20 casos · pág. 1/1
Axios reported on October 22 that major U.S. banks, including Morgan Stanley, Bank of America, JPMorgan, Wells Fargo and Citi, are working to limit risks from third-party AI agents that access customer accounts. Customers typically share their login credentials and authorize AI assistants to act for them, which can conflict with bank poli…
India's Department of Telecommunications (DoT) has set December 31, 2026 as the compliance deadline for messaging platforms to keep accounts bound to the active SIM of the registered mobile number. Restrictions may begin on January 1, 2027. The directive names WhatsApp, Telegram, Signal, Snapchat, Arattai, ShareChat, Josh and JioChat, alt…
The State Bank of India (SBI) has individually notified customers whose data was involved in a recent cybersecurity incident, using email and/or WhatsApp. The bank says account balances and funds are safe. The notice does not state how the breach occurred, which systems were affected, how many customers are involved, or which data types w…
Multiple waves of DDoS attacks disrupted North Korea's internet infrastructure starting 2026-10-20 at about 02:01 UTC, intermittently taking more than 40 official .kp websites offline for roughly 32 hours. Kentik linked the outages to synchronized inbound traffic surges. Affected sites included the Ministry of Foreign Affairs, KCNA, Rodon…
Unit 42 reports that a threat actor using the handle BUGSTER set up DeepSeek V4 as the reasoning engine of an AI-assisted cybercrime operation against organizations in India, including universities. AI-generated reconnaissance and scripts were used to brute-force a university website. In a separate intrusion, the actor exfiltrated a Mongo…
The Everest ransomware group has listed PwC on its leak site, claiming 590.69GB of stolen data across 108,426 files in 494 directories. The claim, recorded by monitoring services on October 22, 2026, is unverified, and no independent source or PwC statement has confirmed it. The alleged data covers internal HR and learning systems, includ…
Cisco Talos observed roughly 1,400 messages across two callback phishing campaigns that abuse legitimate Dell and Staples order notification pipelines. The attackers inject fraudulent helpline numbers into fields the retailer platforms render in authenticated transactional emails, so the messages pass authentication without spoofed sender…
ScarlettGroup is an emerging data-extortion operation that appeared around September 2026 and gained visibility in October. It runs a Tor-based leak site with public countdown timers to pressure organizations over allegedly stolen data, according to Foresiet research. Its public activity centers on threatened disclosure, not confirmed fil…
A study titled "Watching the Watchers: Privacy Analysis of US Smart TV Automatic Content Recognition" found that Samsung (Tizen) and Vizio (SmartCast) televisions kept sending traffic consistent with automatic content recognition (ACR) after researchers disabled the feature. The researchers ran 5,943 automated experiments on 12 TVs from 1…
GoDaddy revoked 404,607 SSL/TLS certificates effective October 21, 2026, after finding that some subscriber certificates were issued outside the profiles defined in its Certification Practice Statement (CPS) and Certificate Policy (CP). The incident is tracked in Mozilla's CA Certificate Compliance program as Bug 2082703, which remains op…
Apache disclosed eight vulnerabilities in Apache Tomcat, three rated Important and five rated Low. They cover authentication bypass, cross-user data exposure, insecure socket access and cryptographic configuration failures. Fixes are in Tomcat 11.0.27, 10.1.61 and 9.0.123, depending on the branch. Exposure depends on the component and con…
Rust 1.100, scheduled for November 12, 2026, will stabilize Cargo dependency cooldowns. Developers can reject newly published crate versions until they reach a configurable minimum age. The aim is to give researchers, maintainers and registries time to detect malicious releases before automated updates spread them across development envir…
Scammers abused a legitimate spend-management platform as part of a fraud operation. They used its notification system to send phishing messages and its open-banking account linking to validate stolen banking credentials. Group-IB documented the activity in a client environment after the platform reported suspicious payment notifications …
ThreatBook announced RedAgents on October 16, 2026. It is a SaaS platform that runs several AI penetration testing agents in parallel against authorized targets and shows the findings in one interface. The platform combines Artex Pro, Cyber(YanJi), Yanxun and CyberStrikeAI Enterprise Edition. ThreatBook says that combining agents improves…
Microsoft has warned that AI agents with access to enterprise systems can be manipulated through prompt injection, compromised inputs or shifts in task context. Agents do not need malicious intent to cause harm: their ability to read corporate data, invoke tools, approve transactions and talk to other agents widens exposure once untrusted…
Federal investigators examining ShinyHunters have uncovered potential links between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity report published on October 19. An executive at an unnamed U.S. consulting firm (reportedly 1,000+ employees) allegedly helped operate the group's extort…
OpenCode disclosed on X on October 17 a security breach affecting 1.4% of its Console users, which it attributes to a "large-scale distillation attack". The affected accounts belong to users who had connected external providers. The company emailed affected users the following morning and says anyone who did not receive a notice was not i…
Docking stations are easy to leave unpatched. A Dell support article (last modified May 22, 2026) says that with "Enable External USB Port" off and Type-C dock LAN on, the HD22Q, WD19 and WD22TB4 docks cannot be updated by Dell's Firmware Utility. Separately, the tools that update docks have had local vulnerabilities, including CVE-2023-4…
NIST, the National Security Agency and CISA released voluntary guidance on October 16, 2026 warning that advanced AI agents may exploit security flaws, break out of assigned limits and leave persistent access behind. The document sets out ten practices across preparation, detection, response, recovery and reporting. It targets organizatio…
Varonis Threat Labs disclosed a privilege-escalation chain in Snowflake Postgres that turned a limited, non-superuser role (snowflakeadmin, holding CREATEROLE) into operating-system command execution as the postgres account. The chain abused built-in PostgreSQL behaviors, even though Snowflake had blocked the usual SQL-to-OS routes. Varon…
