/
countries_code:US × criticity:critical × victim_sectors:telecommunications × limpar

Resultados

3 casos · pág. 1/1

olhardigital.com.br · critical

Critical unauthenticated PHP flaws force Anatel and Brazilian federal courts to take SEI and other systems offline

Two critical PHP vulnerabilities, reportedly allowing unauthenticated attackers to take control of servers, led Anatel and several Brazilian federal courts (TRF1, TRF4, TRF6) to suspend external access to systems including the Sistema Eletrônico de Informações (SEI). The Brazilian CISC issued an alert on 21 October 2026. GSI instructed fe…

krebsonsecurity.com · critical

ShinyHunters Suspect Arrested in Netherlands as Group Mass-Exploits Oracle PeopleSoft CVE-2026-35273 and Breaches FBI Jobs Site

Dutch authorities arrested a 24-year-old, reportedly Pepijn van der Stap (alias "Umbreon"), around Sept. 16, 2026 on suspicion of aiding data thefts and extortions by ShinyHunters. Van der Stap was previously convicted in 2023 for data theft and extortion. Days after the arrest, remaining ShinyHunters members escalated, breaching the FBI …

infosecurity-magazine.com · · 10 fontes · 12 atualizações critical

ConnectWise Cloud Backup (SkyKick) app credentials abused in Microsoft 365 supply-chain attack; ~1,000 tenants probed, services suspended

ConnectWise suspended Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management after unknown actors gained unauthorized access to its application identities and used them to sign in to customers' Microsoft 365 tenants. ConnectWise says it identified the incident on October 14, 2026 (thehackernews.com) and began mitigations on O…