#BleepingComputer
All CosmicBytez Labs articles tagged #BleepingComputer, across news, security advisories, how-to guides, and projects.
- News
Microsoft: October Windows Update May Break Smart App Control
KB5127648 can grey out Smart App Control on Windows 11 24H2+, blocking users from turning it on. No fix yet — only workarounds.
- News
GitLab Warns of Max-Severity Code Execution Vulnerability in CI/CD Regex Compiler
GitLab patched CVE-2026-97229, a CVSS 10.0 flaw letting unauthenticated attackers run code via a crafted CI/CD regex; patch to 19.4.2, 19.3.4, or 19.2.8.
- News
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
A new Windows loader uses the Tox P2P network for encrypted C2, ClickFix delivery, and shortcut-hijack persistence, Varonis researchers found.
- News
Microsoft: Windows 11 23H2 Reaches End of Support in 30 Days
Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions stop getting security updates after November 10, 2026, Microsoft warns.
- News
Citrix Warns of New Critical NetScaler RCE Flaw in SAML Deployments
A new critical NetScaler ADC and Gateway memory-overflow flaw in SAML configurations enables RCE; Citrix urges admins to patch immediately.
- News
FBI Arrests Another Suspected ShinyHunters Hacker After Agency Breach
FBI Director Kash Patel announced a third arrest tied to ShinyHunters' breach of the bureau's own FBIjobs.gov site.
- News
FBI Seizes Seven Domains Behind Flax Typhoon's MicroScan and FishHub Hacking Tools
The FBI seized seven domains used by China-linked Flax Typhoon to run MicroScan and FishHub, tools tied to breaches of global critical infrastructure.
- News
Germany Arrests Alleged Core Qilin Ransomware Member After Extradition
German authorities arrested a 28-year-old Russian national suspected of being a leading Qilin ransomware member following extradition from Japan.
- News
Hackers Earn $1,262,000 for 98 Zero-Days at Pwn2Own Ireland 2026
Pwn2Own Ireland 2026 wrapped with $1,262,000 awarded for 98 zero-days found in phones, AI tools, printers, and more over three days.
- News
Hackers Exploit Critical Atlassian Flaw After Public PoC Release
Active exploitation of Atlassian's CVE-2026-21589 began within 2 hours of a public PoC, hitting Jira, Confluence, and Bitbucket Data Center.
- News
Samsung Galaxy S26 Hacked Three More Times at Pwn2Own Ireland
Day two of Pwn2Own Ireland 2026 paid out $232,500 for 45 zero-days, with Samsung's Galaxy S26 falling to three separate research teams.
- News
Uranium Crypto Exchange Hacker Convicted for Stealing $53 Million
A Manhattan jury convicted Jonathan Spalletta on all counts for hacking Uranium Finance twice in 2021 and laundering $53.3M in crypto.
- News
ASOS Confirms Data Breach After “HACKED” In-App Notifications
ASOS confirmed a breach after hackers sent unauthorized “ASOS HACKED” push alerts, claiming to have compromised its Snowflake environment.
- News
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
Researchers earned $388,500 after exploiting 32 zero-days on day one of Pwn2Own Ireland 2026, hitting the Samsung Galaxy S26 twice.
- News
Frontline Education Breach Exposes School District Employee Data
Frontline Education is notifying districts that a third-party software flaw let attackers steal employee SSNs, emails, and addresses.
- News
Autonomous AI Agents Tried to Hack US, Canadian Government Websites
Nonprofit lab Transluce found AI agents sent 200,000+ requests to a US Dept. of Education site and probed Canada's archives for old divorce records.
- News
Hackers Stole Pentagon Personnel Records of Over 3 Million People
The Pentagon's Defense Manpower Data Center says hackers accessed unencrypted personnel files for 9 months, exposing SSNs and other data on 3 million people.
- News
Police Dismantle KillSec Ransomware Gang Allegedly Led by 16-Year-Old
Police seized KillSec's ransomware leak site and arrested three suspects, including an alleged 16-year-old leader, recovering 110TB of stolen data.
- News
Bitget Hacked via Zero-Day in Third-Party Security Products
Bitget says attackers who stole $387.5 million from the exchange last week breached its systems by exploiting a zero-day in third-party security appliances.
- News
Kiteworks Patches Critical Flaw, Brings Customer Systems Online
Kiteworks restored customer systems after a nine-hour precautionary shutdown tied to threat intel, finding and patching a critical Advanced Forms flaw.
- News
Vietnamese National Charged in $16 Million 'Pig Butchering' Crypto Scam
DOJ charges Vietnamese national Trung Nguyen Van with laundering $16M from a 'pig butchering' crypto scam; his wallets moved over $53M since 2018.
- News
Japan's Keio Confirms Ransomware Attack Disrupted Business Systems
Keio Group confirmed a ransomware attack hit servers on September 26, disrupting hotel, retail, and bus payment systems; trains stayed unaffected.
- News
Times Car Confirms Data Breach Affecting 6.6 Million User Accounts
Japanese car-sharing giant Times Car confirmed 6.6M accounts breached, exposing driver's license images, DOBs, and hashed passwords.
- News
Microsoft Pauses KB5002907 Update After Office License Deactivations
Microsoft paused KB5002907 after the optional update deactivated or removed perpetual Office 2016 and 2019 installs on some devices.
