Citrix NetsCaler ADC e Gateway atingidos por ataques em andamento explorando o RCE de 0 dias

Por
Citrix NetScaler ADC and Gateway Hit by Ongoing Attacks Exploiting 0-Day RCE

O Cloud Software Group emitiu um aviso de Boletim de Segurança de Emergência de exploração ativa direcionada a três vulnerabilidades críticas em NetsCaler ADC e produtos Gateway NetsCaler. As vulnerabilidades, rastreadas ascve-2025-7775, CVE-2025-7776 e CVE-2025-8424, apresentam riscos de segurança graves, incluindo execução de código remoto e capacidades de negação de serviço. Exploração ativa confirmada A … Ler mais

Google to verify all Android devs to protect users from malware

Por
Picus Blue Report 2025

Google is introducing a new defense for Android called‘Developer Verification’ toblockmalware installations from sideloaded apps sourced from outside the official Google Playapp store. For apps on Google Play, there was already a requirement for publishers to provide a D-U-N-S (Data Universal Numbering System) number, introduced on August 31, 2023. Google says this has had a … Ler mais

Google to verify all Android devs to block malware on Google Play

Por
Picus Blue Report 2025

Google is introducing a new defense for Android called‘Developer Verification’ toblockmalware installations from sideloaded apps sourced from outside the official Google Playapp store. For apps on Google Play, there was already a requirement for publishers to provide a D-U-N-S (Data Universal Numbering System) number, introduced on August 31, 2023. Google says this has had a … Ler mais

A nova campanha Zipline tem como alvo empresas críticas de manufatura com malware de mixhell na memória

Por
New ZipLine Campaign Targets Critical Manufacturing Firms with In-Memory MixShell Malware

A Check Point Research descobriu uma operação de phishing altamente persistente apelidada de Zipline, que reverte os vetores de ataque tradicionais, explorando os formulários da Web “Entre em contato conosco” das vítimas para iniciar comunicações comerciais aparentemente legítimas. Direcionando principalmente empresas de manufatura baseadas nos EUA em setores críticos da cadeia de suprimentos, a campanha … Ler mais

Citrix fixes critical NetScaler RCE flaw exploited in zero-day attacks

Por
Picus Blue Report 2025

Citrix fixed three NetScaler ADC and NetScaler Gatewayflaws today, including a critical remote code execution flaw tracked as CVE-2025-7775 that was actively exploited in attacks as a zero-day vulnerability. The CVE-2025-7775 flaw is a memory overflow bug that can lead tounauthenticated, remote code execution on vulnerable devices. In an advisory released today, Citrix states that … Ler mais

Silk Typhoon hackers hijack network captive portals in diplomat attacks

Por
Picus Blue Report 2025

State-sponsored hackers linked to the Silk Typhoonactivity cluster targeted diplomats by hijacking web traffic to redirect to a malware-serving website. The hackers used anadvanced adversary-in-the-middle (AitM) technique to hijack the captive portal of the network and send the target to the first-stage malware. GoogleThreat Intelligence Group (GTIG) tracks the threat actor as UNC6384 and, based … Ler mais

Apt36 tem como alvo o chefe indiano Linux usando arquivos de atalho .Desktop armas

Por
GPT

Os pesquisadores revelaram o OneFlip, um novo ataque de backdoor de tempo de inferência que compromete as redes neurais profundas de precisão completa (DNNs), lançando apenas um pouco nos pesos do modelo, marcando uma escalada significativa na praticidade de ataques baseados em hardware contra Sistemas de IA. Diferentemente dos métodos tradicionais de backdoor que requerem … Ler mais

Farmers Insurance discloses a data breach impacting 1.1M customers

Por
Farmers Insurance discloses a data breach impacting 1.1M customers

Farmers Insurance discloses a data breach impacting 1.1M customers Farmers Insurance suffered a breach tied to Salesforce attacks, exposing data of 1.1M customers across its nationwide insurance network. Farmers Insurance disclosed a data breach affecting 1,071,172 customers, linked to the recent wave of Salesforce attacks, as per Bleeping Computer. The company is an American insurer … Ler mais

Os atores de ameaças aproveitam os agentes da IA ​​para conduzir ataques de engenharia social

Por
GPT

As paisagens de segurança cibernética estão passando por uma mudança de paradigma, à medida que os atores de ameaças implantam cada vez mais sistemas de IA agênticos para orquestrar ataques sofisticados de engenharia social. Ao contrário do generativo reativo Modelos de IA Isso apenas produz conteúdo como DeepFakes ou e-mails de phishing, a IA Agentic … Ler mais

Citrix fixed three NetScaler flaws, one of them actively exploited in the wild

Por
Dutch NCSC: Citrix NetScaler zero-day breaches critical orgs

Citrix fixed three NetScaler flaws, one of them actively exploited in the wild Citrix addressed three vulnerabilities in NetScaler ADC and NetScaler Gateway, including one that has been actively exploited in the wild. Citrix addressedthree security flaws (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424) in NetScaler ADC and NetScaler Gateway, including one (CVE-2025-7775) that it said has been actively … Ler mais