercial radar satellite used by Ukraine

Russian satellite Kosmos 2612 carried out rendezvous and proximity operations against ICEYE-X36, a commercial synthetic-aperture radar (SAR) satellite owned by ICEYE's US subsidiary. The satellite may support Ukrainian military imagery. Per LeoLabs, it closed from 350 km to under 5 km on 15-16 October and stayed nearby, making small adjus…

bleepingcomputer.com · · 5 fontes · 5 atualizações medium

Google adds ClickFix clipboard warnings and Gemini scam detection to Chrome Enhanced Protection; Apple blocks email identity resolution in Safari 27

On October 20, 2026, Google announced new Chrome defenses for users of Safe Browsing Enhanced Protection. They include a warning against ClickFix social engineering, in which suspicious commands copied by the user are scrubbed of personal information and sent to Safe Browsing for analysis (thehackernews.com, gbhackers.com, securityweek.co…

olhardigital.com.br · · 2 fontes · 2 atualizações low

Anthropic circulates draft federal AI safety bill letting courts block frontier models posing catastrophic risk (50+ deaths or $1B+ damage)

Anthropic has been shopping a draft federal AI safety bill to Congress, according to Politico, which was cited by TechCrunch (techcrunch.com) on 2026-10-20 and by Olhar Digital (olhardigital.com.br) on 2026-10-21. An Anthropic spokesperson confirmed the text reflects the company's Advanced AI Framework, which it has promoted to federal an…