WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access…

Operation Master used a GlobalProtect flaw to steal utility data, then fed it into an invoice fraud platform that sent 2.4M+ fake bills in Brazil. Related Posts: ShinyHunters Renews Oracle PeopleSoft Attacks With One-Character WAF Bypass Konni Launches Operation Conflict Compass Against Ukraine Kiteworks Mandates Global Precautionary Server Shutdown The post Operation Master Turns GlobalProtect Breaches Into Brazilian Invoice Fraud appeared first on Daily CyberSecurity.

Brazil's SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.

Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations.

Brazil’s alert system was taken offline after a fake emergency alert reached phones, with officials investigating a suspected cyberattack and security failure.

Emergency alert systems work because people believe them. Every time one of these systems issues a false alert - whether through negligence or a deliberate attack - trust erodes. Read more in my article on the Hot for Security blog.