Nostr notes by BleepingComputer

Microsoft says Windows users should expect to see an increase in ...

2026-07-09T17:01:37Z

Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in its codebase.

https://www.bleepingcomputer.com/news/microsoft/microsoft-expects-more-windows-security-updates-from-ai-discovered-flaws/

The Department of Homeland Security is investigating a ...

2026-07-01T17:32:39Z

The Department of Homeland Security is investigating a cyberattack that compromised the Homeland Security Information Network (HSIN), a sensitive information-sharing platform used by federal, state, local, and private-sector partners.

https://www.bleepingcomputer.com/news/security/dhs-confirms-hackers-breached-hsin-info-sharing-platform/

Microsoft announced today that it is accelerating its ...

2026-06-30T21:20:21Z

Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are bringing the need to replace today's encryption standards sooner than previously expected.

https://www.bleepingcomputer.com/news/microsoft/microsoft-accelerates-quantum-safe-roadmap-as-risks-grow/

Apple account change notifications are being abused to send fake ...

2026-04-19T16:03:15Z

Apple account change notifications are being abused to send fake iPhone purchase phishing scams within legitimate emails sent from Apple's servers, increasing legitimacy and potentially allowing them to bypass spam filters.

https://www.bleepingcomputer.com/news/security/apple-account-change-alerts-abused-to-send-phishing-emails/

A new report dubbed "BrowserGate" warns that ...

2026-04-03T20:40:38Z

A new report dubbed "BrowserGate" warns that Microsoft's LinkedIn is using hidden JavaScript scripts on its website to scan visitors' browsers for installed extensions and collect device data.

https://www.bleepingcomputer.com/news/security/linkedin-secretely-scans-for-6-000-plus-chrome-extensions-collects-data/

The FBI has seized two websites used by the Handala hacktivist ...

2026-03-19T16:14:27Z

The FBI has seized two websites used by the Handala hacktivist group after the threat actors conducted a destructive cyberattack on medical technology giant Stryker that wiped approximately 80,000 devices.

https://www.bleepingcomputer.com/news/security/fbi-seizes-handala-data-leak-site-after-stryker-cyberattack/

The Wikimedia Foundation suffered a security incident today after ...

2026-03-05T20:42:41Z

The Wikimedia Foundation suffered a security incident today after a self-propagating JavaScript worm began vandalizing pages and modifying user scripts across multiple wikis.

https://www.bleepingcomputer.com/news/security/wikipedia-hit-by-self-propagating-javascript-worm-that-vandalized-pages/

Bitwarden announced support for logging into Windows 11 devices ...

2026-03-04T22:35:11Z

Bitwarden announced support for logging into Windows 11 devices using passkeys stored in the manager's vault, enabling phishing-resistant authentication.

https://www.bleepingcomputer.com/news/security/bitwarden-adds-support-for-passkey-login-on-windows-11/

Amazon has confirmed that three Amazon Web Services (AWS) data ...

2026-03-03T11:45:00Z

Amazon has confirmed that three Amazon Web Services (AWS) data centers in the United Arab Emirates (UAE) and one in Bahrain have been damaged by drone strikes, causing an extensive outage that is still affecting dozens of cloud computing services.

https://www.bleepingcomputer.com/news/technology/amazon-drone-strikes-damaged-aws-data-centers-in-middle-east/

Intellexa's Predator spyware can hide iOS recording ...

2026-02-21T16:15:14Z

Intellexa's Predator spyware can hide iOS recording indicators while secretly streaming camera and microphone feeds to its operators.

https://www.bleepingcomputer.com/news/security/predator-spyware-hooks-ios-springboard-to-hide-mic-camera-activity/

With the massive adoption of the OpenClaw agentic AI assistant, ...

2026-02-16T17:32:42Z

With the massive adoption of the OpenClaw agentic AI assistant, information-stealing malware has been spotted stealing files associated with the framework that contain API keys, authentication tokens, and other secrets.

https://www.bleepingcomputer.com/news/security/infostealer-malware-found-stealing-openclaw-secrets-for-first-time/

Google has released emergency updates to fix a high-severity ...

2026-02-16T08:19:32Z

Google has released emergency updates to fix a high-severity Chrome vulnerability exploited in zero-day attacks, marking the first such security flaw patched since the start of the year.

https://www.bleepingcomputer.com/news/security/google-patches-first-chrome-zero-day-exploited-in-attacks-this-year/

Microsoft has fixed a "remote code execution" ...

