A vulnerabilidade quic-leak permite que os invasores drenam a memória do servidor e façam DOS

Por
QUIC-LEAK Vulnerability Allows Attackers to Drain Server Memory and Cause DoS

Pesquisadores de segurança da Imperva divulgaram uma vulnerabilidade crítica de exaustão de memória pré-handshake na implementação LSQUIC Quics amplamente usada que permite que os atacantes remotos tragam servidores por meio de ataques de negação de serviço. A falha, designada CVE-2025-54939 e apelidado de “quic-leak”, ignora as proteções padrão do nível de conexão Quic, acionando antes … Ler mais

NIST Unveils Guidelines to Help Spot Face Morphing Attempts

Por
NIST Unveils Guidelines to Help Spot Face Morphing Attempts

The US National Institute of Standards and Technology (NIST) has published new guidelines it claims will help organizations optimize their efforts to detect face morphing software. Face morphing is a type of deepfake technology that enables threat actors to blend the photos of two people into a single image. In doing so, it simplifies identity … Ler mais

A Scattered Spider member gets 10 years in prison

Por
BadCam: Linux-based Lenovo webcam bugs enable BadUSB attacks

A Scattered Spider member gets 10 years in prison A 20-year-old Scattered Spider member gets 10 years in prison and $13M restitution for SIM-swapping crypto thefts. Scattered Spider hacker, Noah Michael Urban (20), was sentenced to 10 years in U.S. prison and ordered to pay $13M restitution for SIM-swapping crypto thefts. “A 20-year-old Palm Coast … Ler mais

Scattered Spider hacker gets sentenced to 10 years in prison

Por
ShinyHunters May Have Teamed Up With Scattered Spider in Salesforce Attack Campaigns

Noah Michael Urban, a key member of the Scattered Spider cybercrime collective, was sentenced to 10 years in prison on Wednesday after pleading guilty to charges of wire fraud and conspiracy in April. He was arrested in January 2024, and in November, the U.S. Justice Department charged Urban (also known as King Bob, Gustavo Fring, … Ler mais

Operador de 22 anos de Botnet ‘Rapper Bot’ cobrado por lançar 3 TBPS DDoS Ataque

Por
22-year-old Operator of ‘Rapper Bot’ Botnet Charged for Launching 3 Tbps DDoS Attack

As autoridades federais acusaram um homem de 22 anos de Oregon de operar uma das mais poderosas botnets de negação de serviço distribuída (DDoS) já descobertas, marcando uma vitória significativa na batalha em andamento contra a infraestrutura cibernética. Ethan Foltz, de Eugene, Oregon, enfrenta acusações federais por supostamente desenvolver e administrar o serviço DDoS-for-the contratante … Ler mais

FBI: Russia-linked group Static Tundra exploit old Cisco flaw for espionage

Por
FBI: Russia-linked group Static Tundra exploit old Cisco flaw for espionage

FBI: Russia-linked group Static Tundra exploit old Cisco flaw for espionage FBI warns FSB-linked group Static Tundra is exploiting a 7-year-old Cisco IOS/IOS XE flaw to gain persistent access for cyber espionage. The FBI warns that Russia-linked threat actor Static Tundra exploits Simple Network Management Protocol (SNMP) and end-of-life networking devices running an unpatched vulnerability … Ler mais

A CISA emite quatro avisos de ICS sobre vulnerabilidades e explorações

Por
CISA Issues Four ICS Advisories on Vulnerabilities and Exploits

A Agência de Segurança de Segurança Cibernética e Infraestrutura (CISA) divulgou quatro avisos críticos de Sistemas de Controle Industrial (ICS) em 19 de agosto de 2025, alertando as organizações sobre as vulnerabilidades de segurança atuais e possíveis explorações que afetam os sistemas críticos de infraestrutura. Esses conselhos fornecem informações essenciais para administradores e profissionais de … Ler mais

Orange Belgium discloses data breach impacting 850,000 customers

Por
Picus Blue Report 2025

Orange Belgium, a subsidiary of telecommunications giant Orange Group, disclosed on Wednesday that attackers who breached its systems in July have stolen the data of approximately 850,000 customers. Orange Belgium provides fixed and mobile connectivity services to over 3 million customers in Belgium and Luxembourg, employs 1,500 staff, and claims to operate the largest 4G/5G … Ler mais

US CERT/CC warns of flaws in Workhorse Software accounting software used by hundreds of municipalities in Wisconsin

Por
US CERT/CC warns of flaws in Workhorse Software accounting software used by hundreds of municipalities in Wisconsin

US CERT/CC warns of flaws in Workhorse Software accounting software used by hundreds of municipalities in Wisconsin CERT/CC disclosed serious data exposure vulnerabilities in Workhorse Software used by hundreds of U.S. cities and towns. CERT Coordination Center (CERT/CC) at Carnegie Mellon University disclosed two serious data exposure flaws in an accounting application developed by Workhorse … Ler mais

A Apple confirma crítica de 0 dias sob ataque ativo-Atualização imediata solicitada

Por
Apple Confirms Critical 0-Day Under Active Attack – Immediate Update Urged

A Apple emitiu uma atualização de segurança de emergência para o iOS 18.6.2 e o iPados 18.6.2 para abordar uma vulnerabilidade crítica de dia zero que a empresa confirma que está sendo explorada ativamente em ataques sofisticados contra indivíduos-alvo. A atualização, lançado Em 20 de agosto de 2025, remende uma falha severa no componente Imageio … Ler mais