/
latest_source_host:olhardigital.com.br × limpar

Resultados

10 casos · pág. 1/1

olhardigital.com.br · high

São Paulo's Smart Sampa surveillance leak exposed credentials and access to 58,000+ cameras for ~11 months

A public repository exposed sensitive data from Smart Sampa, the Prefeitura de São Paulo video surveillance system, for about 11 months, allowing unauthorized access to more than 58,000 cameras. Cameras covered sensitive sites such as daycare centers, schools, hospitals and drug-treatment centers. According to UOL, reporters used the expo…

olhardigital.com.br · high

Chinese-speaking actor uses Cairn AI agents with DeepSeek and Claude Code to breach 100+ company websites for about $50 each

A Chinese-speaking threat actor used AI agents coordinated through the open-source Cairn platform to attempt intrusions against more than 1,200 websites, reportedly compromising sites of over 100 companies, including Deere, SharkNinja and Cummins. Researcher Snorre Fagerland of NorForge found the activity while monitoring internet-exposed…

olhardigital.com.br · medium

Fake WatchGuard download site harvests VPN credentials from MSP admin before serving legitimate signed installer

Huntress researchers identified a fake page impersonating the WatchGuard download portal that harvested VPN server addresses, usernames and passwords before offering the legitimate Mobile VPN with SSL installer. The investigation began after suspicious activity involving an administrator at a managed service provider (MSP), who found the …

olhardigital.com.br · low

Anatel orders carriers to block abusive robocall lines for 15 days from 12 November under Provisional Measure 1.396/2026

From 12 November, Brazilian telecom carriers must block outbound calls for 15 days on lines showing abusive network use, under a determination by Anatel (Agência Nacional de Telecomunicações). The block applies to all numbers tied to the holder's CPF or CNPJ. The rule aims to curb high-volume automated calls that annoy consumers and can d…

olhardigital.com.br · medium

Ticketmaster Brazil confirms customer data exposure via third-party analytics tool, ANPD notified

Ticketmaster confirmed a security incident that exposed personal data of customers in Brazil who bought tickets in 2025. The company notified affected users by email and reported the case to the Brazilian data protection authority (ANPD). According to the company, the incident involved a third-party data analytics tool. The investigation,…

olhardigital.com.br · high

SLIM SPIDER breaches Brazilian financial institution's cloud to steal credentials and stage mass unauthorized Pix transfers

CrowdStrike reports that the cybercriminal group SLIM SPIDER breached a Brazilian financial institution in late March 2026 to obtain credentials and information tied to digital assets. The group did not attack Pix or the Central Bank directly. It targeted the cloud environments that banks and fintechs use. CrowdStrike also recorded a 171%…