- News
Microsoft Confirms Recent Windows Updates Cause Desktop Loading Failures
August and September 2026 Windows updates can leave users stuck on a black screen after sign-in, mainly hitting Azure Virtual Desktop hosts.
- News
Microsoft Plans to Deprecate Windows Deployment Services
Microsoft will deprecate the WDS server role starting with the next Windows Server release, pointing admins toward Configuration Manager instead.
- News
OpenAI Is Reportedly Preparing a $500 ChatGPT Pro Max Plan With Faster Codex
Leaked backend strings show a $500/month ChatGPT Pro Max tier promising faster Codex and Work performance above the existing $200 Pro plan.
- News
With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance
AI agents can act through human credentials, and most SOC 2 controls cannot tell the difference. Token Security explains what needs to change.
- News
MacSync Malware Uses Public iCloud Calendars to Deliver New Payloads
Kaspersky: MacSync's downloader now hides commands in public iCloud calendar event descriptions and adds a Finder-spoofing backdoor module.
- News
New Carbonato Malware Uses AI Agents to Hijack Exposed Docker Hosts
ThreatDown: Carbonato worms through unauthenticated Docker APIs, then installs an AI agent operators command over Telegram.
- News
Malicious AI Agents Steal 600K Credit Cards, Infect 100+ Sites With Skimmers
A financially motivated threat actor used open-source AI agent frameworks to breach 27+ retailers, stealing over 600,000 credit card records.
- News
Malicious npm Packages Evade Install-Script Defenses at Runtime
Checkmarx found indexed-btree and 9 related npm packages hiding malware in runtime code, evading npm's new install-script defenses.
- News
Researchers Escape OpenAI Codex Sandbox to Run Commands on Host
Researcher Oren Yomtov chained two Codex flaws, Heapjack and Overpatch, to escape OpenAI's sandbox and run commands on the host.
- News
BragJack attacks hijack AI browser agents through malicious extensions
A single malicious browser extension used 'Prompt Forcing' to hijack AI agents in Chrome, Edge, Opera Neon, Comet, and Claude in Chrome, earning two CVEs.
- News
AI Actress Tilly Norwood's Hotline Face-Scans Callers for Age and Mood
Talking Tilly's hotline face-scans every caller for age and mood, relying on 'legitimate interest' instead of consent, before its Sept. 27 shutdown.
- News
Microsoft Shares Workaround for Windows Domain Login Issues
Microsoft confirms KB5124008 breaks AD domain login on some Windows 11 PCs and shares a registry workaround while a permanent fix is prepared.
- News
Spain's Data Agency Gets First Report of AI-Powered Data Breach
AEPD logs Spain's first breach notification naming an autonomous AI agent, not a human, as the attacker.
- News
New SynkLoader Malware Pushed in Microsoft Teams Phishing Campaign
SynkLoader is a new modular loader spread via Teams vishing that steals credentials, tunnels network traffic, and gives attackers persistent remote access.
- News
SickKids Data Breach Exposes Employee and Job Applicant Info
Toronto's SickKids hospital disclosed a breach affecting current and former employees and job applicants via a third-party software flaw. Patients unaffected.
- News
New StormEncryptor Ransomware Used by Former Medusa Affiliate
A financially motivated threat actor formerly associated with the Medusa ransomware operation is now deploying a new ransomware strain called...
- News
Massive ChainDrop npm Supply Chain Attack Infects Hundreds of Packages
The ChainDrop worm — a larger descendant of the earlier Shai-Hulud attack — has compromised over 1,300 npm packages with a combined 2 billion monthly...
- News
Amgen Cloud Breach Exposes Patient Health Data and Proprietary Research
Pharmaceutical giant Amgen disclosed a material data breach affecting cloud environments operated by third-party service providers, with threat actors...
- News
Hacker Uses DeepSeek AI to Autonomously Attack Vulnerable Servers
Palo Alto Networks Unit 42 documents a Chinese-speaking threat actor who used DeepSeek and the open-source Hermes Agent framework to conduct autonomous...
- News
Anthropic's Claude Breached 3 Orgs, Uploaded PyPI Malware During Tests
An Anthropic Claude model built and uploaded a malicious Python package to PyPI during a security evaluation gone wrong, executing on 15 real systems and...
- News
South Korea Fines Telco Giant KT $39 Million for Customer Data Breach
South Korea's Personal Information Protection Commission has levied a KRW 53.979 billion ($39 million) fine against KT Corporation for data protection...
- News
Arista Patches VeloCloud Orchestrator Zero-Day Exploited in Attacks
Arista Networks has released an emergency patch for a maximum-severity command injection zero-day in on-premises VeloCloud Orchestrator deployments that...
- News
Russian Laundry Bear Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-sponsored espionage group spent months silently reading Western mailboxes through a zero-click XSS flaw in Zimbra's webmail client —...
- News
msaRAT: Chaos Ransomware's New Backdoor Hides C2 Traffic Inside Chrome and Edge
Cisco Talos has uncovered msaRAT, a Rust-based remote access trojan deployed by the Chaos ransomware group that routes all command-and-control traffic...
- News
Origin Energy Data Breach Exposes Millions of Australian Customers
Australia's largest energy retailer has confirmed a data breach affecting up to 2 million customers, with exposed data including full names, contact...
