Cyber
Google warns of new Chrome zero-day flaw exploited in attacks
Google has released a Chrome update to fix an actively exploited high‑severity zero‑day vulnerability in the V8 engine and eleven other flaws.
Tag
#BleepingComputer
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
356 articles
Cyber
Coder's registry infrastructure compromised to push malicious modules
Attackers compromised Coder's Cloudflare infrastructure to distribute malicious Terraform modules designed to steal credentials.
Cyber
HPE patches critical ArubaOS-CX remote code execution flaw
Hewlett Packard Enterprise has released patches addressing a critical remote code execution vulnerability in the ArubaOS-CX network operating system.
AI
OpenAI confirms ChatGPT outage ahead of 'Astra' model launch
Users are reporting errors across nearly every major ChatGPT and Codex feature as a major outage unfolds.
Cyber
Critical Elementor Pro Flaw Exploited to Take Over WordPress Sites
A newly patched critical vulnerability in the Elementor Pro WordPress plugin is being actively exploited to deliver webshells and execute commands.
AI
Anthropic confirms Claude is down, multiple models affected
Popular AI service Claude is experiencing a major outage, with users encountering elevated error rates across multiple models.
Cyber
Your Employee’s Password Appeared in an Infostealer Log. Now What?
Infostealers can expose authenticated sessions and bypass MFA. Experts explain how defenders can prioritize compromised identities and prevent account takeovers.
Cyber
Plex urges users to patch security vulnerabilities immediately
Plex has issued an urgent call for users to update desktop clients and media servers to address multiple security flaws.
IT
WordPress backup plugin flaw exposes millions of sites to takeover attacks
An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin leaves millions of WordPress sites vulnerable to remote takeover.
Cyber
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability in JFrog Artifactory is being actively exploited in attacks to forge administrative access tokens.
Cyber
Ransomware protection for MSPs: A 6-point checklist for faster recovery
Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test across client environments to ensure faster operational recovery.
Cyber
Dropbox accounts breached through Lenovo email verification flaw
Dropbox is warning some users that an unauthorized party accessed their accounts by exploiting a flaw in Lenovo's email verification process to register fraudulent Lenovo IDs.
Cyber
SonicWall Warns of Actively Exploited SMA1000 Zero-Day Flaws
Threat actors are actively exploiting two new zero-day vulnerabilities in SonicWall SMA1000 series devices to execute remote code.
Cyber
Hackers Abuse Faronics Deploy Admin Tool to Install ScreenConnect
Threat actors are weaponizing the legitimate Faronics Deploy endpoint-management platform to deploy ScreenConnect and gain remote access.
AI
Critical Langflow Flaw Exploited to Steal OpenAI and AWS Keys
Threat actors are actively exploiting an unauthenticated remote code execution vulnerability in the Langflow AI framework to steal credentials and API keys.
Cyber
Hackers Push Malicious Virtualizor Update in BGP Hijacking Attack
Cybercriminals hijacked BGP routing for Virtualizor VPS management software to redirect update requests and push malicious code.
Cyber
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks
Thousands of internet-exposed Microsoft Exchange servers remain unpatched against a severe authentication bypass vulnerability.
Cyber
Recently patched PaperCut zero-days actively used in data theft attacks
Two security flaws in PaperCut NG and MF software, recently patched after zero-day exploitation, are now driving data theft attacks.
Cyber
Microsoft Warns of TerminalFix Attacks Deploying Reverse Tunnels
A new ClickFix variant named TerminalFix uses fake Cloudflare CAPTCHA prompts to trick Windows users into executing malicious PowerShell commands.
IT
Microsoft Exchange Online Outage Triggers Global Email and Auth Issues
Microsoft is actively investigating a widespread service disruption affecting Exchange Online with email delays and authentication failures.
AI
OpenAI Confirms ChatGPT Outage as Users Report Errors
ChatGPT is experiencing a partial outage, affecting users across multiple subscription plans who are unable to process tasks.
Cyber
Manchester Airports hit by cyberattack with 86 GB of data stolen
FulcrumSec claims responsibility for stealing 86 GB of data from Manchester Airports Group, with BleepingComputer validating traveller records.
Cyber
Chrome Web Store Extensions Caught Stealing Crypto and Browser Data
Multiple extensions for Google Chrome and Microsoft Edge were found delivering a malware framework designed to steal cryptocurrency, sensitive data, and browsing history.
Cyber
Anthropic warns infostealer malware is hijacking Claude sessions
Cybercriminals are using PC infostealer malware to hijack active Claude login sessions and drain user usage limits.