/
ttps_attack:T1190 × latest_source_host:infosecurity-magazine.com × limpar

Resultados

6 casos · pág. 1/1

infosecurity-magazine.com · critical

Cyber-attack on French supermarket refrigeration controllers extends beyond Danfoss to Dixell/Copeland devices

A cyber-attack that began on October 11 against refrigeration controllers in French supermarkets is larger than first reported. It now appears to affect Dixell Electronics (a Copeland brand) temperature regulation devices as well as Danfoss controllers. CERT-FR named Danfoss AK-SC and AK-SM series, Dixell xweb and Copeland xweb as affecte…

infosecurity-magazine.com · medium

Nord Security: 2,894 ransomware attacks in Q3 2026, up 50% YoY, led by rival groups The Gentlemen and Qilin

Nord Security reports 2,894 ransomware attacks between July and September 2026, a 50% increase year over year and an 8.6% rise over Q2 2026. Researchers attribute the rebound to the market stabilizing after law enforcement takedowns of LockBit, BlackCat and RansomHub, which suppressed activity during 2025. The Gentlemen (383 attacks) narr…

infosecurity-magazine.com · high

Check Point discloses LiteLLM flaws CVE-2026-35029 and CVE-2026-59823 enabling gateway takeover and RCE

Check Point researchers disclosed two high-risk vulnerabilities in LiteLLM, an open-source LLM gateway with almost 100,000 downloads a month. The gateway connects enterprise AI applications to providers such as OpenAI, Google and Anthropic. The flaws, CVE-2026-35029 and CVE-2026-59823, could let any user with an account on a vulnerable de…

infosecurity-magazine.com · critical

Storm-0940 uses ARTEX agentic AI framework to compromise ConnectWise Microsoft 365 tenants and target downstream customers

Microsoft assesses that the China-aligned actor Storm-0940 used the agentic AI penetration testing framework ARTEX to compromise the Microsoft 365 tenants of ConnectWise, then pivoted to its downstream customers. The campaign began in September 2026 and targeted hundreds of organizations worldwide across aerospace and defense, energy, fin…

infosecurity-magazine.com · high

Symantec uncovers autonomous AI attack agent hijacking exposed LLM endpoints (LLMjacking) to scan, exploit, steal credentials and mine Monero

Symantec's Threat Hunter Team used an AI honeypot to capture the full instruction set of a malicious autonomous AI agent in summer 2026. The agent is designed to run up to 100,000 malicious actions without human approval: scanning for targets, exploiting vulnerabilities, stealing credentials, deploying cryptocurrency miners and reinfectin…

infosecurity-magazine.com · · 2 fontes · 2 atualizações critical

China-nexus Armory Castle exploited BeyondTrust Remote Support flaw CVE-2026-102764 as zero-day since August 2026

Google warns that Armory Castle, a suspected PRC state-sponsored espionage actor, exploited the critical BeyondTrust Remote Support vulnerability CVE-2026-102764 (CVSS 9.3) in August 2026, well before BeyondTrust disclosed it on October 15. The actor escalated privileges to root and established persistent access on compromised appliances.…