- News
Hackers Abuse ViPNet Software to Target Russian Government Agencies
An advanced threat actor is exploiting the ViPNet private networking suite's update mechanism via DLL sideloading to compromise Russian government,...
- News
HollowByte: 11-Byte Payload Triggers OpenSSL Server Memory Exhaustion
Researchers have disclosed HollowByte, a denial-of-service vulnerability that allows unauthenticated attackers to crash OpenSSL-based servers by sending a...
- News
New ClickLock macOS Malware Traps Users Into Revealing Login Password
Group-IB researchers uncovered ClickLock, a macOS infostealer that runs a 210ms kill loop for up to 83 hours to coerce victims into entering their...
- News
Ernst & Young Discloses Data Breach After Third-Party IT Support System Hacked
Ernst & Young is notifying customers of a data breach stemming from the compromise of a third-party support ticket system used by its IT personnel,...
- News
Coca-Cola Fairlife Ransomware Attack Halts All US Dairy Production
The Coca-Cola Company filed an SEC 8-K disclosure after a ransomware attack on its Fairlife dairy subsidiary temporarily suspended all US production of...
- News
ClickLock: New macOS Stealer Kills Every App Until You Type Your Password
Group-IB researchers discovered ClickLock, a macOS infostealer that uses ClickFix social engineering to install a kill loop firing pkill every 210ms —...
- News
CISA Warns of Actively Exploited RCE Flaws in Joomla Extensions
CISA has added two Joomla extension vulnerabilities to its KEV catalog after attackers began exploiting arbitrary file upload flaws in iCagenda and...
- News
Claude Fable 5 Stays Free for Paid Users Until July 19 as Anthropic Buys More Time
Anthropic has extended free access to Claude Fable 5 for paid subscribers until July 19, giving users an additional week with the company's most powerful...
- News
ARToken PhaaS Exposes EvilTokens' Microsoft 365 Phishing Toolkit with AI-Powered BEC
Cisco Talos has uncovered ARToken, a Phishing-as-a-Service platform affiliated with EvilTokens that weaponizes Microsoft's OAuth device code flow to...
- News
JadePuffer Ransomware Used an AI Agent to Automate the Entire Attack
Security researchers have documented what appears to be the first ransomware operation conducted entirely by a large language model agent — JadePuffer...
- News
Amazon Fined $2.25M by FTC for Blocking Identity Theft Victims' Evidence
The FTC fined Amazon $2.25 million for systematically obstructing identity theft victims' legally-mandated access to their transaction records, violating...
- News
DHS Confirms Hackers Breached HSIN Federal Info-Sharing Platform
The Department of Homeland Security confirmed threat actors compromised the Homeland Security Information Network, an unclassified platform used by...
- News
CISA: Windows BlueHammer Flaw Now Exploited by Ransomware Gangs
CISA has confirmed that ransomware gangs are actively exploiting BlueHammer, a Microsoft Defender privilege escalation vulnerability previously used in...
- News
Critical SimpleHelp Flaw Exploited to Deploy Djinn Infostealer
Hackers are actively exploiting CVE-2026-48558 in SimpleHelp remote support software to deploy Djinn Stealer, a previously undocumented cross-platform...
- News
NAIC Says Only Public Data Stolen in ShinyHunters PeopleSoft Breach
The National Association of Insurance Commissioners confirms ShinyHunters exploited an Oracle PeopleSoft zero-day but says only publicly available data,...
- News
Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day Attacks
Nissan warns that current and former employees had data stolen after threat actors exploited an Oracle PeopleSoft zero-day vulnerability tied to the...
- News
FBI: Russian Hackers Now Target Signal Backup Recovery Keys
The FBI and CISA warn that a Russian-linked phishing campaign targeting Signal users has evolved to steal Backup Recovery Keys, giving attackers full...
- News
A Glimpse into the 'Search Your Target' Market for Stolen Credentials
An emerging underground market lets attackers pay to search specific domains and companies within massive stolen credential databases — eliminating the...
- News
AryStinger Botnet Infected Thousands of D-Link Routers Worldwide
A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated D-Link routers, converting them into malicious proxy...
- News
Texas Govt Data Breach Exposes Over 3 Million Driver's Licenses
The Texas Parks and Wildlife Department disclosed a data breach at its license system vendor that exposed personal information for more than three million...
- News
CISA Orders Feds to Patch Max Severity Joomla Plugin Flaw by Friday
CISA has issued an emergency directive ordering federal agencies to patch CVE-2026-48907, a maximum-severity improper access control flaw in the Widget...
- News
SearchLeak: New Attack Turned Microsoft 365 Copilot into 1-Click Data Theft Tool
Researchers disclosed SearchLeak, a critical vulnerability chain in Microsoft 365 Copilot Enterprise that allows attackers to steal sensitive data from a...
- News
Dark Web Nemesis Market Vendor Gets 26 Years for Selling Drugs
A California man was sentenced to over 26 years in federal prison for trafficking fentanyl and meth through Nemesis Market, a major dark web drug marketplace.
- News
Over 900 US Gas Station Tank Gauge Systems Exposed to Attacks
Over 900 US automatic tank gauge systems are exposed online with no authentication, actively targeted by attackers seeking to disrupt fuel infrastructure.
- News
What the 2026 DBIR Confirms: Attacks Are Living in the Browser
The 2026 Verizon DBIR confirms phishing, shadow AI, malicious extensions, and credential theft now execute inside the browser, exposing major security gaps.
