Cyber
Drupal warns admins to patch critical Commerce Core access bypass flaw
Drupal urges administrators to immediately patch a critical access bypass vulnerability tracked as CVE-2026-118539 in Commerce Core.
Tag
#BleepingComputer
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
356 articles
Cyber
Polymarket hacked: prediction market platform loses $2.5 million
Prediction market platform Polymarket suffered a security breach via a third-party service, resulting in the theft of about $2.5 million in crypto.
AI
OpenAI doubles ChatGPT Pro usage limits following backlash
OpenAI has decided not to cut usage limits for ChatGPT Pro plans after a wave of user backlash, ensuring full access for premium subscribers.
Cyber
Binance probes potential $5.8 billion crypto-theft hack
Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets.
Cyber
Hugging Face malware campaign returns to hijack GPUs for crypto mining
A crypto-mining campaign abusing Hugging Face models has returned just days after being taken down, targeting GPU servers.
Cyber
Polymarket Halts Trading After Crypto-Draining Script Breach
Prediction market platform Polymarket paused trading on Thursday following a third-party service breach that drained approximately $2.5 million in assets.
Cyber
Hackers Exploit Cisco SD-WAN Flaw to Deploy Custom KeyDrift Malware
A newly tracked APT group, UAT-11473, is exploiting the CVE-2026-20127 authentication-bypass flaw in Cisco SD-WAN Controllers to deploy the KeyDrift malware.
Cyber
Chrome extensions with 13.4 million installs caught hijacking searches
A total of 319 Chrome extensions with 13.4 million installations were caught hijacking user searches to generate ad revenue for Bing and Yahoo.
AI
How AI Agents Operate in Your Browser and Why Traditional Security Struggles
Keep Aware examines how AI agents interact with corporate apps and browsers while mimicking legitimate human employees.
Cyber
Cisco Patches Zero-Day Flaw Exploited to Crash SSL VPN Devices
Cisco has released urgent security updates to address a zero-day denial-of-service vulnerability in ASA and FTD software actively exploited in attacks.
Cyber
US Law Enforcement Seizes Virtualine Bulletproof Hosting Tied to Cybercrime
American authorities have seized the main domain of Virtualine, a bulletproof hosting service heavily used by ransomware operators and cybercriminals.
Tech
Discord to let search engines index public server messages
The platform is allowing search engines to index discussions in Discoverable Servers, making messages accessible on the web without an account.
Cyber
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Chinese state-sponsored threat group Volt Typhoon is utilizing the 'Silent Train' framework to conceal attacks targeting high-value systems.
AI
Beyond PHP2Shell: Why blast radius matters more than a CVSS score
PHP2Shell highlights how quickly attackers exploit critical flaws before patching. Token Security explains why limiting access is crucial to reducing breach damage.
Cyber
InfraTrust report warns of exploited flaws in critical network infrastructure
Attackers are actively exploiting vulnerabilities in critical network infrastructure, with PHP flaws known as PHP2Shell putting web management interfaces of firewalls and VPNs at risk.
Cyber
CISA warns that hackers are now exploiting critical Node2Shell flaw
The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that hackers have started exploiting a critical Brotli vulnerability known as Node2Shell.
Cyber
Nefilim and Hive ransomware affiliate gets 70 months in prison
A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals and government entities.
Cyber
Japan's GMO Urges Customers to Shut Down PCs Amid Ransomware Threat
The GMO Group has asked customers to disconnect from the internet and shut down computers following a security breach affecting Onamae Desktop Cloud.
Cyber
Hackers Hijack Convertr Analytics Script to Steal Payment Card Data
A credit card skimming group compromised Convertr's analytics script to steal payment card details from online shoppers during checkout.
Cyber
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released emergency Windows updates to revoke trust in compromised eMudhra certificates, protecting systems without automatic updates.
Cyber
Warp discloses breach exposing AI agent logs and user telemetry data
The popular Warp agentic development environment suffered a security breach involving a third-party vendor, exposing user telemetry and AI agent decision logs.
Cyber
New Threat Ranking Highlights Biggest Security Risks Facing Businesses
Huntress Labs has released a new threat ranking detailing how attackers abuse legitimate IT tools and Microsoft 365 to bypass traditional defenses.
Cyber
Tailscale warns of SSH flaws allowing root privilege escalation
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could lead to credential theft and root privilege escalation.
Cyber
Apple Backports Critical Security Patches to Older iPhones and iPads
Apple has extended crucial security patches to older iPhones and iPads to fix a zero-day bug used in sophisticated attacks.