175 casos · pág. 8/9
Munich's chief digital officer, Dr. Laura Dornheim, said at Open Source Summit Europe in Prague that the city is returning to open-source software, but only for infrastructure and not for desktops. The city is replacing VMware with Proxmox, Jira and Confluence with OpenProject and XWiki, and adopting PostgreSQL as an alternative to Oracle…
Elastic Security Labs is tracking REF8801, a campaign in which a fake Web3 venture capital accelerator, Apex Accelerator (Apex Foundation), targets cryptocurrency startups and founders with malicious npm packages. The packages, @apexacc/cli and @apexacc/audit, pose as an AI advisor and an MCP-based security scanner, with offers of free Cl…
SafeDep research shows that Cursor's Import VS Code Configuration step copies only the publisher.extensionname of each installed extension and drops the version. Cursor then installs whatever version Open VSX (run by the Eclipse Foundation) calls latest, through its proxy marketplace.cursorapi.com. In SafeDep's test, three extensions pinn…
SafeDep reports that the npm package imgdecode (versions 1.0.0-1.0.3, publisher malfexteste8) is part of the MALFEX campaign, which targets Windows developers. After npm removed earlier JavaScript loaders, the operator moved the loader logic into a compiled Node.js native addon (a Windows DLL). On require('imgdecode') from an interactive …
SentinelOne analysis argues that bring your own vulnerable driver (BYOVD) succeeds because of a signing-trust gap rather than an incomplete driver list. The Windows kernel loads drivers signed with expired or revoked certificates, and a 2026 intrusion reported by Help Net Security used a decade-old forensic driver whose certificate had lo…
Microsoft released updates for at least 974 vulnerabilities in Windows and other software, its largest Patch Tuesday ever. The previous record was 570 fixes in July. The 2026 total now exceeds 2,600, more than double the 2020 record year (1,245), with three months still to go. Microsoft and other large vendors, including Adobe, Cisco, Goo…
Huntress researchers detailed an SEO-poisoning campaign on 13 October that harvests SSL VPN credentials through a lookalike WatchGuard download page, watchguard-vpn.net, and then delivers the legitimate, validly signed Mobile VPN with SSL installer. Earlier waves used trojanised installers, but this iteration contains no malware, so endpo…
CymruSec 2026, billed as Wales' leading cross-sector cyber security event, takes place on Thursday 22 October at Cardiff City Stadium. Final places remain for delegates. The agenda covers the evolving threat landscape, AI-driven cybercrime, identity security, agentic threat hunting and organisational resilience. Speakers come from industr…
Kaspersky's analysis of Operation FlashHole describes a Lazarus Group (North Korea-linked) cyberespionage campaign against South Korean organizations. It follows Operation SyncHole, which abused the related Cross EX product and hit at least six organizations (gbhackers.com), and is placed within the broader Cascade Hole activity. The earl…
A Chinese-speaking threat operator combined the agentic penetration-testing framework ARTEX with Claude Code, Codex and configurations requesting DeepSeek, GLM and Grok models to coordinate attacks on organizations worldwide. Recovered prompts dated August 4 to October 4, 2026 referenced targets in financial services, cryptocurrency, reta…
Flashpoint joined the UK National Crime Agency (NCA), the DOJ, FBI, U.S. Secret Service, Homeland Security Investigations and private-sector partners in "Joint Disruption Week", held in London the week beginning October 6, 2026. The operation targeted West African scam networks running cryptocurrency investment scams, impersonation scheme…
Huntress analyzed an active credential-phishing campaign in which the lookalike domain watchguard-vpn.net harvests WatchGuard SSL VPN credentials. On October 7, 2026, an administrator at a managed service provider searched Bing for "watchguard vpn sll download" and clicked through to the fake page, which Huntress classifies as SEO poisoni…
Unit 42 attributes with high confidence to an Iranian state-aligned actor, tracked as CL-STA-1178, a campaign called Blinder Tunnel. In March 2026 it targeted an individual in Iraq's critical infrastructure sector, after infrastructure staging that began as early as November 2025. The actor impersonated the Dubai Airports IT department an…
The second CymruSec cross-sector cybersecurity conference takes place on 22 October 2026 at Cardiff City Stadium in Wales. It is a free-to-attend event focused on shared learning, emerging threats, new research, changing adversarial tactics and practical ways to improve resilience and response. Speakers come from organisations including M…
The organizers of DIGIT Expo 2026 released a partial agenda for two stages of Scotland's largest enterprise technology event, to be held on 19 November at the Edinburgh International Conference Centre (EICC). Speakers include representatives from Microsoft, Multiverse, IBM, Skyscanner, Adobe, FanDuel and Wayve. Stage 1 centres on practica…
Aikido Security published a vendor comparison of ten email security platforms for 2026. It ranks its own workforce platform, Noon Security, first, followed by Proofpoint, Mimecast, Abnormal AI, Microsoft Defender for Office 365, Check Point, IRONSCALES, Barracuda, Sublime Security and KnowBe4 Defend. The article describes no specific inci…
This is a business and finance item with no cyber threat content. Blackstone executive Jas Khaira, who leads the firm's San Francisco AI hub Blackstone N1 (BXN1), said at TechCrunch Disrupt that concerns over AI infrastructure debt are overblown. Rising interest rates, wider credit spreads and the roughly $50 billion in CoreWeave debt hav…
This Aikido Security blog post ranks eight alternatives to Mimecast and puts its own workforce security platform, Noon Security, first. It is vendor marketing, not incident reporting. The article argues that gateway-centric email security struggles with hijacked but legitimate vendor accounts, internal mail that never crosses the gateway,…
This vendor blog from Aikido Security compares nine phishing simulation tools for 2026 and ranks its own early-access platform Noon first. The others are KnowBe4, Hoxhunt, Adaptive Security, Keepnet, Cofense, IRONSCALES, Microsoft Defender for Office 365 Attack Simulation Training and Gophish. It argues that email-only programs miss multi…
ConnectWise suspended Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management after unknown actors gained unauthorized access to its application identities and used them to sign in to customers' Microsoft 365 tenants. ConnectWise says it identified the incident on October 14, 2026 (thehackernews.com) and began mitigations on O…
