Novos malware exploram os sistemas herdados da Tasten para atingir idosos indonésios

Por
UAC-0099 Hackers Weaponize HTA Files to Deploy MATCHBOIL Loader Malware

Os atores de ameaças estão alavancando a marca de confiança do Fundo Estadual de Pensões da Indonésia, Pt Dana Tabungan Dan Asuransi Pegawai Negeri (Persero), ou Taspen, para implantar um malicioso Aplicação Android disfarçado de portal oficial. Este trojão bancário e spyware visam pensionistas e funcionários públicos, explorando sistemas herdados e vulnerabilidades de transformação digital … Ler mais

Citrix Patches Three Zero Days as One Sees Active Exploitation

Por
Citrix Patches Three Zero Days as One Sees Active Exploitation

Citrix has released patches for three zero-day vulnerabilities in NetScaler ADC and Gateway, one of which was already being exploited by attackers. The flaws, tracked as CVE-2025-7775, CVE-2025-7776, and CVE-2025-8424, are two memory overflow vulnerabilities and an improper access control on the NetScaler Management Interface. They are all considered critical vulnerabilities, with severity score (CVSS) … Ler mais

We Are Still Unable to Secure LLMs from Malicious Inputs – Schneier on Security

Por

Nice indirect prompt injection attack: Bargury’s attack starts with a poisoned document, which is shared to a potential victim’s Google Drive. (Bargury says a victim could have also uploaded a compromised file to their own account.) It looks like an official document on company meeting policies. But inside the document, Bargury hid a 300-word malicious … Ler mais

A Vulnerability in Apple Products Could Allow for Arbitrary Code Execution

Por

MS-ISAC ADVISORY NUMBER: 2025-075 DATE(S) ISSUED: 08/26/2025 OVERVIEW: A vulnerability has been discovered in Apple products which could allow for arbitrary code execution. Successful exploitation could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, … Ler mais

O Spotify Launces Recurso de Mensagens Diretas em meio a preocupações de segurança

Por
Spotify Launches Direct Messaging Feature Amid Security Concerns

O Spotify, nesta semana, revelou um novo Direct MessagingFeature, permitindo que os usuários compartilhem músicas, podcasts e audiolivros no aplicativo. Enquanto a medida promete recomendações simplificadas e um engajamento mais profundo entre os amigos, também levanta novas considerações de segurança e privacidade. Lançando para usuários gratuitos e premium com 16 anos ou mais em mercados … Ler mais

ENISA to Coordinate €36m EU-Wide Incident Response Scheme

Por
ENISA to Coordinate €36m EU-Wide Incident Response Scheme

The EU’s security agency is being given €36m ($42m) to handle incident response for major cyber-attacks targeting the bloc. ENISA yesterday announced the signing of a “contribution agreement” which will see it operate the EU Cybersecurity Reserve. This virtual pool of incident response services from trusted private sector providers was established by the EU Cyber … Ler mais

New Data Theft Campaign Targets Salesforce via Salesloft App

Por
New Data Theft Campaign Targets Salesforce via Salesloft App

Salesforce customers have again been targeted in a “widespread data theft campaign,” this time via compromised OAuth tokens associated with thethird-party Salesloft Drift application. Salesloft Drift integrates with Salesforce to help sales and marketing teams collaborate on projects. Salesloft issued a security alert on August 20 revealing it had detected a security issue and “proactively … Ler mais

New Phishing Campaign Abuses ConnectWise ScreenConnect to Take Over De

Por
New Phishing Campaign Abuses ConnectWise ScreenConnect to Take Over De

A novel phishing campaign attempts to trick victims into downloading ConnectWise ScreenConnect remote monitoring and management (RMM) software, enabling attackers to take complete control over end-user devices. A report by Abnormal AI found that the legitimate RMM tool is abused by the threat actors to achieve remote system control and facilitate follow-on attacks, including account … Ler mais

Vulnerabilidade do painel de administração do Firewall IPFire permite injeção persistente de JavaScript

Por
IPFire Firewall Admin Panel Vulnerability Enables Persistent JavaScript Injection

Uma vulnerabilidade crítica na interface do firewall baseada na Web do IPFire 2.29 (firewall.cgi) permite que os administradores autenticados injetem código JavaScript persistente, levando a seqüestro de sessão, ações não autorizadas ou arbustos de rede interna. Rastreado como CVE-2025-50975, este script de sítio cruzado armazenado (XSS) As falhas apresentam risco significativo em ambientes em que … Ler mais

Multiple Vulnerabilities in Microsoft Products Could Allow for Remote Code Execution

Por

MS-ISAC ADVISORY NUMBER: 2025-076 DATE(S) ISSUED: 08/22/2025 OVERVIEW: Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user or exploited process. Depending on the … Ler mais