Cyber
Acronis warns of actively exploited flaw in cPanel backup plugin
Acronis has disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WHM, and Plesk that is actively being exploited.
Tag
#BleepingComputer
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
356 articles
Cyber
Malicious Admin Menu Editor Pro Plugin Backdoors 1,500 WordPress Sites
A compromise of the Admin Menu Editor Pro plugin maintainer's website led to malicious updates creating hidden admin accounts across thousands of WordPress sites.
Cyber
Hackers Target WordPress Sites via WooCommerce Plugin
Cybercriminals are actively exploiting a critical vulnerability in a popular WordPress plugin to upload PHP backdoors to target sites.
Cyber
CISA: Critical VMware RCE flaw now exploited by ransomware gangs
The U.S. CISA has warned that ransomware gangs have joined ongoing attacks exploiting a critical VMware vCenter vulnerability.
Cyber
Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco urged customers to patch a critical Secure Email Gateway zero-day security flaw actively exploited in attacks.
Cyber
Revolut Discloses Data Breach After Social Engineering Incident
Fintech company Revolut has revealed a data breach affecting a number of customers after falling victim to a threat actor impersonating a government agency.
IT
Microsoft: September updates cause RDS failures on Windows Server
Microsoft has confirmed reports that the September 2026 security updates cause Remote Desktop Services (RDS) failures on Windows Server systems.
Cyber
Hackers Target Exposed Vite Dev Servers to Steal AWS, Azure Secrets
A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials from AWS and Azure deployments.
Cyber
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
The official HBO Max Reddit account was compromised to push malicious ads executing ClickFix attacks that target Windows and macOS devices.
Cyber
Twitch Extension with 30K Installs Exposes Users' OAuth Tokens
A browser extension named JeetBot, available in official stores, was found silently exfiltrating Twitch OAuth session tokens to a commercial bot service.
Cyber
Homebrew 7.0.0 Released with Built-in GUI and Enhanced Security Controls
The popular Homebrew package manager has launched version 7.0.0 featuring the native BrewUI graphical interface and a vulnerability scanner.
IT
Microsoft releases emergency Windows updates to fix RDS failures
Microsoft has rolled out emergency out-of-band Windows updates to resolve Remote Desktop Services failures and related issues.
Cyber
New Android malware encrypts files, steals data, and harasses victims
A newly discovered Android threat named Mantax Otax combines ransomware and spyware features to compromise mobile devices.
Cyber
Surfshark discloses unauthorized access to internal test servers and proxy infrastructure
Popular VPN provider Surfshark revealed that hackers accessed one of its internal test servers following a configuration error.
Cyber
AI-Powered Cyberattack Exploits PaperCut Flaws Across 395 Organizations
A threat actor leveraged hundreds of AI agents to orchestrate a global exploitation campaign targeting vulnerable PaperCut NG/MF servers.
Cyber
Cisco FMC Flaws Exploited by Ransomware Gang and State-Sponsored Hackers
Cisco Talos reveals that two recently patched Secure Firewall Management Center vulnerabilities have been actively exploited by three threat clusters.
Cyber
IDScan confirms breach tied to 153 million stolen driver’s licenses
Identity verification company IDScan has confirmed that hackers accessed data stored in its cloud platform following massive leak reports.
Cyber
Top 4 Cyber Threats: What a Quarter of Alert Investigations Revealed
Prophet Security breaks down the main attack patterns targeting user identity between May and July 2026.
Cyber
New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
Multiple cyber-espionage groups deployed an exploit kit dubbed BlueMoon that leveraged zero-day vulnerabilities in Microsoft Windows and Google Chrome.
Cyber
Trezor warns users of email provider breach and ongoing phishing attacks
Trezor has alerted its customers that threat actors who breached its third-party email provider are targeting them with phishing campaigns.
Cyber
AdaptHealth Confirms 4.1 Million People Exposed in July Cyberattack
Healthcare company AdaptHealth has confirmed that the data of 4.1 million people was exposed during a July cyberattack attributed to ShinyHunters.
Cyber
Cisco confirms CVE-2026-20079 Secure FMC flaw is actively exploited
Cisco has confirmed that a maximum-severity authentication bypass vulnerability in its Secure FMC software is being actively leveraged in attacks.
AI
US accuses Chinese firms of extracting billions of tokens from frontier AI models
US cybersecurity agencies report that six Chinese AI companies conducted industrial-scale distillation attacks on American frontier models.
Cyber
Veradigm Warns of Patient Data Breach Following Ransomware Gang Attack
Healthcare technology company Veradigm disclosed a data breach affecting patient personal information following a cybersecurity incident at a third-party vendor.