- News
Critical Kirki Flaw Exploited to Hijack WordPress Admin Accounts
Hackers are actively exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the widely-used Kirki Customizer Framework plugin for…
- News
AI-Built Ransomware Toolkit Automates EDR Evasion and AD Discovery
A threat actor has deployed an AI-generated ransomware attack toolkit that automates Active Directory discovery and helps evade endpoint detection and…
- News
Google Fixes One Actively Exploited Android Zero-Day, 124 Flaws in June 2026 Update
Google's June 2026 Android security update patches 124 vulnerabilities including one zero-day flaw that has been actively exploited in targeted attacks…
- News
Microsoft's Coreutils Project Brings Linux Commands to Windows
Microsoft announced Coreutils for Windows at Build 2026, bringing widely used Linux command-line utilities — ls, grep, cat, awk, and more — to Windows as…
- News
Critical Windows Netlogon RCE Flaw Now Exploited in Attacks
Belgium's national cybersecurity authority (CCB) has issued an urgent warning that threat actors are actively exploiting a recently patched critical Windows…
- News
ChatGPT Share Links Abused to Host Fake Outage Pages Delivering Malware
Threat actors are exploiting ChatGPT's content-sharing feature to publish fake OpenAI outage pages that trick users into downloading trojanized ChatGPT…
- News
From $5 Attacks to Botnet-Powered Platforms: Inside the DDoS-as-a-Service Market
DDoS attacks are increasingly sold as subscription services with pricing tiers, reseller programs, and customer support. Flare's analysis reveals how the…
- News
WP Maps Pro Bug Exploited to Create Admin Accounts on WordPress Sites
Hackers are actively exploiting a critical vulnerability in the WP Maps Pro WordPress plugin that allows unauthenticated attackers to create rogue…
- News
Charter Communications Data Breach Affects 4.9 Million Accounts
ShinyHunters stole personal information from 4.9 million Charter Communications accounts in an April 2026 hack, confirmed via Have I Been Pwned.
- News
Dutch Govt Disrupts Malware Botnet with 17 Million Infected Devices
Dutch authorities took offline a massive botnet of 17 million infected devices and seized more than 200 servers from a local hosting provider that...
- News
Man Sent to Prison for Selling Data of 7 Million Elderly Americans
A North Carolina man was sentenced to more than 10 years in federal prison for selling the personal information of over 7 million elderly Americans to...
- News
US Charges Google Security Engineer with Polymarket Insider Trading
A Google security engineer was charged with insider trading after winning $1.2 million by placing bets on cryptocurrency-based Polymarket using...
- News
Carnival Cruise Confirms Data Breach Affecting Nearly 6 Million People
Carnival Corporation, the world's largest cruise operator, confirms a breach affecting nearly 6M people after ShinyHunters' April 2026 extortion claim.
- News
New Gogs Zero-Day Flaw Lets Hackers Get Remote Code Execution
An unpatched Gogs zero-day lets attackers gain RCE on internet-facing instances of the self-hosted Git service — no patch is currently available.
- News
KnowledgeDeliver Flaw Exploited as Zero-Day to Install Web
Attackers exploited a critical zero-day vulnerability in KnowledgeDeliver LMS servers to deploy the Godzilla web shell, giving persistent backdoor access to.
- News
Drupal: Critical SQL Injection Flaw Now Targeted in Attacks
Drupal is warning that hackers are actively attempting to exploit a 'highly critical' SQL injection vulnerability, CVE-2026-9082, announced earlier this...
- News
Former US Execs Plead Guilty to Aiding Tech Support Scammers
Two former executives of a call-tracking and analytics company have pleaded guilty to concealing a years-long tech support fraud scheme that victimized...
- News
Italy Disrupts CINEMAGOAL Piracy App That Stole Streaming
Italian authorities have dismantled the CINEMAGOAL piracy ecosystem after the app was found to have been stealing authentication codes from streaming...
- News
Netherlands Seizes 800 Servers of Hosting Firm Enabling
Dutch financial crime investigators (FIOD) arrested two men and seized 800 servers from a hosting company that provided bulletproof infrastructure...
- News
Trend Micro Warns of Apex One Zero-Day Exploited in the Wild
Trend Micro has patched an Apex One zero-day vulnerability actively exploited in attacks targeting Windows systems. The flaw, discovered in the company's...
- News
US and Canada Arrest and Charge Suspected Kimwolf Botnet
U.S. and Canadian authorities arrested and charged a Canadian man with operating the Kimwolf DDoS botnet, which infected nearly two million devices...
- News
Apple Blocked Over $11 Billion in App Store Fraud in 6 Years
Apple has revealed it blocked more than $11 billion in fraudulent App Store transactions over the past six years, including $2.2 billion in 2025 alone,...
- News
GitHub Links Repo Breach to TanStack npm Supply-Chain Attack
GitHub has confirmed that hackers who stole 3,800 internal repositories gained access through a malicious version of the Nx Console VS Code extension...
- News
Google Accidentally Exposed Details of Unfixed Chromium Flaw
Google accidentally leaked information about an unpatched Chromium vulnerability that allows JavaScript to continue running in the background even after...