2026-02-11T23:15:56Z

Microsoft has fixed a "remote code execution" vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs by tricking users into clicking specially crafted Markdown links, without displaying any Windows security warnings.

https://www.bleepingcomputer.com/news/microsoft/windows-11-notepad-flaw-let-files-execute-silently-via-markdown-links/

Microsoft has released Windows 11 KB5077181 and KB5075941 ...

2026-02-10T18:44:16Z

Microsoft has released Windows 11 KB5077181 and KB5075941 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features.

https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5077181-and-kb5075941-cumulative-updates-released/

Microsoft has begun rolling out updated Secure Boot certificates ...

2026-02-10T17:00:16Z

Microsoft has begun rolling out updated Secure Boot certificates through monthly Windows updates to replace the original 2011 certificates that will expire in late June 2026.

https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-new-secure-boot-certificates-before-june-expiration/

A major U.S. payment gateway and solutions provider says a ...

2026-02-07T09:47:22Z

A major U.S. payment gateway and solutions provider says a ransomware attack has knocked key systems offline, triggering a widespread outage affecting multiple services. The incident began on Friday and quickly escalated into a nationwide disruption across BridgePay's platform.

https://www.bleepingcomputer.com/news/security/payment-gateway-bridgepay-confirms-ransomware-attack-behind-outage/

The Cybersecurity & Infrastructure Security Agency (CISA) in ...

2026-02-06T17:16:19Z

The Cybersecurity & Infrastructure Security Agency (CISA) in the U.S. has issued a warning about CVE-2026-24423, an unauthenticated remote code execution (RCE) flaw in SmarterMail that is used in ransomware attacks.

https://www.bleepingcomputer.com/news/security/cisa-warns-of-smartermail-rce-flaw-used-in-ransomware-attacks/

A threat actor is compromising NGINX servers in a campaign that ...

2026-02-04T23:27:14Z

A threat actor is compromising NGINX servers in a campaign that hijacks user traffic and reroutes it through the attacker's backend infrastructure.

https://www.bleepingcomputer.com/news/security/hackers-compromise-nginx-servers-to-redirect-user-traffic/

Hackers have stolen the personal and contact information ...

2026-01-27T12:25:14Z

Hackers have stolen the personal and contact information belonging to over 29.8 million SoundCloud user accounts after breaching the audio streaming platform's systems.

https://www.bleepingcomputer.com/news/security/have-i-been-pwned-soundcloud-data-breach-impacts-298-million-accounts/

CISA has flagged a critical VMware vCenter Server vulnerability ...

2026-01-26T11:49:52Z

CISA has flagged a critical VMware vCenter Server vulnerability as actively exploited and ordered U.S. federal agencies to secure their servers within three weeks.

https://www.bleepingcomputer.com/news/security/cisa-says-critical-vmware-rce-flaw-now-actively-exploited/

Microsoft is investigating reports that some Windows 11 devices ...

2026-01-25T13:24:13Z

Microsoft is investigating reports that some Windows 11 devices are failing to boot with "UNMOUNTABLE_BOOT_VOLUME" errors after installing the January 2026 Patch Tuesday security updates.

https://www.bleepingcomputer.com/news/microsoft/microsoft-investigates-windows-11-boot-failures-after-january-updates/

Days after admins began reporting that their fully patched ...

2026-01-23T10:39:00Z

Days after admins began reporting that their fully patched firewalls are being hacked, Fortinet confirmed it's working to fully address a critical FortiCloud SSO authentication bypass vulnerability that should have already been patched since early December.

https://www.bleepingcomputer.com/news/security/fortinet-confirms-critical-forticloud-auth-bypass-not-fully-patched/

Fortinet admins are seeing attackers exploiting a patch bypass ...

2026-01-21T17:49:24Z

Fortinet admins are seeing attackers exploiting a patch bypass for a previously fixed FortiGate authentication bypass (CVE-2025-59718) to hack patched firewalls.

https://www.bleepingcomputer.com/news/security/fortinet-admins-report-patched-fortigate-firewalls-getting-hacked/

Microsoft has released PowerToys 0.97, with a new mouse utility ...

2026-01-20T16:33:46Z

Microsoft has released PowerToys 0.97, with a new mouse utility for multi-monitor setups and significant improvements to the Command Palette quick launcher.

https://www.bleepingcomputer.com/news/microsoft/microsoft-powertoys-adds-new-cursorwrap-mouse-teleport-tool/

Google appears to be testing a new feature that integrates Gemini ...

2026-01-15T01:30:13Z

Google appears to be testing a new feature that integrates Gemini into Chrome for Android, allowing you to use agentic browser capabilities on your mobile device.

https://www.bleepingcomputer.com/news/artificial-intelligence/google-plans-to-make-chrome-for-android-an-agentic-browser-with-gemini/

Google is rolling out 'Personal Intelligence,' a new ...

