
Rogue ransomware affiliate poses as data recovery firm to scam victims
A suspected ransomware affiliate is pretending to be a data recovery service called "Ransom Busters" to extract payments from victims.
Tag
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
361 articles

A suspected ransomware affiliate is pretending to be a data recovery service called "Ransom Busters" to extract payments from victims.

A large-scale cyberattack campaign called CameraSwarm has compromised more than 14,500 Dahua IP cameras, mainly in Ukraine and Russia.

U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable logic controllers.

American authorities have charged 17 Iranian nationals linked to the Mabna Institute hacking-for-hire group over massive data theft operations.

Huntress observed a massive 155x increase in password spraying attacks driven by legacy auth and MFA vulnerabilities.

Microsoft has successfully resolved a bug causing Windows Defender crashes and 0xc0000005 errors following a security update.

CISA has warned that hackers are actively exploiting a critical remote code execution flaw in the Windows Internet Key Exchange service.

Microsoft has reminded users that systems running Home and Pro editions of Windows 11 24H2 will soon stop receiving updates.

The FBI and CISA report that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the US since June 2021.

Comcast is promoting WiFi-based motion detection as part of its Xfinity Shield platform, allowing routers to detect people moving around the house without physical sensors.

Cybercriminals have developed a custom Java web shell targeting PTC Windchill and FlexPLM servers to decrypt credentials and steal sensitive data.

Picus Security's Blue Report 2026 highlights how prevention rates vary by technique and why behavioral testing is essential to uncover hidden security gaps.

Microsoft is rolling out Windows 11 preview builds featuring a performance boost for File Explorer and a more customizable context menu.

The U.S. CISA confirms that ransomware gangs are actively exploiting a high-severity Windows Task Host vulnerability.

Microsoft has officially begun removing the legacy WMIC command-line tool starting with Windows 11 version 24H2 and recent beta builds.

A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies.

Pokémon Center is notifying customers in the UK and Germany after a third-party data breach at logistics provider CEVA Logistics.

Popular developer platform GitHub has suffered a widespread outage affecting multiple services and APIs.

CVE-2026-54121 allows a standard domain user to escalate an Enterprise CA into a Domain Controller.

Tech giants General Electric (GE) and Philips have confirmed they are actively investigating claims made by the Clop ransomware gang regarding a data breach.

Microsoft is actively developing a security patch to address the ShieldBreak zero-day vulnerability tracked as CVE-2026-69414.

Popular crypto hardware wallet provider SafePal has confirmed a security breach affecting 39,798 customers after an order data flaw was exploited.

Popular AI assistant Claude is experiencing a major outage, with users reporting login issues and degraded performance across multiple platforms.

Threema secure messaging service faced multiple DDoS attacks earlier this week, causing communication disruptions.