Cyber
MFA's Weakest Link: Account Recovery Becomes the New Attack Path
While MFA makes account takeover harder, attackers are increasingly targeting password resets and recovery processes.
Tag
#BleepingComputer
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
356 articles
Cyber
New Microsoft Defender 'ShieldCrash' Zero-Day Grants SYSTEM Access
An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named ShieldCrash following the September 2026 Patch Tuesday updates.
Cyber
Hackers Breach F5 BIG-IP APM Devices to Deploy Linux Rootkit
A sophisticated Linux rootkit targeting F5 BIG-IP APM environments can intercept PHP file loading and inject fileless web shells directly into memory.
Cyber
The EU CRA's Real Question: What Shipped, and When Did You Know?
The EU Cyber Resilience Act vulnerability reporting requirements take effect, giving software vendors as little as 24 hours to report active flaws.
IT
Microsoft releases Windows 11 cumulative updates KB5124008 and KB5122880
Microsoft has rolled out cumulative updates KB5124008 and KB5122880 for Windows 11 versions 25H2, 24H2, and 23H2 with security fixes.
AI
OpenAI investigating ChatGPT image generation errors and upload delays
Users are experiencing failures with ChatGPT image generation and file uploads as OpenAI actively investigates the ongoing service disruption.
Cyber
SAP warns of maximum severity OVERPASS kernel vulnerability
SAP has addressed 20 vulnerabilities across multiple products in its September security updates, including a maximum-severity memory corruption flaw in the SAP Kernel code.
AI
OpenAI's GPT-6 Astra can detect zero-days but poses monitoring challenges
OpenAI confirms GPT-6 Astra has reached the critical level for cybersecurity capabilities, introducing new monitoring hurdles.
IT
Microsoft: Windows Server 2025 changes causing app crashes
Microsoft warned customers that recent memory management changes in Windows Server 2025 may cause application crashes.
Cyber
Hackers Build AI Frameworks for Widescale Credential Theft
Threat actors are increasingly shifting from AI-powered coding assistants to multi-agent frameworks that automate every stage of an attack.
Cyber
220 million traveler records exposed in Vietnam-linked APIS leak
An exposed Advance Passenger Information System database has leaked over 200 million records containing sensitive passenger and crew details.
Cyber
Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
A critical zero-day vulnerability dubbed StyleSmuggler affecting all versions of Magento and Adobe Commerce is being actively exploited in attacks.
Cyber
BigBear phishing service bypassed MFA at 258 organizations
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal over 5,000 Microsoft 365 credentials.
Cyber
Hackers exploit new MikroTik RouterOS flaws to hijack routers
Cybercriminals are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers with exposed SSH services.
AI
ChatGPT is getting a new feature to mimic your personal writing style
OpenAI is testing a new Writing Style feature for ChatGPT that learns from your connected apps to replicate how you write.
Cyber
ConnectWise warns of new ScreenConnect flaw without patch
ConnectWise has shared temporary mitigation measures for a new ScreenConnect vulnerability ahead of an official patch expected later this week.
AI
ChatGPT Astra is Now Rolling Out to $20 Plus Subscribers
OpenAI has officially started rolling out its most powerful ChatGPT Astra model to users with the $20 Plus subscription.
Cyber
Attackers conceal phishing lures using invisible Unicode characters
Threat actors have adopted the ASCII smuggling technique in phishing campaigns to evade email security filters.
Cyber
Hackers Use Blockchain to Deliver ClickFix Payloads via Thousands of Compromised Sites
A massive cybercriminal operation has compromised over 5,400 small-business websites to distribute ClickFix payloads stored within BNB Smart Chain smart contracts.
AI
OpenAI admits it didn't disclose rogue AI wiki hijacking incident
OpenAI has acknowledged that it failed to disclose an incident where autonomous AI agents hijacked a German wiki, created 18,000 posts, and bypassed restrictions.
Cyber
IDScan Sued Following Alleged Data Breach Affecting 153 Million Drivers
Identity verification company IDScan is facing multiple lawsuits after hackers allegedly breached its systems and offered to sell over 153 million driver's licenses.
Cyber
Critical Citrix NetScaler Vulnerability Exploited in Cyber Attacks
A critical vulnerability in Citrix NetScaler has become a target for cyber attackers.
Cyber
CrowdStrike 'FalconFlank' zero-day vulnerability: SYSTEM privilege escalation
An anonymous security researcher has unveiled the 'FalconFlank' zero-day exploit, allowing privilege escalation on Windows systems.
IT
Exchange Online outage triggers email delays and 'Server busy' errors
An ongoing Exchange Online service disruption is delaying messages to and from external domains and prompting users to see 'Server busy' notifications.