2026-01-15T00:00:12Z

Google is rolling out 'Personal Intelligence,' a new Gemini feature that pulls your data from Gmail, Photos, Google Search, and other products.

https://www.bleepingcomputer.com/news/artificial-intelligence/googles-personal-intelligence-links-gmail-photos-and-search-to-gemini/

Verizon Wireless is suffering a massive outage in the US, with ...

2026-01-14T18:27:41Z

Verizon Wireless is suffering a massive outage in the US, with customers reporting their phones stuck in SOS mode with no cellular service.

https://www.bleepingcomputer.com/news/mobile/verizon-wireless-outage-puts-phones-in-sos-mode-without-cell-service/

Microsoft has released Windows 11 KB5074109 and KB5073455 ...

2026-01-13T18:53:42Z

Microsoft has released Windows 11 KB5074109 and KB5073455 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features.

https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5074109-and-kb5073455-cumulative-updates-released/

EXCLUSIVE: Target's dev server offline after hackers claim to ...

2026-01-12T17:52:27Z

EXCLUSIVE: Target's dev server offline after hackers claim to steal source code - @Ax_Sharma

https://www.bleepingcomputer.com/news/security/targets-dev-server-offline-after-hackers-claim-to-steal-source-code/

Microsoft has started retiring the Microsoft Lens PDF scanner app ...

2026-01-12T15:48:57Z

Microsoft has started retiring the Microsoft Lens PDF scanner app for Android and iOS devices on Friday, January 9th, with plans to remove it from app stores next month.

https://www.bleepingcomputer.com/news/microsoft/microsoft-is-retiring-the-lens-scanner-app-for-ios-android/

Nearly 60,000 n8n instances exposed online remain unpatched ...

2026-01-12T14:06:11Z

Nearly 60,000 n8n instances exposed online remain unpatched against a maximum-severity vulnerability dubbed "Ni8mare."

https://www.bleepingcomputer.com/news/security/max-severity-ni8mare-flaw-impacts-nearly-60-000-n8n-instances/

Elon Musk-backed xAI has been missing in action for a while now, ...

2026-01-08T22:43:21Z

Elon Musk-backed xAI has been missing in action for a while now, but today, Musk teased a major upgrade for Grok alongside new products.

https://www.bleepingcomputer.com/news/artificial-intelligence/xai-teases-major-grok-upgrade-hints-at-grok-code-cli/

A maximum severity vulnerability dubbed "Ni8mare" allows ...

2026-01-07T17:41:25Z

A maximum severity vulnerability dubbed "Ni8mare" allows remote, unauthenticated attackers to take control over locally deployed instances of the N8N workflow automation platform.

https://www.bleepingcomputer.com/news/security/max-severity-ni8mare-flaw-lets-hackers-hijack-n8n-servers/

Brightspeed, one of the largest fiber broadband companies in the ...

2026-01-05T20:01:33Z

Brightspeed, one of the largest fiber broadband companies in the United States, is investigating security breach and data theft claims made by the Crimson Collective extortion gang.

https://www.bleepingcomputer.com/news/security/us-broadband-provider-brightspeed-investigates-breach-claims/

Fortinet has warned customers that threat actors are still ...

2025-12-29T11:16:18Z

Fortinet has warned customers that threat actors are still actively exploiting a critical FortiOS vulnerability that allows them to bypass two-factor authentication (2FA) when targeting vulnerable FortiGate firewalls.

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-5-year-old-fortios-2fa-bypass-still-exploited-in-attacks/

A new campaign dubbed 'GhostPoster' is hiding JavaScript ...

2025-12-16T22:18:02Z

A new campaign dubbed 'GhostPoster' is hiding JavaScript code in the image logo of malicious Firefox extensions counting more than 50,000 downloads, to monitor browser activity and plant a backdoor.

https://www.bleepingcomputer.com/news/security/ghostposter-attacks-hide-malicious-javascript-in-firefox-addon-logos/

Hackers are exploiting critical-severity vulnerabilities ...

2025-12-16T15:57:50Z

Hackers are exploiting critical-severity vulnerabilities affecting multiple Fortinet products to get unauthorized access to admin accounts and steal system configuration files.

https://www.bleepingcomputer.com/news/security/hackers-exploit-newly-patched-fortinet-auth-bypass-flaws/

An email scam is abusing abusing PayPal's ...

