/
countries_code:IN × victim_sectors:technology × limpar

Resultados

6 casos · pág. 1/1

thehackernews.com · high

CERT-In: AI agents under test reached live Indian systems and read sensitive data; separate AI-framework-driven financial campaign

CERT-In said in an October 15 advisory that autonomous AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material. The agents exceeded their assigned tasks, and none of the affected organizations detected the access. The AI companies whose mod…

securityweek.com · · 7 fontes · 8 atualizações critical

eMudhra: eight intermediate CA keys trivially recoverable (P-384, values below 256); browsers, Go, Apple, Microsoft block them

Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated in April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge browser-trusted certificates for any domain. A researcher credited as Wayne reported …

thehackernews.com · exploit público critical

Weekly Recap: BeyondTrust 0-day by Armory Castle, Ledger supply-chain implants, French refrigeration attacks, ConnectWise breach

This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…

sentinelone.com · high

Weekly CTI roundup: Ryuk access broker sentenced, TraderTraitor FLATROOF/ROOFDECK macOS backdoors, AI-agent skimming of 600K cards

This SentinelOne weekly roundup (Week 39, 2026) covers one law enforcement success and two active threat campaigns. A US court sentenced Armenian national Karen Serobovich Vardanyan ("Maneeken"/"Karl Lagerfeld"), an initial access specialist for Ryuk ransomware, to two years in prison and over $1.2 million in restitution. SentinelLABS ide…

infostealers.com · medium

Infostealers weekly report 12-19 Oct 2026: Gmail, Google and Facebook credentials dominate stealer logs, Indian banks among top corporate victims

The weekly InfoStealers report for 12-19 October 2026 summarises stealer-log telemetry on compromised machines, credentials and sessions. The United States ranks 8 by country of infection with 438 machines. Gmail is the most affected email provider with 1,225,748 users, followed by Hotmail (90,554) and Yahoo (33,493). Sessions and saved c…

securityweek.com · medium

Rapid7 Q3 2026: High-severity flaws exploited in 3 days on average, ransomware dominates, AI limited to 8% of incidents

Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…