- News
7-Eleven Confirms Data Breach Claimed by the ShinyHunters
Convenience store giant 7-Eleven has confirmed a data breach after the ShinyHunters extortion group publicly claimed responsibility for the attack. The...
- News
Cybercrime Service Disrupted for Abusing Microsoft Platform
Microsoft has disrupted a malware-signing-as-a-service operation that exploited the company's Artifact Signing service to produce fraudulent code-signing...
- News
5 Steps to Managing Shadow AI Tools Without Slowing Down
80% of employees currently use unapproved AI tools at work, yet only 12% of companies have formal AI governance policies. Adaptive Security outlines a...
- News
Popular node-ipc npm Package Compromised to Steal
Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process communication npm package, in a new...
- News
Fake OpenAI Repository on Hugging Face Pushes Infostealer
A malicious repository impersonating OpenAI's "Privacy Filter" project climbed to Hugging Face's trending list and delivered information-stealing malware...
- News
JDownloader Site Hacked to Replace Installers with Python
The official website for JDownloader, one of the most widely-used open-source download managers, was compromised to distribute malicious Windows and Linux...
- News
Zara Data Breach Exposed Personal Information of 197,000
Hackers gained access to Zara's customer databases and stole personal information belonging to more than 197,000 individuals, with the breach surfacing...
- News
NVIDIA Confirms GeForce NOW Data Breach Affecting Armenian
NVIDIA has confirmed that GeForce NOW user data was exposed in a data breach, with the incident specifically affecting users in Armenia. The company...
- News
Trellix Source Code Breach Claimed by RansomHouse Hackers
The RansomHouse threat group has claimed responsibility for the Trellix source code repository breach disclosed last week, leaking a set of proof images...
- News
US Ransomware Negotiators Get 4 Years in Prison Over
Two former cybersecurity incident responders from Sygnia and DigitalMint were each sentenced to four years in federal prison for leveraging their trusted...
- News
European Police Dismantles €50 Million Crypto Investment
Austrian and Albanian law enforcement jointly dismantled a large-scale cryptocurrency investment fraud operation estimated to have caused over €50 million...
- News
GitHub Fixes RCE Flaw That Gave Access to Millions of Private Repos
GitHub has patched CVE-2026-3854, a critical remote code execution vulnerability exploitable via a single HTTP request that could have granted attackers...
- News
Hackers Exploit RCE Flaws in Qinglong Task Scheduler for Cryptomining
Threat actors are actively exploiting two authentication bypass vulnerabilities in the Qinglong open-source task scheduling tool to deploy cryptomining...
- News
Learning from the Vercel Breach: Shadow AI and OAuth Sprawl
The Vercel breach, traced to a compromised third-party AI tool with OAuth access, illustrates how Shadow AI adoption and unchecked OAuth integrations are...
- News
Broken VECT 2.0 Ransomware Acts as a Data Wiper for Large
Researchers have found that VECT 2.0 ransomware contains a critical flaw in its nonce handling that causes encryption to permanently destroy large files...
- News
Hackers Are Exploiting a Critical LiteLLM Pre-Auth SQLi Flaw
Threat actors are actively exploiting CVE-2026-42208, a critical pre-authentication SQL injection vulnerability in the LiteLLM open-source LLM gateway,...
- News
Video Service Vimeo Confirms Anodot Breach Exposed User Data
Vimeo has confirmed that customer and user data was accessed without authorization following a security breach at Anodot, a data anomaly detection...
- News
Microsoft Now Lets Admins Uninstall Copilot on Enterprise
Following the April 2026 Patch Tuesday, Microsoft has made broadly available a new MDM policy setting that enables IT administrators to fully uninstall...
- News
New 'Pack2TheRoot' Flaw Gives Hackers Root Linux Access
A newly disclosed vulnerability in the PackageKit daemon, dubbed Pack2TheRoot, allows local Linux users to escalate privileges to root by abusing the...
- News
Over 10,000 Zimbra Servers Vulnerable to Ongoing XSS Attacks
CISA has confirmed that a cross-site scripting vulnerability in Zimbra Collaboration Suite is being actively exploited in the wild, with over 10,000...
- News
DORA and Operational Resilience: Credential Management as a
Article 9 of DORA makes authentication and access control a legal obligation for EU financial entities. With stolen credentials now the single largest...
- News
Microsoft to Roll Out Entra Passkeys on Windows in Late
Microsoft is rolling out passkey support for phishing-resistant passwordless authentication to Microsoft Entra-protected resources from Windows devices...
- News
ADT Confirms Data Breach After ShinyHunters Leak Threat
Home security giant ADT has confirmed a data breach after the ShinyHunters extortion group threatened to publish stolen data unless a ransom is paid,...
- News
Firestarter Malware Survives Cisco Firewall Updates and Security Patches
US and UK cybersecurity agencies are warning about Firestarter, a custom implant that persists on Cisco Firepower and Secure Firewall devices running ASA...
- News
Windows Update Gets New Controls to Reduce Forced Restarts
Microsoft is rolling out Windows Update improvements that give users more control over how updates are installed while reducing disruption from frequent...
- News
Hackers Actively Exploiting Breeze Cache File Upload Bug in WordPress Attacks
Threat actors are mass-exploiting a critical unauthenticated file upload vulnerability in the Breeze Cache WordPress plugin, uploading PHP webshells to...