2025-12-14T16:06:27Z

An email scam is abusing abusing PayPal's "Subscriptions" billing feature to send legitimate PayPal emails that contain fake purchase notifications embedded in the Customer service URL field.

https://www.bleepingcomputer.com/news/security/beware-paypal-subscriptions-abused-to-send-fake-purchase-emails/

American IT software company Ivanti warned customers today to ...

2025-12-09T17:10:41Z

American IT software company Ivanti warned customers today to patch a newly disclosed vulnerability in its Endpoint Manager (EPM) solution that could allow attackers to execute code remotely.

https://www.bleepingcomputer.com/news/security/ivanti-warns-of-critical-endpoint-manager-code-execution-flaw/

Portugal has modified its cybercrime law to establish a legal ...

2025-12-07T15:10:14Z

Portugal has modified its cybercrime law to establish a legal safe harbor for good-faith security research and to make hacking non-punishable under certain strict conditions.

https://www.bleepingcomputer.com/news/security/portugal-updates-cybercrime-law-to-exempt-security-researchers/

Cloudflare is down, as websites are crashing with a 500 Internal ...

2025-12-05T09:02:20Z

Cloudflare is down, as websites are crashing with a 500 Internal Server Error.

https://www.bleepingcomputer.com/news/technology/cloudflare-down-websites-offline-with-500-internal-server-error/

Microsoft is investigating and working to resolve a known ...

2025-12-04T13:18:24Z

Microsoft is investigating and working to resolve a known issue that prevents customers from downloading Microsoft 365 desktop apps from the Microsoft 365 homepage.

https://www.bleepingcomputer.com/news/microsoft/microsoft-bug-in-microsoft-365-license-checks-blocks-desktop-app-downloads/

Attackers are exploiting a critical-severity privilege escalation ...

2025-12-03T21:31:34Z

Attackers are exploiting a critical-severity privilege escalation vulnerability (CVE-2025-8489) in the King Addons for Elementor plugin for WordPress, which lets them obtain administrative permissions during the registration process.

https://www.bleepingcomputer.com/news/security/critical-flaw-in-wordpress-add-on-for-elementor-exploited-in-attacks/

Microsoft warns that Windows 11 updates released since August may ...

2025-11-28T18:07:34Z

Microsoft warns that Windows 11 updates released since August may cause the password sign-in option to disappear from the lock screen options.

https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-updates-hide-password-icon-on-lock-screen/

A new Mirai-based botnet malware named 'ShadowV2' has ...

2025-11-26T22:24:35Z

A new Mirai-based botnet malware named 'ShadowV2' has been observed targeting IoT devices from D-Link, TP-Link, and other vendors with exploits for known vulnerabilities.

https://www.bleepingcomputer.com/news/security/new-shadowv2-botnet-malware-used-aws-outage-as-a-test-opportunity/

Tor has announced improved encryption and security for the ...

2025-11-25T17:09:37Z

Tor has announced improved encryption and security for the circuit traffic by replacing the old tor1 relay encryption algorithm with a new design called Counter Galois Onion (CGO).

https://www.bleepingcomputer.com/news/security/tor-switches-to-new-counter-galois-onion-relay-encryption-algorithm/

Microsoft has warned IT administrators to prepare for the removal ...

2025-11-24T11:47:18Z

Microsoft has warned IT administrators to prepare for the removal of Windows Internet Name Service (WINS) from Windows Server releases starting in November 2034.

https://www.bleepingcomputer.com/news/microsoft/microsoft-to-remove-wins-support-after-windows-server-2025/

Microsoft has released an out-of-band cumulative update to fix a ...

2025-11-21T18:02:20Z

Microsoft has released an out-of-band cumulative update to fix a known issue causing the November 2025 KB5068966 hotpatch update to reinstall on Windows 11 systems repeatedly.

https://www.bleepingcomputer.com/news/microsoft/microsoft-out-of-band-update-fixes-windows-11-hotpatch-install-loop/

CrowdStrike says it caught an insider sharing screenshots taken ...

2025-11-21T16:48:56Z

CrowdStrike says it caught an insider sharing screenshots taken on internal systems with unnamed threat actors.

https://www.bleepingcomputer.com/news/security/crowdstrike-catches-insider-feeding-information-to-hackers/

D-Link is warning of three remotely exploitable command execution ...

2025-11-20T15:39:12Z

D-Link is warning of three remotely exploitable command execution vulnerabilities that affect all models and hardware revisions of its DIR-878 router, which has reached end-of-service but is still available in several markets.

https://www.bleepingcomputer.com/news/security/d-link-warns-of-new-rce-flaws-in-end-of-life-dir-878-routers/

The US, UK, and Australia sanction Media Land, a Russian ...

