Cyber
New ClosedQuorum Windows malware uses AI for attack decisions
A newly discovered Windows malware called ClosedQuorum leverages Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously make decisions during attacks.
Tag
#BleepingComputer
The latest news, analysis and stories about BleepingComputer — TECC.UZ.
356 articles
Cyber
New Windows Defender Zero-Day Exploit Blocks Antivirus Updates
Security researcher Abdelhamid Naceri has released a new Microsoft Defender zero-day exploit that successfully blocks antivirus updates.
Cyber
BigCommerce alerts merchants of data breach linked to Ribon apps
E-commerce platform BigCommerce has warned multiple merchants about data security incidents stemming from compromised third-party Ribon applications.
Cyber
CISA Warns of Active Exploitation of Three Linux Kernel Flaws
The U.S. Cybersecurity and Infrastructure Security Agency is warning that hackers are actively exploiting three Linux kernel vulnerabilities, including one critical flaw.
Cyber
WordPress Click2Shell flaw lets hackers execute PHP on the server
Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery vulnerability dubbed Click2Shell.
Cyber
Google fined €403 million over location data privacy violations
Ireland's Data Protection Commission has penalized Google with a substantial fine for multiple GDPR breaches.
AI
Researchers escape OpenAI Codex sandbox to run commands on host
Security researchers managed to escape OpenAI's Codex sandbox in two ways, and the company has already patched both issues.
AI
Viral AI actress Tilly Norwood's hotline face-scans every caller
AI actress Tilly Norwood went viral after a glitch on Piers Morgan's show, while her video call service reveals aggressive face-scanning and mood-sensing features.
AI
BragJack attack hijacks browser AI agents through malicious extensions
Discovered by Forever Security's Gal Weizman, the BragJack proof-of-concept attack uses a single malicious extension to hijack AI assistants across Chrome, Edge, Perplexity, and Claude.
Cyber
North Korean WaterPlum Hackers Infected Over 30,000 Devices Worldwide
North Korea's WaterPlum hacking group compromised at least 30,000 devices globally and funneled over $10.7 million in stolen cryptocurrency back to the country.
Cyber
ShinyHunters hacks Clop leak site and threatens extortion gang
The ShinyHunters extortion gang breached Clop ransomware's leak site, stealing server data and private keys.
Cyber
Fake LastPass Authenticator on GitHub Pushes Rapuncel Infostealer
A malicious campaign leverages SEO-optimized GitHub repositories to impersonate popular software and distribute a new infostealer dubbed Rapuncel.
Cyber
Critical Check Point Flaw Allows Remote Code Execution with Root Privileges
Check Point Software has released security updates to address a critical vulnerability that lets attackers execute code with root privileges on management systems.
Cyber
RatHat: New Android malware leverages AI to automate device control
Security researchers have discovered a new Android malware called RatHat that uses an AI-powered subsystem to remotely navigate compromised devices.
AI
OpenAI details more cases of AI agents taking unauthorized actions
OpenAI has shared new examples of AI model misalignment over the past six months, including unauthorized file uploads and hiding mistakes.
Cyber
Brevo Supply-Chain Attack Injected ClickFix Scripts on Customer Sites
Brevo confirmed a security breach where attackers stole a Cloudflare API key to inject malicious ClickFix scripts into its websites and embedded customer JavaScript files.
AI
What Recent AI-Powered Attacks Mean for Your Identity Security
AI is making credential theft faster and easier to scale, giving attackers more opportunities to abuse valid identities.
Cyber
US takes down NightmareStresser DDoS-for-hire platform
The U.S. Federal Bureau of Investigation (FBI) has seized the domains used by NightmareStresser, a major global DDoS-for-hire platform.
Cyber
Cisco warns of max severity ISE zero-day actively exploited in attacks
Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in the wild.
AI
Anthropic tests new feature allowing Claude to analyze your bank account and financial data
Anthropic is testing a personal finance feature called "Claude Money" that lets users connect bank accounts directly to the AI to understand their finances.
IT
Windows 11 KB5124008 update breaks domain trust for some users
Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking domain trust relationships on enterprise systems.
Cyber
Malware bypasses browser checks to force install Chrome and Edge extensions
Active since mid-2025, a banking malware operation is using the KREMLIN toolkit to install malicious browser extensions that steal sensitive data.
Cyber
Spain's data agency receives first report of AI-powered data breach
The Spanish Data Protection Agency has been notified of a security incident allegedly carried out using an AI agent powered by a large language model.
Cyber
Critical ScreenConnect flaw now actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reports that a critical ConnectWise ScreenConnect vulnerability is actively being exploited in the wild.