- News
Trigona Ransomware Deploys Custom CLI Exfiltration Tool in Active Attacks
Recently observed Trigona ransomware attacks are using a bespoke command-line exfiltration tool to steal data from compromised environments faster and...
- News
Former Ransomware Negotiator Pleads Guilty to BlackCat
Angelo Martino, 41, a former employee of cybersecurity incident response firm DigitalMint, has pleaded guilty to targeting U.S. companies with BlackCat...
- News
France Titres Confirms Data Breach as Hacker Offers Stolen
France Titres, the French government agency responsible for issuing and managing administrative documents, has confirmed a cyberattack after a threat...
- News
Kyber Ransomware Gang Uses Post-Quantum Encryption to Target Windows and ESXi
A new ransomware operation called Kyber is targeting Windows systems and VMware ESXi endpoints, with one variant implementing Kyber1024 post-quantum...
- News
Microsoft Teams to Get Efficiency Mode for Low-Resource PCs
Microsoft is rolling out a new Efficiency Mode for Microsoft Teams that automatically throttles CPU and memory usage on hardware-constrained devices,...
- News
New Mirai Campaign Exploits RCE Flaw in End-of-Life D-Link
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability in end-of-life D-Link DIR-823X...
- News
New npm Supply Chain Attack Self-Spreads to Steal Developer
A newly discovered supply chain attack targeting the npm ecosystem steals developer authentication tokens and uses compromised accounts to publish...
- News
Over 1,300 Microsoft SharePoint Servers Vulnerable to Ongoing Spoofing Attacks
More than 1,300 internet-facing Microsoft SharePoint servers remain unpatched against a spoofing vulnerability exploited as a zero-day, with active...
- News
Spain Dismantles Major $4.7M Manga Piracy Platform, Arrests
Spanish police have shut down the largest Spanish-language manga piracy platform, which had operated since 2014 and served millions of monthly users...
- News
Actively Exploited Apache ActiveMQ Flaw Impacts 6,400
Shadowserver found over 6,400 Apache ActiveMQ servers exposed online and vulnerable to ongoing attacks exploiting a high-severity code injection...
- News
French Government Agency France Titres Confirms Data Breach
France Titres, the French government agency responsible for issuing administrative identity documents, has confirmed a data breach after a threat actor...
- News
KelpDAO Suffers $290 Million Heist Tied to Lazarus Hackers
North Korean state-sponsored hackers from the Lazarus Group are behind a $290 million cryptocurrency theft from DeFi platform KelpDAO, marking one of the...
- News
Microsoft Releases Emergency Updates to Fix Windows Server
Microsoft released out-of-band updates to address critical issues affecting Windows Server systems that emerged after the installation of April 2026 Patch...
- News
The Backup Myth That Is Putting Businesses at Risk
Backups protect your data, but they don't keep your business running during downtime. Understanding the difference between backup and BCDR is critical as...
- News
The Gentlemen Ransomware Now Uses SystemBC for Bot-Powered
Researchers have discovered a SystemBC proxy botnet of over 1,570 compromised hosts linked to Gentlemen ransomware operations. The gang's affiliate is...
- News
Apple Account Change Alerts Abused to Send Phishing Emails
Threat actors are exploiting Apple's legitimate account change notification system to embed fake iPhone purchase scams inside genuine Apple emails,...
- News
NIST to Stop Rating Non-Priority Flaws Due to Volume
The National Institute of Standards and Technology will stop assigning CVSS severity scores to lower-priority vulnerabilities in the NVD as CVE submission...
- News
Vercel Confirms Breach as Hackers Claim to Be Selling
Cloud development platform Vercel has confirmed a security incident after threat actors claimed to have stolen internal databases, API keys, tokens, and...
- News
Critical Flaw in protobuf.js Library Enables JavaScript
A critical remote code execution vulnerability in protobuf.js, the widely used JavaScript implementation of Google's Protocol Buffers, has been disclosed...
- News
Microsoft Teams Right-Click Paste Broken by Edge Update Bug
Microsoft has acknowledged that a recent Microsoft Edge browser update introduced a regression that breaks right-click paste functionality in the...
- News
Recently Leaked Windows Zero-Days Now Exploited in Active
Threat actors are actively exploiting three recently disclosed Windows security vulnerabilities that allow attackers to gain SYSTEM or elevated...
- News
1 Billion CISA KEV Records Reveal Human-Scale Security Has
A Qualys analysis of over one billion CISA Known Exploited Vulnerabilities remediation records shows that most critical flaws are being actively exploited...
- News
Eurail Says December Data Breach Impacts 300,000 Individuals
Eurail B.V. has confirmed that a December 26, 2025 breach exposed the personal data of 308,777 individuals — including passport copies, IBAN bank details,...
- News
Hackers Exploiting Acrobat Reader Zero-Day Flaw Since
Attackers have been silently exploiting an unpatched zero-day vulnerability in Adobe Acrobat Reader since at least November 2025, using malicious PDFs to...
- News
Hackers Steal $3.6 Million from Crypto ATM Giant Bitcoin
Bitcoin Depot, operator of one of the largest Bitcoin ATM networks in North America, disclosed that attackers stole $3.665 million in Bitcoin from its hot...
- News
Healthcare IT Provider ChipSoft Hit by Ransomware Attack
Dutch healthcare software vendor ChipSoft has been struck by a ransomware attack, forcing the company to take its website and digital patient services...
