28 casos · pág. 1/2
Axios reported on October 22 that major U.S. banks, including Morgan Stanley, Bank of America, JPMorgan, Wells Fargo and Citi, are working to limit risks from third-party AI agents that access customer accounts. Customers typically share their login credentials and authorize AI assistants to act for them, which can conflict with bank poli…
Hewlett Packard Enterprise (HPE) released security bulletin HPESBNW05162 on October 22, 2026, covering 72 vulnerabilities in Aruba AOS-8 and AOS-10. The most prominent is CVE-2026-79855, a CVSS 9.8 authentication bypass in the SSH daemon that lets a remote, unauthenticated attacker obtain administrative privileges and fully compromise a h…
India's Department of Telecommunications (DoT) has set December 31, 2026 as the compliance deadline for messaging platforms to keep accounts bound to the active SIM of the registered mobile number. Restrictions may begin on January 1, 2027. The directive names WhatsApp, Telegram, Signal, Snapchat, Arattai, ShareChat, Josh and JioChat, alt…
GBHackers published a research-based buyer's guide to 12 malware analysis tools, assessed on analysis depth, interactivity versus automation, intelligence context, privacy posture and pricing model. The guide covers Joe Sandbox, ANY.RUN, VirusTotal, ReversingLabs, Zynap Sandbox, Hatching Triage, Hybrid Analysis / Falcon Sandbox, Palo Alto…
A GBHackers buyer's guide reviews 12 encryption and key management solutions for 2026: Entrust, AWS KMS, Thales CipherTrust, Cryptomathic, HashiCorp Vault, StrongKey, Microsoft Azure Key Vault, Baffle, Fortanix, Google Cloud KMS, IBM and Utimaco. It is a research-based assessment, not lab-tested, covering custody model, estate reach, life…
Kaspersky GReAT identified an APT campaign in early 2026 targeting diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan. The attackers used a UEFI bootkit dubbed BlackX, which closely resembles BlackLotus (advertised on underground forums for $5,000 in October 2022 and confirmed by ESET in March 2023, per gbhackers.com) and bypa…
Straiker reports that a criminal group it tracks as AiPT-67 (operating as Tr4nsHack Team under the name Hexagon Security Labs Mexico) used a multi-agent system called CARLIY0S to coordinate attacks against more than 400 financial institutions and payment providers in Latin America. The system combined commercial AI models, Anthropic's Cla…
A study titled "Watching the Watchers: Privacy Analysis of US Smart TV Automatic Content Recognition" found that Samsung (Tizen) and Vizio (SmartCast) televisions kept sending traffic consistent with automatic content recognition (ACR) after researchers disabled the feature. The researchers ran 5,943 automated experiments on 12 TVs from 1…
Fortinet announced coordinated security hardening updates for FortiOS, FortiManager and FortiAnalyzer, scheduled for October 22, 2026. They address critical and high-severity vulnerabilities. CISO Carl Windsor said the fixes come from frontier AI-assisted security testing, with contributions acknowledged from Anthropic, OpenAI, Google and…
In late August 2026, Sekoia TDR observed an attacker interact with an unauthenticated Flowise honeypot emulating v2.2.8. The attacker enumerated chatflows and stored credentials, created a rogue "System Status" chatflow with a callback to attacker infrastructure (154.217.251.226), and used prompt injection to turn the LLM agent into an of…
GBHackers published a research-based buyer's guide to 12 DevSecOps platforms for 2026. It is product comparison content, not a security incident, and reports no vulnerabilities, threat actors or attacks. The guide groups the market into code-platform natives, developer-security specialists, cloud-native stacks, delivery-pipeline governors…
ThreatFabric has documented Hirudo, an Android banking remote-access trojan that steals credentials and gives operators remote control of the phone. Its distinguishing feature is replacing selected genuine banking apps with modified copies that interfere with security checks from inside the app. Victims first install a lure app (Shopora, …
Kaspersky's analysis of Operation FlashHole describes a Lazarus Group (North Korea-linked) cyberespionage campaign against South Korean organizations. It follows Operation SyncHole, which abused the related Cross EX product and hit at least six organizations (gbhackers.com), and is placed within the broader Cascade Hole activity. The earl…
A Chinese-speaking threat operator combined the agentic penetration-testing framework ARTEX with Claude Code, Codex and configurations requesting DeepSeek, GLM and Grok models to coordinate attacks on organizations worldwide. Recovered prompts dated August 4 to October 4, 2026 referenced targets in financial services, cryptocurrency, reta…
The 2026 Autonomous Agents Threat Report from Arrakis Security, based on 12 weeks of anonymized production telemetry from thousands of AI agents in its customers' environments, finds that 76% of active agents have not run in 60 days, while their credentials still work and their triggers still fire. 44% have not run in 180 days. According …
Check Point Research reports that commercial antidetect browsers, notably Kameleo, AdsPower and MultiLogin, are widely referenced on Russian-language underground forums and marketplaces. They are used for account takeover, payment card fraud (carding), fraudulent loan applications, ad-revenue fraud, bulk creation of fake accounts and coor…
Acronis Threat Research Unit found that the Gentlemen ransomware operation is using the BYOVD (bring your own vulnerable driver) technique with legitimate Lenovo and Safetica kernel drivers to terminate endpoint security software before encrypting files. Two custom dropper samples were recovered from a recent incident. They install the dr…
Apache disclosed eight vulnerabilities in Apache Tomcat, three rated Important and five rated Low. They cover authentication bypass, cross-user data exposure, insecure socket access and cryptographic configuration failures. Fixes are in Tomcat 11.0.27, 10.1.61 and 9.0.123, depending on the branch. Exposure depends on the component and con…
SOCRadar's Threat Research Unit (STRU) found open directories on 45.227.254.43 in late September 2026. They led to six more adversary servers tied to INC Ransom and The Gentlemen affiliates. The servers held 8,257 AI messages across 133 sessions, source code, stolen credentials, victim workspaces and 46 victim-specific INC encryptor build…
Researchers describe WP2Shell, a chain of two WordPress core flaws, CVE-2026-63030 and CVE-2026-60137, that lets unauthenticated attackers progress from public REST API endpoints to remote code execution. It affects default installations with no third-party plugin required. Public exploit code exists and exploitation attempts have been ob…
