11 casos · pág. 1/1
Axios reported on October 22 that major U.S. banks, including Morgan Stanley, Bank of America, JPMorgan, Wells Fargo and Citi, are working to limit risks from third-party AI agents that access customer accounts. Customers typically share their login credentials and authorize AI assistants to act for them, which can conflict with bank poli…
India's Department of Telecommunications (DoT) has set December 31, 2026 as the compliance deadline for messaging platforms to keep accounts bound to the active SIM of the registered mobile number. Restrictions may begin on January 1, 2027. The directive names WhatsApp, Telegram, Signal, Snapchat, Arattai, ShareChat, Josh and JioChat, alt…
The State Bank of India (SBI) has individually notified customers whose data was involved in a recent cybersecurity incident, using email and/or WhatsApp. The bank says account balances and funds are safe. The notice does not state how the breach occurred, which systems were affected, how many customers are involved, or which data types w…
Multiple waves of DDoS attacks disrupted North Korea's internet infrastructure starting 2026-10-20 at about 02:01 UTC, intermittently taking more than 40 official .kp websites offline for roughly 32 hours. Kentik linked the outages to synchronized inbound traffic surges. Affected sites included the Ministry of Foreign Affairs, KCNA, Rodon…
The Everest ransomware group has listed PwC on its leak site, claiming 590.69GB of stolen data across 108,426 files in 494 directories. The claim, recorded by monitoring services on October 22, 2026, is unverified, and no independent source or PwC statement has confirmed it. The alleged data covers internal HR and learning systems, includ…
A study titled "Watching the Watchers: Privacy Analysis of US Smart TV Automatic Content Recognition" found that Samsung (Tizen) and Vizio (SmartCast) televisions kept sending traffic consistent with automatic content recognition (ACR) after researchers disabled the feature. The researchers ran 5,943 automated experiments on 12 TVs from 1…
GoDaddy revoked 404,607 SSL/TLS certificates effective October 21, 2026, after finding that some subscriber certificates were issued outside the profiles defined in its Certification Practice Statement (CPS) and Certificate Policy (CP). The incident is tracked in Mozilla's CA Certificate Compliance program as Bug 2082703, which remains op…
Apache disclosed eight vulnerabilities in Apache Tomcat, three rated Important and five rated Low. They cover authentication bypass, cross-user data exposure, insecure socket access and cryptographic configuration failures. Fixes are in Tomcat 11.0.27, 10.1.61 and 9.0.123, depending on the branch. Exposure depends on the component and con…
Microsoft has warned that AI agents with access to enterprise systems can be manipulated through prompt injection, compromised inputs or shifts in task context. Agents do not need malicious intent to cause harm: their ability to read corporate data, invoke tools, approve transactions and talk to other agents widens exposure once untrusted…
Federal investigators examining ShinyHunters have uncovered potential links between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity report published on October 19. An executive at an unnamed U.S. consulting firm (reportedly 1,000+ employees) allegedly helped operate the group's extort…
OpenCode disclosed on X on October 17 a security breach affecting 1.4% of its Console users, which it attributes to a "large-scale distillation attack". The affected accounts belong to users who had connected external providers. The company emailed affected users the following morning and says anyone who did not receive a notice was not i…
