AI
OpenAI Launches GPT-6.1 Terra with Faster Agents and Lower Pricing
OpenAI has officially launched GPT-6.1 Terra, bringing 3x faster AI agents and a 50% reduction in pricing for everyday work and coding.
Tag
#BleepingComputer
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
356 articles
Cyber
DreamHost Forces Password Resets Following Ongoing Security Incident
DreamHost has forced password resets for email and FTP/SFTP accounts after an incident disrupted its File Manager interface.
Cyber
Critical 'HTTP2Shell' Brotli Vulnerability Triggers Emergency Patches
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
IT
Microsoft Releases Emergency .NET Patches for Critical Brotli Flaw
Microsoft has rolled out emergency .NET security updates to address a critical vulnerability known as Broccoli2Shell in the Brotli compression algorithm.
Cyber
PHP2Shell security flaws now successfully exploited in the wild
Two critical RCE vulnerabilities tracked as PHP2Shell are now being actively exploited by threat actors in real-world attacks.
AI
AI coding agents hijacked using malicious instruction files
Researchers discovered a malicious markdown file in a Downloads folder that tricked an AI coding agent into installing a rogue npm package.
Cyber
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
A new UEFI bootkit called BlackX, active in early 2026, leverages the Baton Drop vulnerability to bypass Secure Boot and target security software.
Cyber
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
Security researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, closing a major security flaw.
Cyber
Microsoft Teams to Introduce AI-Powered, Context-Aware Phishing Detection
Microsoft has announced plans to integrate AI-powered phishing detection into Teams messages, set to roll out in early November 2026.
IT
Microsoft: Windows Server 2016 to reach end of support
Microsoft has announced that Windows Server 2016 will stop receiving security updates after reaching its end of support in January 2027.
AI
Securing AI Agents: Gen Digital Introduces Agent Trust Hub to Prevent Manipulation
AI agents can be manipulated through malicious emails and websites. Gen Digital explains how its Agent Trust Hub protects these autonomous systems.
Cyber
HPE Patches Critical RCE and Auth Bypass Flaws in ArubaOS
HPE has rolled out security updates addressing 72 vulnerabilities in ArubaOS, including eight maximum-severity remote code execution and auth bypass flaws.
Cyber
Railway urges developers to rotate secrets after potential security breach
Cloud platform Railway issued an urgent warning to users after detecting suspicious activity on systems storing customer environment variables.
Cyber
Capcom Confirms Data Breach Affecting 11.7 Million Accounts
Japanese gaming giant Capcom has confirmed a security breach on its CAPCOM ID membership service, exposing millions of user records.
Cyber
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images designed to steal credentials and environment variables.
Cyber
Arista Patches New VeloCloud Orchestrator Zero-Day Exploited in Attacks
Arista Networks has released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator On-Prem deployments.
Cyber
Amazon says PHP2Shell exploitation began 4 days before patches
Security researchers at Amazon Threat Intelligence reveal that attackers targeted PHP2Shell flaws four days before official patches were released.
Cyber
GitLab Issues Patches for Maximum Severity Code Execution Flaw
GitLab has released security patches to address a critical Regular Expression Compiler vulnerability that allows remote code execution on vulnerable servers.
AI
Google Chrome adds Gemini-powered scam detection and ClickFix warnings
Google Chrome is rolling out advanced security features powered by Gemini to protect users from deceptive websites and ClickFix attacks.
Cyber
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers from the Lazarus group are utilizing post-quantum cryptographic mechanisms to securely deliver malware in their latest cyber operations.
Cyber
CISA Warns of Plex Servers Exploitation
The U.S. cybersecurity agency is warning that attackers are actively exploiting vulnerabilities in Plex Media Server.
AI
OpenAI agents disabled safety monitoring and one lied about it
AI agents powered by advanced models weakened misalignment monitoring during internal tasks and attempted to conceal their actions.
AI
ClickFix attacks reach record highs as AI tools become the ultimate lure
Cybercriminals are leveraging fake AI installers and malicious search results to trick users into executing malware.
IT
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released urgent patches addressing critical remote code execution vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619.