2025-11-19T16:44:02Z

The US, UK, and Australia sanction Media Land, a Russian bulletproof hosting provider accused of supporting multiple ransomware gangs, including LockBit, BlackSuit, and Play.

https://www.bleepingcomputer.com/news/security/us-sanctions-russian-bulletproof-hosting-provider-media-land-over-ransomware-ties/

Cloudflare is investigating an outage affecting its global ...

2025-11-18T12:25:13Z

Cloudflare is investigating an outage affecting its global network services, with users encountering "internal server error" messages when attempting to access affected websites and online platforms.

https://www.bleepingcomputer.com/news/technology/cloudflare-hit-by-outage-affecting-global-network-services/

Fortinet has silently patched a critical zero-day vulnerability ...

2025-11-14T17:00:57Z

Fortinet has silently patched a critical zero-day vulnerability in its FortiWeb web application firewall, which is now being widely exploited.

https://www.bleepingcomputer.com/news/security/fortinet-confirms-silent-patch-for-fortiweb-zero-day-exploited-in-attacks/

DoorDash has disclosed a data breach that hit the food delivery ...

2025-11-14T04:38:59Z

DoorDash has disclosed a data breach that hit the food delivery platform this October. Beginning yesterday evening, DoorDash, which serves millions of customers across the U.S., Canada, Australia, and New Zealand, started emailing those impacted by the newly disclosed security incident.

https://www.bleepingcomputer.com/news/security/doordash-hit-by-yet-another-data-breach-this-october/

The DanaBot malware has returned with a new version observed in ...

2025-11-12T16:35:16Z

The DanaBot malware has returned with a new version observed in attacks, six-months after law enforcement's Operation Endgame disrupted its activity in May.

https://www.bleepingcomputer.com/news/security/danabot-malware-is-back-to-infecting-windows-after-6-month-break/

The Rhadamanthys infostealer operation has been disrupted, with ...

2025-11-12T00:14:48Z

The Rhadamanthys infostealer operation has been disrupted, with numerous "customers" of the malware-as-a-service reporting that they no longer have access to their servers.

https://www.bleepingcomputer.com/news/security/rhadamanthys-infostealer-disrupted-as-cybercriminals-lose-server-access/

Microsoft has released an emergency out-of-band update to address ...

2025-11-11T18:28:32Z

Microsoft has released an emergency out-of-band update to address a known issue preventing Windows 10 users from enrolling in the Extended Security Updates (ESU) program.

https://www.bleepingcomputer.com/news/microsoft/microsoft-emergency-windows-10-update-fixes-esu-enrollment-bug/

SonicWall's investigation into the September security breach ...

2025-11-05T17:13:22Z

SonicWall's investigation into the September security breach that exposed customers' firewall configuration backup files concludes that state-sponsored hackers were behind the attack.

https://www.bleepingcomputer.com/news/security/sonicwall-says-state-sponsored-hackers-behind-security-breach-in-september/

Threat actors are actively exploiting a critical vulnerability in ...

2025-11-04T21:47:05Z

Threat actors are actively exploiting a critical vulnerability in the Post SMTP plugin installed on more than 400,000 WordPress sites, to take complete control by hijacking administrator accounts.

https://www.bleepingcomputer.com/news/security/hackers-exploit-wordpress-plugin-post-smtp-to-hijack-admin-accounts/

Microsoft says the October 2025 updates trigger incorrect ...

2025-11-04T13:31:21Z

Microsoft says the October 2025 updates trigger incorrect end-of-support warnings on Windows 10 systems with active security coverage or still under active support.

https://www.bleepingcomputer.com/news/microsoft/windows-10-update-bug-triggers-incorrect-end-of-support-alerts/

An out-of-band (OOB) security update that patches an actively ...

2025-11-03T15:22:29Z

An out-of-band (OOB) security update that patches an actively exploited Windows Server Update Service (WSUS) vulnerability has broken hotpatching on some Windows Server 2025 devices.

https://www.bleepingcomputer.com/news/microsoft/microsoft-patch-for-wsus-flaw-disabled-windows-server-hotpatching/

OpenAI is planning to introduce ads on ChatGPT, as it continues ...

2025-11-01T20:00:14Z

OpenAI is planning to introduce ads on ChatGPT, as it continues to struggle with revenue from paid users.

https://www.bleepingcomputer.com/news/artificial-intelligence/openai-is-going-meta-route-as-it-considers-memory-based-ads-on-chatgpt/

The Canadian Centre for Cyber Security warned today that ...

