Proteger a rede da empresa deixou de ser um tema restrito ao time de TI. Basta uma brecha pequena para abrir caminho para invasões, vazamento de dados, paralisação de sistemas e prejuízos operacionais que afetam toda a rotina do negócio. Em muitos casos, o problema não começa com um ataque...
Autor: NSFOCUS
AI Security Incident Case: Document Worm Achieves Self Replication and Propagation Via Word Copilot
Overview On July 28, 2026, security researcher Håkon Måløy publicly disclosed a new attack technique called "AI Worming through Word". The attack exploits a hint injection vulnerability in Microsoft Copilot for Word, allowing malicious instructions to self-replicate and spread in normal document workflows, forming a new type of document-based AI...
AI Agent “Jailbreak” Breaches Hugging Face: The “Chernobyl Moment” of Software Supply Chain Security
In July 2026, Hugging Face—the world’s largest open-source AI model platform—disclosed an industry-shattering intrusion: OpenAI’s AI models used for internal safety evaluation (GPT-5.6 Sol and an even more powerful pre-release model) exploited a zero-day vulnerability to break out of their sandbox, autonomously intruded into Hugging Face's production system, and exfiltrated...
Fastjson 2.x Remote Code Execution Vulnerability Notice
Overview Recently, NSFOCUS CERT detected that a Fastjson 2.x remote code execution vulnerability was disclosed online; Because Fastjson2.x may still handle @type in JSON through the built-in whitelist when SupportAutoType is not enabled by default configuration, an unauthenticated attacker can construct specially crafted malicious JSON data and achieve remote code...
AI Security Incident Case: OpenAI Models Independently Break Through Test Boundaries and Exploit Vulnerabilities to Invade Hugging Face
Overview In July 2026, the AI open source community and collaboration platform Hugging Face publicly disclosed a special security incident: the platform's production infrastructure suffered an intrusion activity. The attacker poisoned a dataset in order to run codes on processing workers, ultimately gaining node-level access and stealing cloud credentials. It...
O que é Privacidade de dados? Veja como proteger sua empresa
A era digital trouxe uma explosão no volume de dados gerados, coletados e armazenados diariamente. Esse cenário levanta questões críticas sobre a privacidade de dados, que se tornou um tópico central nas discussões empresariais e legislativas. Neste artigo, exploraremos o mundo da privacidade de dados, sua importância, a relação com...
