❌

Visualização normal

Ontem — 9 de Novembro de 2026Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News
Antes de ontemHackread – Latest Cybersecurity, Tech, Crypto & Hacking News

CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerability

CVE-2026-119977 lets hackers hijack WordPress sites during core updates. CISA confirms exploitation as users are told to patch…

Hackers Tamper With Refrigeration Controls at France’s National Blood Service

Hackers altered refrigeration controls at three French blood service sites, but staff protected plasma supplies and prevented damage to blood products.

Hackers Alter Refrigeration Settings, Forcing European Stores to Discard Food

Hackers changed refrigeration settings at European supermarkets, forcing stores to discard produce, while UK suppliers reported attacks on…

3AM Ransomware Hits 37 UK School Systems in Suspected AI-Assisted Attack

Bitdefender details a 3AM ransomware attack on a UK school estate that encrypted 37 systems, with command timing suggesting possible AI-assisted troubleshooting.

BITTER APT Using Fake Diplomatic Documents to Deliver PapRAT Spyware

FortiGuard Labs links BITTER to cyberespionage attacks on South Asian organizations using malicious Windows shortcuts, PowerShell scripts, and PapRAT malware.

Hackers Pushing Remote Access Tool Through Fake Adobe Acrobat Pages

Fake Adobe Acrobat pages distribute signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs, CloudSEK’s researchers say.

Polymarket Users Lose $2.7 Million in Third-Party Script Hack

Polymarket confirms $2.7 million stolen through the compromised third-party script and pledges $3.9 million in refunds, including compensation for pause losses.

TeamViewer Vulnerability Lets Attackers Run Code on IT Support Staff’s PCs

A vulnerability in TeamViewer could let attackers run code on an IT support technician’s computer when the technician…

💾

Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware

A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to developers’ Windows PCs through NetSupport.

EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft

EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar spoofing.

Scanner Poses as 32 AI Bots to Find Credentials and Private Keys

A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.

Fake US Court Notices Target 100,000+ Businesses With LodaRAT

Fake US court notices target over 100,000 businesses, luring recipients to download LodaRAT malware that steals passwords, records…

CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch

The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its…

Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation

Microsoft releases emergency .NET updates to fix a Brotli memory flaw and Linux privilege escalation, while correcting two incomplete October security patches.

Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs

Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers.

12,976 Refrigeration Controls Found Exposed Online in 99 Countries

Forescout found 12,976 exposed refrigeration services in 99 countries, warning that attackers could alter temperatures and spoil food, medicines and supplies.

eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable

eMudhra will leave the global SSL/TLS certificate market after eight intermediate CA private keys were found easily guessable, prompting browser distrust actions.
❌
❌