Vertech News

> Vertech Solucoes

Need AI automation for your business?

We build custom AI pipelines, chatbots, and automation systems. From concept to production — the same tech behind this site.

Talk to Vertech

> Vertech Solucoes

Need AI automation for your business?

We build custom AI pipelines, chatbots, and automation systems. From concept to production — the same tech behind this site.

Talk to Vertech

Cybersecurity

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Critical BlockStrap flaw lets hackers run code on Magento servers

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Targeted ads installed Candiru spyware in zero-click attacks

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

OpenAI Saudi national bugging case shows threat to U.S. leadership in AI: DNI Clayton

NordVPN

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

Elorian’s first AI model wants to reason with images, not just about them

A week with RTX Spark: everything we’ve learned using Nvidia’s new laptops

OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract

Employees using personal ChatGPT at work? Here's what IT admins need to do

Burger King Japan data breach exposes 11 million customer records

1Password

The Surface Laptop Ultra delivers on most of Microsoft's promises

AI Decision Models and Their Impact on AI SOC Platforms

Googlebook review: Android on a laptop is still Android

Microsoft: October Windows update may break Smart App Control

BAE Systems cyberattack disrupts US federal court operations

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

Proton Mail

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

BeyondTrust patches zero-day exploited in attacks since August

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

Targeted ads delivered 0-click exploits to install mercenary malware

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

NordVPN

Android gets AI defenses against messaging scams, fake calls

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

Fake Arch Linux packages push malware with root privileges

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

1Password

How Windows is being optimized for Nvidia’s RTX Spark laptops

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

Is AI pentesting as good as a human pentester?

Microsoft: Windows Server 2022 reached end of mainstream support

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Proton Mail

Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules

Police arrests 95 suspects in international CSAM crackdown action

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Why AI Confidence Is Not Validation

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

NordVPN

Microsoft fixes bug causing Windows black screens, Explorer crashes

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

1Password

Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages

U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud

U.K. Sanctions Cryptomus for RU Money Laundering

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team

Proton Mail

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

NordVPN

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

Microsoft Patches More Than 1,400 Security Flaws

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

1Password

Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls