/
ttps_attack:T1204 × criticity:high × limpar

Resultados

3 casos · pág. 1/1

infosecurity-magazine.com · high

Microsoft October 2026 Patch Tuesday fixes record 1,411 CVEs, including one exploited Windows Shell zero-day

Microsoft released fixes for a record 1,411 CVEs in its October 2026 Patch Tuesday on October 13, more than the roughly 1,100 issued in all of 2025 and above the records set in July and September. The surge is attributed to Microsoft's use of AI-driven vulnerability discovery, including its multi-model agentic scanning harness (MDASH). Th…

feeds.fortinet.com · high

Ousaban banking trojan campaign targets Iberian Peninsula via invoice phishing with geofencing and daily-rotating C2 domains

FortiGuard Labs reports an ongoing Ousaban campaign targeting the Iberian Peninsula. The actor keeps refining its delivery chain and uses geofencing and environmental checks to restrict access to the malware to the intended victims. Ousaban resolves its C2 IP through daily-changing domains and runs a traditional C2 setup as a decoy. Its l…

safedep.io · high

42 Malicious RubyGems Run Install-Time Reverse Shell and Downloader Targeting Crypto Developers

On October 5, 2026, the RubyGems account reqthrottle3474 published 42 malicious gems within about an hour. Most are named for cryptocurrency developer tooling (e.g. eth-keystore-utils, bip39-wordlist-utils, btc-wallet-tools), and the last 16 typosquat real gems (bitcion, etheremu.rb, kecack, solaan-ruby). The code runs during gem install …