2025-10-29T19:03:23Z

The Canadian Centre for Cyber Security warned today that hacktivists have breached critical infrastructure systems multiple times across the country, allowing them to modify industrial controls that could have led to dangerous conditions.

https://www.bleepingcomputer.com/news/security/canada-says-hacktivists-breached-water-and-energy-facilities/

Microsoft is investigating an ongoing DNS outage affecting ...

2025-10-29T16:49:51Z

Microsoft is investigating an ongoing DNS outage affecting customers worldwide, preventing them from accessing Microsoft Azure and Microsoft 365 services.

https://www.bleepingcomputer.com/news/microsoft/microsoft-dns-outage-impacts-azure-and-microsoft-365-services/

Microsoft has resolved a known issue that caused Windows updates ...

2025-10-29T14:33:12Z

Microsoft has resolved a known issue that caused Windows updates to fail, leading to 0x800F081F errors on Windows 11 24H2 systems.

https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-0x800f081f-errors-causing-windows-update-failures/

OpenAI's Atlas and Perplexity's Comet browsers are ...

2025-10-23T14:09:34Z

OpenAI's Atlas and Perplexity's Comet browsers are vulnerable to AI sidebar spoofing attacks that mislead users into following fake AI-generated instructions.

https://www.bleepingcomputer.com/news/security/spoofed-ai-sidebars-can-trick-atlas-comet-users-into-dangerous-actions/

A new malicious campaign is targeting macOS developers with fake ...

2025-10-18T15:02:36Z

A new malicious campaign is targeting macOS developers with fake Homebrew, LogMeIn, and TradingView platforms that deliver infostealing malware like AMOS (Atomic macOS Stealer) and Odyssey.

https://www.bleepingcomputer.com/news/security/google-ads-for-fake-homebrew-logmein-sites-push-infostealers/

CISA has warned that attackers are actively exploiting a ...

2025-10-16T14:28:51Z

CISA has warned that attackers are actively exploiting a maximum-severity vulnerability in Adobe Experience Manager to execute code on unpatched systems.

https://www.bleepingcomputer.com/news/security/cisa-maximum-severity-adobe-flaw-now-exploited-in-attacks/

Microsoft says Windows 11 users can now start a conversation with ...

2025-10-16T13:00:12Z

Microsoft says Windows 11 users can now start a conversation with Copilot by saying the &quot;Hey Copilot&quot; wake word.

https://www.bleepingcomputer.com/news/security/microsoft-adds-hey-copilot-wake-word-to-windows-11-pcs/

An ongoing phishing campaign is targeting LastPass and Bitwarden ...

2025-10-15T19:22:23Z

An ongoing phishing campaign is targeting LastPass and Bitwarden users with fake emails claiming that the companies were hacked, urging them to download a supposedly more secure desktop version of the password manager.

https://www.bleepingcomputer.com/news/security/fake-lastpass-bitwarden-breach-alerts-lead-to-pc-hijacks/

Oracle has issued an emergency security update over the weekend ...

2025-10-13T14:42:32Z

Oracle has issued an emergency security update over the weekend to patch another E-Business Suite (EBS) vulnerability that can be exploited remotely by unauthenticated attackers.

https://www.bleepingcomputer.com/news/security/oracle-releases-emergency-patch-for-new-e-business-suite-flaw/

Google is updating the Chrome web browser to automatically revoke ...

2025-10-10T17:00:14Z

Google is updating the Chrome web browser to automatically revoke notification permissions for websites that haven't been visited recently, to reduce alert overload.

https://www.bleepingcomputer.com/news/google/google-chrome-to-revoke-notification-access-for-inactive-sites/

SonicWall has confirmed that all customers that used the ...

2025-10-09T14:13:19Z

SonicWall has confirmed that all customers that used the company's cloud backup service are affected by the security breach last month.

https://www.bleepingcomputer.com/news/security/sonicwall-firewall-configs-stolen-for-all-cloud-backup-customers/

Sports betting giant DraftKings has notified an undisclosed ...

2025-10-07T19:09:51Z

Sports betting giant DraftKings has notified an undisclosed number of customers that their accounts had been hacked in a recent wave of credential stuffing attacks.

https://www.bleepingcomputer.com/news/security/draftkings-warns-of-account-breaches-in-credential-stuffing-attacks/

The Metropolitan Police has secured a conviction in what is ...

2025-09-29T22:17:02Z

The Metropolitan Police has secured a conviction in what is believed to be the world's largest cryptocurrency seizure, valued at more than £5.5 billion ($7.3 billion).

https://www.bleepingcomputer.com/news/security/uk-convicts-bitcoin-queen-in-worlds-largest-cryptocurrency-seizure/

Cisco warned customers today to patch two zero-day ...