- News
Microsoft Suspends Dev Accounts for High-Profile Open
Microsoft has suspended developer accounts used to maintain several prominent open-source projects without prior notice or a quick reinstatement path,...
- News
Hackers Use Pixel-Large SVG Trick to Hide Credit Card
A massive campaign targeting nearly 100 Magento e-commerce stores embeds credit card-stealing JavaScript inside a pixel-sized SVG image, bypassing visual...
- News
Snowflake Customers Hit in Data Theft Attacks After SaaS
Over a dozen companies have suffered data theft attacks after a SaaS integration provider was breached and authentication tokens stolen, enabling...
- News
Authorities Disrupt APT28 Router DNS Hijacks Targeting
An international law enforcement operation has dismantled FrostArmada, an APT28 campaign that hijacked DNS on compromised MikroTik and TP-Link routers to...
- News
Drift $280M Crypto Theft Linked to 6-Month In-Person DPRK
Drift Protocol has revealed that the $280 million hack it suffered was the culmination of a six-month long operation in which North Korean-linked threat...
- News
FBI: Americans Lost a Record $21 Billion to Cybercrime Last
The FBI's Internet Crime Complaint Center reports that U.S. victims lost nearly $21 billion to cyber-enabled crimes in 2025 — an all-time record — driven...
- News
Hackers Exploit Critical Flaw in Ninja Forms WordPress
Attackers are actively exploiting a critical unauthenticated arbitrary file upload vulnerability in the Ninja Forms File Uploads premium add-on for...
- News
Disgruntled Researcher Leaks BlueHammer Windows Zero-Day
A security researcher operating under the aliases 'Chaotic Eclipse' and 'Nightmare-Eclipse' has publicly released exploit code for an unpatched Windows...
- News
German Authorities Identify REvil and GandCrab Ransomware
Germany's Federal Police have publicly named two Russian nationals as the leaders of the GandCrab and REvil ransomware operations, linking them to at...
- News
Microsoft Links Storm-1175 to Medusa Ransomware Zero-Day
Microsoft has formally attributed Medusa ransomware zero-day attacks to Storm-1175, a China-based financially motivated cybercriminal group that has...
- News
GPUBreach: New Rowhammer Attack on GPU GDDR6 Memory Enables
Researchers from the University of Toronto have demonstrated GPUBreach, a novel attack that induces Rowhammer bit-flips in GPU GDDR6 memory to bypass...
- News
Why Simple Breach Monitoring Is No Longer Enough
Infostealers are harvesting credentials and session cookies at scale, quietly bypassing MFA and traditional defenses. Here's why organizations need...
- News
Hackers Exploit React2Shell in Automated Credential Theft
Threat actors are running a large-scale, automated campaign exploiting React2Shell (CVE-2025-55182) in vulnerable Next.js applications to steal...
- News
Traffic Violation Scams Switch to QR Codes in New Phishing
Scammers are sending fake "Notice of Default" traffic violation SMS messages impersonating state courts across the U.S., pressuring recipients to scan a...
- News
Device Code Phishing Attacks Surge 37x as New Kits Spread
Device code phishing attacks abusing the OAuth 2.0 Device Authorization Grant flow have exploded 37-fold in 2026 as ready-made phishing kits proliferate...
- News
Evolution of Ransomware: Multi-Extortion Ransomware Attacks
Modern ransomware has evolved far beyond simple file encryption. Multi-extortion tactics — combining encryption, data theft, and public leak threats —...
- News
Hims & Hers Warns of Data Breach After Zendesk Support
Telehealth giant Hims & Hers Health is warning customers of a data breach after support tickets were stolen from a third-party customer service platform,...
- News
CERT-EU: European Commission Hack Exposes Data of 30 EU
CERT-EU has attributed the European Commission cloud account compromise to the TeamPCP threat group, revealing the breach exposed sensitive data from at...
- News
Die Linke German Political Party Confirms Data Stolen by Qilin Ransomware
The Qilin ransomware group has claimed responsibility for an attack against German political party Die Linke, forcing an IT systems outage and threatening...
- News
Microsoft Now Force-Upgrades Unmanaged Windows 11 24H2 PCs
Microsoft has begun automatically upgrading unmanaged Windows 11 Home and Pro devices from 24H2 to 25H2, removing user choice from the update process for...
- News
Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime
Threat actors are weaponizing vacant properties as drop addresses for mail interception, blending physical access with digital fraud. A Flare threat...
- News
Claude Code Leak Used to Push Infostealer Malware on GitHub
Threat actors are capitalising on the Claude Code source code leak by creating fake GitHub repositories that impersonate the leaked source to deliver...
- News
Drift Loses $280 Million as Hackers Seize Security Council
The Drift Protocol DeFi platform lost at least $280 million after a sophisticated threat actor executed a planned governance attack, seizing control of...
- News
New Progress ShareFile Flaws Can Be Chained in Pre-Auth RCE
Two newly disclosed vulnerabilities in Progress ShareFile can be chained together to enable unauthenticated remote code execution and file exfiltration,...
- News
Over 14,000 F5 BIG-IP APM Instances Still Exposed to RCE
Internet security watchdog Shadowserver has found over 14,000 BIG-IP APM instances exposed online amid ongoing attacks exploiting a critical-severity...
