/
ttps_attack:T1190 × victim_sectors:logistics × limpar

Resultados

5 casos · pág. 1/1

securelist.com · high

Kaspersky maps warehouse attack paths: radio, scanner and printer entry points, and WMS compromise

Kaspersky Security Services published a threat-model paper on how attackers can compromise modern logistics warehouses. It follows an order through eight fulfillment stages: unloading, receiving, putaway, storage, picking, sorting, packing and shipment. The paper identifies the warehouse management system (WMS) as the highest-value target…

gbhackers.com · high

Chinese-speaking operator orchestrates ARTEX with Claude Code, Codex, DeepSeek, GLM and Grok to automate attacks worldwide

A Chinese-speaking threat operator combined the agentic penetration-testing framework ARTEX with Claude Code, Codex and configurations requesting DeepSeek, GLM and Grok models to coordinate attacks on organizations worldwide. Recovered prompts dated August 4 to October 4, 2026 referenced targets in financial services, cryptocurrency, reta…

recordedfuture.com · high

Surge in cyberattacks on Japan: 48% rise in Q3 2026, mass data breaches and 'state of emergency in cyberspace' declared

Insikt Group (Recorded Future) observed a 48% rise in reported cyberattacks on Japanese organizations between Q2 and Q3 2026, from 621 to 918 incidents. Masaaki Taira, head of Japan's NCSH, declared a "state of emergency in cyberspace". Victims span retail, rail, logistics, media, education and software. Incidents involved ransomware, sto…

theregister.com · · 4 fontes · 4 atualizações critical

Ransomware groups Qilin, INC and Settra exploit PAN-OS GlobalProtect auth bypass CVE-2026-0257, pivoting to vCenter/ESXi

Palo Alto Networks Unit 42 reported on October 19, 2026 that ransomware operators are still actively exploiting CVE-2026-0257 (CVSS 7.8), an authentication bypass in the GlobalProtect portal and gateway of PAN-OS. The flaw lets attackers bypass MFA and open unauthorized VPN sessions. Unit 42 attributes exploitation attempts to Spikey Scor…

cisa.gov · high

CISA and FBI #StopRansomware advisory on Gunra, a Conti-derived RaaS exploiting Fortinet and VPN flaws for double extortion

The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…