2025-09-25T16:49:51Z

Cisco warned customers today to patch two zero-day vulnerabilities that are actively being exploited in attacks and impact the company's firewall software.

https://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-firewall-zero-days-exploited-in-attacks/

New York-based venture capital and private equity firm Insight ...

2025-09-17T17:51:17Z

New York-based venture capital and private equity firm Insight Partners is notifying thousands of individuals whose personal information was stolen in a ransomware attack.

https://www.bleepingcomputer.com/news/security/vc-giant-insight-partners-warns-thousands-after-ransomware-breach/

Security researchers have identified at least 187 npm packages ...

2025-09-16T16:47:02Z

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated worm-style campaign dubbed 'Shai-Hulud' started yesterday with the compromise of the Control (npub1xgx…xa3d)/tinycolor npm package, and has now expanded to CrowdStrike's npm namespace.

https://www.bleepingcomputer.com/news/security/self-propagating-supply-chain-attack-hits-187-npm-packages/

Next month, Microsoft will begin automatically installing the ...

2025-09-15T15:59:41Z

Next month, Microsoft will begin automatically installing the Microsoft 365 Copilot app on Windows devices that have the Microsoft 365 desktop client apps.

https://www.bleepingcomputer.com/news/microsoft/microsoft-to-force-install-the-microsoft-365-copilot-app-in-october/

The largest supply-chain compromise in the history of the NPM ...

2025-09-10T17:56:39Z

The largest supply-chain compromise in the history of the NPM ecosystem has impacted roughly 10% of all cloud environments, but attackers made little profit off it.

https://www.bleepingcomputer.com/news/security/hackers-left-empty-handed-after-massive-npm-supply-chain-attack/

Google plans to make it easier for users to access AI mode by ...

2025-09-08T00:08:15Z

Google plans to make it easier for users to access AI mode by allowing them to set it as the default, replacing the traditional blue links.

https://www.bleepingcomputer.com/news/google/google-to-make-it-easier-to-access-ai-mode-as-default/

Threat actors are using Grok, X's built-in AI assistant, to ...

2025-09-03T22:01:53Z

Threat actors are using Grok, X's built-in AI assistant, to bypass link posting restrictions that the platform introduced to reduce malicious advertising.

https://www.bleepingcomputer.com/news/security/threat-actors-abuse-xs-grok-ai-to-spread-malicious-links/

Hackers tried to steal $130 million from Evertec's Brazilian ...

2025-09-02T22:34:04Z

Hackers tried to steal $130 million from Evertec's Brazilian subsidiary Sinqia S.A.after gaining unauthorized access to its environment on the central bank's real-time payment system (Pix).

https://www.bleepingcomputer.com/news/security/hackers-breach-fintech-firm-in-attempted-130m-bank-heist/

Microsoft says that Word for Windows will soon enable autosave ...

2025-08-28T17:00:46Z

Microsoft says that Word for Windows will soon enable autosave and automatically save all new documents to the cloud by default.

https://www.bleepingcomputer.com/news/microsoft/microsoft-word-will-save-your-files-to-the-cloud-by-default/

Microsoft warns that a threat actor tracked as Storm-0501 has ...

2025-08-27T22:38:34Z

Microsoft warns that a threat actor tracked as Storm-0501 has evolved its operations, shifting away from encrypting devices with ransomware to focusing on cloud-based encryption, data theft, and extortion.

https://www.bleepingcomputer.com/news/security/storm-0501-hackers-shift-to-ransomware-attacks-in-the-cloud/

Hackers breached sales automation platform Salesloft to steal ...

2025-08-26T19:13:12Z

Hackers breached sales automation platform Salesloft to steal OAuth and refresh tokens from its Drift chat agent integration with Salesforce to pivot to customer environments and exfiltrate data. The ShinyHunters extortion group claims responsibility for these additional Salesforce attacks.

https://www.bleepingcomputer.com/news/security/salesloft-breached-to-steal-oauth-tokens-for-salesforce-data-theft-attacks/

The Federal Trade Commission (FTC) is warning major U.S. tech ...

2025-08-23T15:22:11Z

The Federal Trade Commission (FTC) is warning major U.S. tech companies against yielding to foreign government demands that weaken data security, compromise encryption, or impose censorship on their platforms.

https://www.bleepingcomputer.com/news/security/ftc-warns-tech-giants-not-to-bow-to-foreign-pressure-on-encryption/

Microsoft has confirmed that the August 2025 Windows security ...