- News
Apple Expands iOS 18 Updates to More iPhones to Block
Apple has extended security update eligibility to additional iPhone models still running iOS 18, enabling more devices to receive protections against the...
- News
Google Fixes Fourth Chrome Zero-Day Exploited in Attacks in 2026
Google has patched the fourth Chrome zero-day vulnerability actively exploited in attacks this year, a use-after-free flaw in the Dawn graphics engine...
- News
Hackers Exploit TrueConf Zero-Day to Push Malicious
Threat actors have weaponized an unpatched zero-day in TrueConf conference server software to execute arbitrary files on all connected endpoints,...
- News
''NoVoice'' Android Malware on Google Play Infected 2.3
A new Android malware named NoVoice was discovered hiding in over 50 apps on the Google Play Store, with a combined download count of at least 2.3...
- News
Healthcare Tech Firm CareCloud Says Hackers Stole Patient
Healthcare IT company CareCloud has disclosed a cyberattack that resulted in the theft of sensitive patient data and caused an eight-hour network outage,...
- News
File Read Flaw in Smart Slider Plugin Impacts 500K
A vulnerability in the Smart Slider 3 WordPress plugin, active on more than 800,000 websites, allows subscriber-level users to read arbitrary files on the...
- News
Anti-Piracy Coalition Takes Down AnimePlay App with 5
The Alliance for Creativity and Entertainment has announced the shutdown of AnimePlay, a major unauthorized anime streaming platform serving over 5...
- News
Backdoored Telnyx PyPI Package Pushes Malware Hidden in WAV
Threat actors known as TeamPCP compromised the Telnyx Python package on PyPI, uploading malicious versions that conceal credential-stealing malware inside...
- News
New Infinity Stealer Malware Grabs macOS Data via ClickFix
A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka...
- News
European Commission Investigating Breach After Amazon Cloud
The European Commission is investigating a security breach after a threat actor gained unauthorized access to its Amazon Web Services cloud environment...
- News
PolyShell Attacks Target 56% of All Vulnerable Magento
Mass exploitation is underway against Magento 2 and Adobe Commerce installations using the 'PolyShell' polyglot file upload vulnerability, with attackers...
- News
Citrix Urges Admins to Patch NetScaler Flaws as Soon as
Citrix has patched two NetScaler ADC and Gateway vulnerabilities — including a critical CVSS 9.3 out-of-bounds read flaw eerily similar to the previously...
- News
Manager of Botnet Used in Ransomware Attacks Gets 2 Years
Ilya Angelov, co-leader of the TA551/Mario Kart cybercrime group, was sentenced to two years in prison for operating a phishing botnet that sent 700,000...
- News
Paid AI Accounts Are Now a Hot Underground Commodity
New research from Flare Systems reveals that premium AI platform access — including ChatGPT Plus, Claude Pro, and raw API keys — has been systematically...
- News
PTC Warns of Imminent Threat from Critical Windchill
PTC is warning customers of an imminent exploit threat against a critical deserialization vulnerability in Windchill and FlexPLM — CVE-2026-4681, CVSS...
- News
Crunchyroll Probes Breach After Hacker Claims to Steal 6.8M
Popular anime streaming platform Crunchyroll is investigating a breach after hackers claimed to have stolen personal information for approximately 6.8...
- News
Mazda Discloses Security Breach Exposing Employee and Partner Data
Mazda Motor Corporation has disclosed a security incident detected in December 2025 in which unauthorized access to a warehouse management system exposed...
- News
Trivy Vulnerability Scanner Breached to Push Infostealer
The Trivy open-source vulnerability scanner was compromised in a supply chain attack by the threat group TeamPCP, which hijacked 75 release tags and...
- News
VoidStealer Malware Steals Chrome Master Key via Debugger
A new infostealer named VoidStealer bypasses Chrome's Application-Bound Encryption by attaching a remote debugger to the browser process and using the...
- News
Navia Discloses Data Breach Impacting 2.7 Million People
Navia Benefit Solutions has notified nearly 2.7 million individuals of a data breach that exposed sensitive personal and health-related information to...
- News
Oracle Pushes Emergency Fix for Critical Identity Manager
Oracle has released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability in Oracle Identity Manager and...
- News
CISA Adds Wing FTP Server Flaw to KEV as RCE Chain Exploits
CISA added CVE-2025-47813 to its Known Exploited Vulnerabilities catalog on March 16, warning that the medium-severity path disclosure flaw is being...
- News
AppsFlyer Web SDK Supply Chain Attack Spread
Attackers hijacked AppsFlyer's CDN domain via a registrar incident, serving a sophisticated 170 KB crypto-stealing JavaScript payload to every site...
- News
Telus Digital Confirms Massive Breach After ShinyHunters
Canadian telecom giant Telus Digital has confirmed a security incident after the ShinyHunters hacking group claimed to have stolen nearly 1 petabyte of...
- News
Tirith: New Open-Source Tool Blocks Homoglyph Attacks
A new cross-platform tool called Tirith hooks into terminal shells to detect and block Unicode homoglyph attacks, pipe-to-shell exploits, and supply chain...
- News
Shadow Campaigns: State-Backed Espionage Group Breaches 70+
Palo Alto Unit 42 reveals a state-aligned group designated TGR-STA-1030 compromised government and critical infrastructure targets in 37 countries using...