12 casos · pág. 1/1
Microsoft Security Response Center (MSRC) announced on October 20, 2026 that it is replacing the multiple report quality levels in its bug bounty programs with two assessments: "Complete" and "Not Complete". The rules apply to reports submitted on or after October 20, 2026, 8 AM Pacific Time. Earlier submissions remain under the previous …
Microsoft awarded researcher Sam Chen (Samchen) US$4,000 for reporting CVE-2026-81376, a critical (CVSS 3.1 score 9.6) Workspace Trust security feature bypass in Visual Studio Code versions before 1.136.2. A specially prepared workspace could connect to an attacker-controlled service and bypass Restricted Mode, potentially exposing local …
Microsoft Threat Intelligence reports active exploitation of CVE-2026-73570, a command injection flaw in Zimbra Collaboration Suite that allows unauthenticated, zero-click compromise of internet-facing email servers. Attackers deployed webshells, escalated privileges, harvested authentication secrets and staged mailbox data across organiz…
Lazarus Group, linked to North Korea, ran a cyberespionage campaign dubbed Operation FlashHole against South Korean organizations. The campaign combined spear-phishing, tailored websites, abuse of the financial security application INISAFE CrossWeb EX, and modular malware that ran largely in memory. It follows Operation SyncHole, which ab…
Zscaler ThreatLabz's 2026 Ransomware Report describes ransomware operators using generative AI to sharpen phishing, speed up reconnaissance and pick out the most sensitive corporate data to steal. The report records 896.2 TB exfiltrated by the top 10 ransomware groups between April 2025 and March 2026. The article cites a 275.8% annual in…
Microsoft has warned that AI agents with access to enterprise systems can be manipulated through prompt injection, compromised inputs or shifts in task context. Agents do not need malicious intent to cause harm: their ability to read corporate data, invoke tools, approve transactions and talk to other agents widens exposure once untrusted…
Acronis Threat Research Unit found that the Gentlemen ransomware operation is using the BYOVD (bring your own vulnerable driver) technique with legitimate Lenovo and Safetica kernel drivers to terminate endpoint security software before encrypting files. Two custom dropper samples were recovered from a recent incident. They install the dr…
Docking stations are easy to leave unpatched. A Dell support article (last modified May 22, 2026) says that with "Enable External USB Port" off and Type-C dock LAN on, the HD22Q, WD19 and WD22TB4 docks cannot be updated by Dell's Firmware Utility. Separately, the tools that update docks have had local vulnerabilities, including CVE-2023-4…
A Flare analysis argues that Scattered Spider, LAPSUS$ and ShinyHunters are distinct intrusion clusters within The Com, a decentralized, mostly English-speaking cybercriminal subculture, and not interchangeable names for one group. It describes SP1D3R HUNTERS (also called Scattered LAPSUS$ Hunters, SLH) as a shared brand and coordination …
Symantec reports that the Russia-linked APT28 (aka Swallowtail, Fancy Bear, Forest Blizzard, BlueDelta), which the U.S. government links to the GRU, targeted organizations in two NATO member states. Victims were a naval shipbuilder, a manufacturer of military aircraft engines and a law enforcement agency (thehackernews.com, cyberscoop.com…
Cisco Talos observed roughly 1,400 messages across two callback phishing campaigns that abuse legitimate Dell and Staples order notification pipelines. The attackers inject fraudulent helpline numbers into fields the retailer platforms render in authenticated transactional emails, so the messages pass authentication without spoofed sender…
A Chinese-speaking threat operator combined the agentic penetration-testing framework ARTEX with Claude Code, Codex and configurations requesting DeepSeek, GLM and Grok models to coordinate attacks on organizations worldwide. Recovered prompts dated August 4 to October 4, 2026 referenced targets in financial services, cryptocurrency, reta…
