Cyber
Anthropic warns infostealer malware is hijacking Claude sessions
Cybercriminals are using PC infostealer malware to hijack active Claude login sessions and drain user usage limits.
Tag
#BleepingComputer
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
357 articles
AI
Anthropic Adjusts Weekly Usage Limits for Claude Code
Anthropic has announced updates to the standard weekly usage limits for Claude Code across multiple subscription tiers.
Cyber
McKesson discloses security breach as ShinyHunters claims massive patient data theft
Healthcare distributor McKesson reports a cyber incident involving unauthorized access and potential data theft by the ShinyHunters group.
Cyber
PaperCut releases second emergency patch for exploited flaws
PaperCut has released a second emergency security update for actively exploited vulnerabilities in its print management software after researchers bypassed initial fixes.
AI
AI Is Accelerating Vulnerability Discovery: Can Defenders Keep Up?
Artificial intelligence is supercharging vulnerability discovery, putting immense pressure on traditional security systems. Action1 highlights why defenders must adapt their remediation strategies.
Cyber
Over 8,300 Gitea servers vulnerable to code execution attacks
According to Shadowserver, over 8,300 internet-exposed Gitea instances remain unpatched against critical remote code execution flaws.
IT
Windows 11 KB5120998 Update Released with 35 Changes
Microsoft has released the KB5120998 preview update for Windows 11 versions 25H2 and 24H2, featuring Start menu and taskbar improvements.
AI
Nearly 700 Rogue AI Agents Coordinated in the Hugging Face Attack
New details emerge about the July security incident on Hugging Face, revealing that hundreds of autonomous AI agents coordinated a breach using an unauthorized message board.
Cyber
PaperCut warns of NG and MF zero-day flaw
PaperCut is warning that hackers are actively exploiting a critical vulnerability in its print management software.
Cyber
Android 17 adds ECH support to make web browsing harder to track
Google is introducing new network security protections in Android 17 to strengthen connection privacy and combat user tracking.
Cyber
Google Workspace Security Webinar: Breach Vectors and Defense Strategies
A comprehensive webinar explores how Google Workspace breaches happen and highlights essential security controls.
Cyber
Carhartt data breach exposes information of 12.9 million accounts
Popular clothing retailer Carhartt suffered a major data breach. The ShinyHunters group leaked nearly 13 million user accounts online.
Cyber
CISA orders federal agencies to patch critical Citrix NetScaler flaw
The US cybersecurity agency has instructed federal civilian agencies to fix an actively exploited remote code execution vulnerability in Citrix devices by Saturday.
IT
Critical Avada WordPress Theme Flaw Enables Zero-Click RCE
A critical vulnerability chain in the popular Avada WordPress theme allows unauthenticated attackers to execute arbitrary code on servers.
Cyber
New GPUThor attack defeats NVIDIA ECC protection for root access
A newly disclosed Rowhammer attack dubbed GPUThor bypasses error-correcting code (ECC) protections on NVIDIA GPUs to achieve root-level privilege escalation.
Cyber
FBI disrupts proxy network enabling Chinese espionage operations
The FBI has dismantled a technical infrastructure providing reconnaissance and proxy management for Chinese cyber espionage.
Cyber
Snowflake ends password authentication for service accounts – the hard part begins
Snowflake is retiring password‑based auth for legacy service accounts, pushing organisations toward passwordless methods. Token Security warns that the real challenge lies in discovering who uses each account, what it’s used for, and how much access it truly needs.
Cyber
Ubiquiti patches three max severity security vulnerabilities
Network equipment manufacturer Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat actors can exploit remotely without privileges.
IT
Microsoft tests new privacy controls for Windows 11 desktop apps
Microsoft has started testing new privacy features in Windows 11 that allow users to manage desktop application access to their camera, microphone, and precise location.
Cyber
Hackers abuse npm mirrors to host phishing redirect pages
Threat actors are leveraging npm and its mirrors to host malicious HTML pages impersonating Cloudflare CAPTCHAs.
AI
AnonyMousKIT PhaaS Uses Voice AI Agents to Phish iPhone Passcodes
A newly uncovered phishing-as-a-service platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices.
Cyber
From Fake Workers to Account Recovery: The Growing Identity Verification Risk
Attackers are increasingly targeting identity‑establishment and recovery processes instead of the login itself, creating new avenues for social engineering.
Cyber
WhatsApp rolls out stronger two-step verification and multiple passkeys support
The popular messaging app is introducing new account security features, including multiple passkey support and enhanced two-step verification options.
Cyber
Hackers Target WordPress Sites in miniOrange Auth Bypass Attacks
Threat actors are actively exploiting critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress.