Cyber
Cybersecurity Executive Arrested in Connection with ShinyHunters Case
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania over alleged extortion activities.
Tag
#BleepingComputer
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
356 articles
Cyber
Hackers Abuse Google Ads and Bing Redirects to Push Fake Claude Installers
Cybercriminals are exploiting legitimate Bing search redirects within Google search ads to deliver fake Claude installers and execute ClickFix attacks.
Cyber
FBI Arrests Another Suspected ShinyHunters Hacker After Agency Breach
The FBI has apprehended another suspected member of the ShinyHunters extortion group linked to the recent breach of bureau systems.
AI
How to keep AI agents within their permissions
AI agents can use valid credentials to perform actions beyond their assigned permissions, creating new security risks.
Cyber
Maximum Severity SonicWall SMA1000 Flaw Actively Exploited in Attacks
Attackers are actively exploiting a maximum-severity flaw in SonicWall SMA1000 appliances just three days after the vendor released patches.
IT
Microsoft: Outdated Windows devices will stop receiving security updates
Microsoft states that devices running unsupported Windows versions will no longer receive security updates after next year's certificate rotation.
Cyber
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix urges IT administrators to immediately patch critical RCE vulnerabilities affecting NetScaler ADC and Gateway appliances.
Cyber
FBI Disrupts Chinese Hacking Tools Targeting Critical Infrastructure
The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate infrastructure-targeting tools.
Cyber
Low-cost Android phones found shipping with built-in proxy malware
A malicious campaign dubbed Midnight Mimosa embeds malware into the firmware of budget Android devices, turning them into proxies.
Cyber
FakeGit malware campaign returns with 17,610 malicious GitHub repos
Over 17,000 fake GitHub repositories have been deployed to distribute the SmartLoader malware and StealC infostealer.
Cyber
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco has released security advisories addressing five critical vulnerabilities in its NX-OS data center network operating system that could allow attackers to execute arbitrary code.
AI
OAuth grants are piling up faster than you can review them
OAuth grants create data pathways between SaaS tools and AI agents, but they are multiplying too fast for security teams to review, as recent breaches highlight.
Cyber
Uranium Crypto Exchange Hacker Convicted for Stealing $53 Million
A Maryland man has been convicted of stealing over $53 million by hacking the decentralized crypto exchange Uranium Finance twice in April 2021.
AI
Microsoft Teams to get support for third-party deepfake detection tools
Microsoft is introducing third-party deepfake detection solutions and impersonation protection features to Teams meetings.
Cyber
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities.
Cyber
Hackers hijack Google domains after breaching ccTLD registries
Attackers obtained unauthorized HTTPS certificates for several Google domains and hijacked ccTLD registries for Ghana, American Samoa, and Sierra Leone.
Cyber
PoeLLM malware targets exposed AI servers in cryptomining attacks
A cryptomining campaign is targeting exposed AI services with PoeLLM malware to compromise servers.
Cyber
Ransomware's new target: Is your backup infrastructure ready?
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and force victims to pay. Kaseya outlines key protection strategies.
Cyber
Hackers Exploit Critical Atlassian Flaw Following Public PoC Release
A critical unauthenticated vulnerability (CVE-2026-21589) affecting Jira, Confluence, and Bitbucket is being actively exploited in attacks.
Cyber
Ninja Forms flaw actively exploited to compromise WordPress sites
Hackers are weaponizing stored XSS vulnerabilities in popular WordPress plugins to install backdoors and create rogue admin accounts.
Cyber
Hackers exploit 32 zero-days on the first day of Pwn2Own Ireland
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days.
Cyber
ASOS confirms data breach following in-app notification hack
UK fashion retailer ASOS confirmed a security breach after unauthorized push notifications claiming data theft were sent through its mobile app.
AI
Fake ChatGPT and Gemini sites target ad managers with advanced credential theft
A sophisticated phishing campaign uses spoofed AI platform websites to steal login credentials and MFA codes from ad account managers.
AI
Wikimedia Says Rogue OpenAI Agents Made Unauthorized Wikipedia Edits
The Wikimedia Foundation reports that unauthorized Wikipedia edits were carried out by rogue OpenAI agents, potentially causing a May outage.