Cyber
ReliaQuest Confirms Failed Data-Theft Attack
Cybersecurity firm ReliaQuest has confirmed thwarting a social engineering attack targeting one of its employees.
Tag
#BleepingComputer
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
357 articles
IT
Microsoft confirms August updates break printing and PDF export in WPF apps
Microsoft has confirmed that .NET Framework updates released as part of the August Patch Tuesday are breaking printing and PDF export in WPF applications.
Cyber
CISA Orders Urgent Patching of Actively Exploited Zimbra Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite within three days.
Cyber
ToxicPanda Android malware uses VPN permissions to block Google Play
The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote commands.
Cyber
Hackers infect Android car head units with proxy botnet malware
A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread proxy botnet malware and ad fraud tools.
Cyber
Securing Windows Named Pipes: Mitigating Interprocess Communication Risks
Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted processes.
Cyber
New SynkLoader Malware Discovered in Microsoft Teams Phishing Campaign
A previously unknown malware family named SynkLoader is being distributed through Microsoft Teams phishing attacks to steal credentials using a fake lock screen.
Cyber
Hundreds of leaked AWS keys give full control over corporate accounts
New findings reveal that thousands of Amazon Web Services access keys left publicly exposed remain active and valid.
Cyber
Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE.
Cyber
Microsoft warns of max severity Entra ID flaw exploited in attacks
Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management platform.
Cyber
Hackers Poison Rust Crate arrayref to Push Infostealer Malware
Attackers compromised the maintainer account of the popular Rust arrayref crate, injecting malware that executes on developers' systems during compilation.
Cyber
Critical Elementor Pro bug exposes WordPress sites to RCE attacks
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server.
Cyber
How MSPs can catch advanced phishing attacks missed by email filters
Kaseya outlines how managed service providers can detect and contain sophisticated AI-driven phishing threats that bypass traditional inboxes.
Cyber
Citrix urges admins to patch new NetScaler flaws immediately
Citrix has warned customers to swiftly secure their systems against two vulnerabilities impacting NetScaler products.
Cyber
CISA warns of hackers exploiting critical MLflow vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has warned that threat actors are actively exploiting a critical vulnerability in the MLflow platform.
Cyber
New Manic Android malware can exfiltrate data through nearby devices
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices.
Cyber
Critical Zimbra RCE Flaw Actively Exploited in Recent Attacks
CERT Polska has issued a warning as attackers begin actively exploiting a critical remote code execution vulnerability in the Zimbra Collaboration Suite.
IT
Microsoft says August Windows updates may cause gaming issues
Microsoft is investigating a potential issue with the August updates that may prevent some games from launching or cause them to crash on affected Windows 11 systems.
AI
OpenAI Confirms Major ChatGPT Outage Affecting Logins and Chats
Users worldwide are experiencing issues signing in, creating new accounts, and loading previous conversations on ChatGPT.
Cyber
Sakura Internet Hack Exposes Data of Up to 1.36 Million Accounts
Japanese cloud and data center provider Sakura Internet disclosed a cyberattack that compromised its sales management system containing customer contract and membership data.
Cyber
Rogue ransomware affiliate poses as data recovery firm to scam victims
A suspected ransomware affiliate is pretending to be a data recovery service called "Ransom Busters" to extract payments from victims.
Cyber
Hackers compromise over 14,500 Dahua web cameras in 35 days
A large-scale cyberattack campaign called CameraSwarm has compromised more than 14,500 Dahua IP cameras, mainly in Ukraine and Russia.
AI
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable logic controllers.
Cyber
US Charges Iranian Hackers Over $3.4 Billion Intellectual Property Theft
American authorities have charged 17 Iranian nationals linked to the Mabna Institute hacking-for-hire group over massive data theft operations.