15 casos · pág. 1/1
Citizen Lab, working with the SHARE Foundation, confirmed with high confidence that the iPhone of Vladan Đokić, Rector of the University of Belgrade and a prominent supporter of the Serbian student movement, was infected with NSO Group's Pegasus spyware in 2026. The infection used a zero-click exploit, so the victim took no action. The fi…
Nikkei Inc., the Japanese media group that owns The Nikkei and the Financial Times, disclosed a breach of a cloud service used for system development. On October 7, attackers used previously stolen credentials to gain unauthorized access. As of October 16, about 1.83 million items of personal information had leaked. The company reported t…
A disruption in Google Cloud's europe-west2 region in London took several Google Cloud services offline on Tuesday. Digital bank Revolut reported a widespread outage at about the same time, including card payments and ATM withdrawals. A person familiar with the matter told Reuters the two events were connected. ING Germany also reported o…
Germany's Alternative für Deutschland (AfD) confirmed on 19 October 2026 that a hosting provider used by the party was hacked in September and that mailboxes were copied. The anonymous site hexane.cc went online claiming to index 421,179 internal party emails. It does not publish the emails. It shows AI-generated summaries sorted into cat…
Microsoft published a blog post arguing that organizations should treat AI agents as a present insider threat rather than a future risk. Agents with access to critical systems can fail, be manipulated or be compromised, and their behavior can drift mid-run through prompt injection in external documents or untrusted data. Microsoft's answe…
The Security Affairs Malware Newsletter Round 119 is a weekly digest of malware research published by Pierluigi Paganini. It lists reports on IronChain ransomware, the evolution of XWorm from infostealer to surveillance platform, and the Hirudo banking malware spread through fake updates and patched banking apps. It also covers PEERSTITCH…
Darktrace researchers documented a new campaign distributing CikaBika Bot, a Rust-based remote access trojan controlled entirely through Discord. The infection chain starts with a disk image named PropositionProjet.img, which contains a French-language decoy PDF and a Windows shortcut disguised as a Word document. A Nim loader extracts th…
The fourth weekly Security Affairs AI-cybersecurity newsletter, by Pierluigi Paganini, is a curated list of headlines on the intersection of AI and security. It contains no original analysis or technical detail. Items include CyberXero, described as an AI-augmented initial access broker targeting Ukrainian critical infrastructure, and a C…
EG Secure Solutions warns that CVE-2026-106931, an OS command injection flaw in the statistics function of SiteGuard Server Edition, a Japanese host-based WAF, is being exploited in the wild. Successful exploitation lets an attacker run commands as root or SYSTEM on the server hosting the product. The flaw is rated CVSS 4.0 8.5 and CVSS 3…
Researcher Quentin Kaiser presented at Hexacon a vulnerability in Broadcom's proprietary 802.11 implementation, present in its SDK since at least 2010, that gives an attacker within Wi-Fi range unauthenticated remote code execution on affected routers without the network key or WPS enrollment. An incomplete patch was silently released in …
Cybersecurity firm Calif published a full exploit and write-up for a local privilege escalation to root on OpenBSD 7.9, chaining two kernel flaws, one of which is a 37-year-old integer overflow inherited from the original BSD sources. The exploit bypasses KARL address randomization and SMAP/SMEP protections without requiring any informati…
ConnectWise suspended its Cloud Backup (formerly SkyKick) service and took SaaS Security and Cloud Management offline after unknown attackers obtained unauthorized access to seven of its application identities. The company detected the incident on October 14, disabled the compromised identities on October 17, and is still investigating ho…
The UK Electoral Commission is developing an AI-powered system to alert candidates and parties to significant deepfakes within three hours of first posting. Chief executive Vijay Rangarajan announced the plan at the Conservative Party conference and cited a deepfake of Irish presidential candidate Catherine Connolly during Ireland's 2025 …
Attackers began exploiting Plex2Shell, a chain of four Plex Media Server vulnerabilities, within about a day of researcher Zach Main publishing technical details and PoC code on October 16, 2026. A researcher running an internet-facing honeypot observed the first in-the-wild exploitation on October 17. The attackers deployed an XMRig-base…
Meta will update its commercial terms on October 30, 2026, authorizing the company or anyone acting on its behalf to scrape content from websites associated with business customers and use it to train AI models and improve its products. "Business customer" is defined broadly: it covers advertisers, sellers, app developers, Page and Group …