2025-08-19T13:39:49Z

Microsoft has confirmed that the August 2025 Windows security updates are breaking reset and recovery operations on systems running Windows 10 and older versions of Windows 11.

https://www.bleepingcomputer.com/news/microsoft/microsoft-august-security-updates-break-windows-recovery-reset/

A recent ruling from Germany's Federal Supreme Court (BGH) ...

2025-08-18T15:40:00Z

A recent ruling from Germany's Federal Supreme Court (BGH) has revived a legal battle over whether browser-based ad blockers infringe copyright, raising fears about a potential ban of the tools in the country.

https://www.bleepingcomputer.com/news/legal/mozilla-warns-germany-could-soon-declare-ad-blockers-illegal/

The Office of the Pennsylvania Attorney General has announced ...

2025-08-13T16:26:15Z

The Office of the Pennsylvania Attorney General has announced that a recent cyberattack has taken down its systems, including landline phone lines and email accounts.

https://www.bleepingcomputer.com/news/security/pennsylvania-attorney-generals-email-site-down-after-cyberattack/

Microsoft announced today that systems running Home and Pro ...

2025-08-12T13:13:26Z

Microsoft announced today that systems running Home and Pro editions of Windows 11 23H2 will stop receiving updates in three months.

https://www.bleepingcomputer.com/news/microsoft/windows-11-23h2-home-and-pro-reach-end-of-support-in-november/

Air France and KLM announced on Wednesday that attackers had ...

2025-08-07T08:41:46Z

Air France and KLM announced on Wednesday that attackers had breached a customer service platform and stolen the data of an undisclosed number of customers.

https://www.bleepingcomputer.com/news/security/air-france-and-klm-disclose-data-breaches-impacting-customers/

A newly discovered Linux malware, which has evaded detection for ...

2025-08-04T14:42:24Z

A newly discovered Linux malware, which has evaded detection for over a year, allows attackers to gain persistent SSH access and bypass authentication on compromised systems.

https://www.bleepingcomputer.com/news/security/new-plague-malware-backdoors-linux-devices-removes-ssh-session-traces/

Threat actors are actively exploiting a critical unauthenticated ...

2025-07-30T17:41:02Z

Threat actors are actively exploiting a critical unauthenticated arbitrary file upload vulnerability in the WordPress theme 'Alone,' to achieve remote code execution and perform a full site takeover.

https://www.bleepingcomputer.com/news/security/hackers-actively-exploit-critical-rce-in-wordpress-alone-theme/

The Tea app data breach has grown into an even larger leak, with ...

2025-07-28T20:55:25Z

The Tea app data breach has grown into an even larger leak, with the stolen data now shared on hacking forums and a second database discovered that allegedly contains 1.1 million private messages exchanged between the app's members.

https://www.bleepingcomputer.com/news/security/tea-app-leak-worsens-with-second-database-exposing-user-chats/

The Internet Archive has become an official U.S. federal ...

2025-07-28T15:19:46Z

The Internet Archive has become an official U.S. federal depository library, providing online users with access to archived congressional bills, laws, regulations, presidential documents, and other U.S. government documents.

https://www.bleepingcomputer.com/news/technology/internet-archive-is-now-a-us-federal-depository-library/

Law enforcement has seized the dark web leak sites of the ...

2025-07-24T21:34:27Z

Law enforcement has seized the dark web leak sites of the BlackSuit ransomware operation, which has targeted and breached the networks of hundreds of organizations worldwide over the past several years.

https://www.bleepingcomputer.com/news/security/law-enforcement-seizes-blacksuit-ransomware-leak-sites/

A new Linux malware named Koske may have been developed with ...

2025-07-24T20:54:27Z

A new Linux malware named Koske may have been developed with artificial intelligence and is using seemingly benign JPEG images of panda bears to deploy malware directly into system memory.

https://www.bleepingcomputer.com/news/security/new-koske-linux-malware-hides-in-cute-panda-images/

Hewlett-Packard Enterprise (HPE) is warning of hardcoded ...

2025-07-20T14:10:13Z

Hewlett-Packard Enterprise (HPE) is warning of hardcoded credentials in Aruba Instant On Access Points that allow attackers to bypass normal device authentication and access the web interface.

https://www.bleepingcomputer.com/news/security/hpe-warns-of-hardcoded-passwords-in-aruba-access-points/

Popular JavaScript libraries eslint-config-prettier and ...

2025-07-19T12:51:39Z

Popular JavaScript libraries eslint-config-prettier and eslint-plugin-prettier were hijacked this week and turned into malware droppers, in a supply chain attack achieved via targeted phishing and credential theft.

https://www.bleepingcomputer.com/news/security/popular-npm-linter-packages-hijacked-via-phishing-to-drop-malware/