BleepingComputer.com News Headlines

03-08-26 (00:34)   OpenAI teases Astra, its next major AI model, after it solves 10 long-standing math problems
02-08-26 (23:20)   COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft
02-08-26 (16:20)   Google Chrome may soon block New Tab hijacker extensions by default
01-08-26 (16:34)   Rails patches critical Active Storage flaw with RCE potential
01-08-26 (00:20)   Amgen says cloud data breach exposed patient health, proprietary info
31-07-26 (23:49)   Arch Linux disables AUR package adoption to stop malware flood
31-07-26 (23:20)   Online ad firm Adform's script compromised to steal cryptocurrency
31-07-26 (21:03)   OpenAI says its new GPT 5.6 models are becoming more cost-efficient
31-07-26 (19:49)   Hacker uses DeepSeek AI to autonomously attack vulnerable servers
31-07-26 (19:03)   CISA warns of cyberattacks disrupting U.S. water utilities
31-07-26 (17:03)   ESET tracks rise in malicious AI skills and adaptable malware
31-07-26 (03:20)   Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
31-07-26 (03:03)   Claude uploaded malware to PyPI in Anthropic's botched test
31-07-26 (00:34)   South Korea fines telco giant KT $39 million for customer data breach
31-07-26 (00:03)   JetBrains warns of critical TeamCity remote code execution flaw
30-07-26 (20:20)   Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
30-07-26 (20:03)   VMware fixes three critical flaws allowing auth bypass, VM escapes
30-07-26 (19:20)   Google says AI helped Chrome fix 1,072 security bugs in two releases
30-07-26 (18:49)   ShinyHunters claims Brinks Home breach, threatens to leak stolen data
30-07-26 (18:03)   Microsoft Teams vishing attacks lead to Chaos ransomware attacks
30-07-26 (17:20)   Analog Devices discloses data breach, says operations unaffected
30-07-26 (16:20)   After the Break-In: What Attackers Do Once They're Already Inside
30-07-26 (01:49)   Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
29-07-26 (23:49)   Cisco warns of FMC static credential flaw exploited in zero-day attacks
29-07-26 (23:03)   Anthropic confirms Claude is down worldwide
29-07-26 (20:03)   Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare
29-07-26 (19:34)   Hackers disrupt over 30 Minnesota water utilities in coordinated OT attack
29-07-26 (18:20)   OpenAI agent used exposed credentials at 4 services in Hugging Face breach
29-07-26 (16:20)   Your AI Agents Are Guessing at Scale: Permissions Decide the Damage
29-07-26 (16:03)   Windows 11 KB5101684 update released with 42 changes and fixes
29-07-26 (13:20)   These near-mint ASUS Chromebook refurbs are only $145
28-07-26 (23:20)   CubePilot drone software dev hit by DNS hijacking to intercept traffic
28-07-26 (22:49)   OpenAI models used Artifactory zero-days to escape to the internet
28-07-26 (20:49)   CISA shares advice on isolating vital systems during cyberattacks
28-07-26 (20:20)   vBulletin fixes critical pre-auth RCE flaw with public exploit
28-07-26 (16:20)   Is Your SSO Protected Against Modern Credential Attacks?
28-07-26 (14:20)   Over 24,000 exposed server BMCs leak password hash via decades-old flaw
28-07-26 (11:20)   Data breach at medical billing firm MCBS affects 1.26 million people
28-07-26 (02:03)   Hackers target US firms in FastJson RCE zero-day attacks
28-07-26 (01:03)   Arista patches VeloCloud Orchestrator zero-day exploited in attacks
27-07-26 (23:20)   New Dysphoria DDoS botnet spreads to 200k devices worldwide
27-07-26 (23:03)   New Certighost PoC exploit lets attackers hijack Windows domains
27-07-26 (19:34)   Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin
27-07-26 (17:49)   Coca-Cola confirms data theft in Fairlife ransomware attack
27-07-26 (17:20)   Ernst & Young data breach claimed by ShinyHunters extortion gang
27-07-26 (16:20)   Shadow AI agents are multiplying. Here's how to find and secure them.
26-07-26 (21:34)   GitHub, PyPI add time-based defenses against supply chain attacks
26-07-26 (00:49)   Steam forum ClickFix attacks infect gamers with XMRig cryptominers
25-07-26 (17:34)   Malicious sites use JavaScript to build malware in browser memory
25-07-26 (16:20)   ShinyHunters data leaks fuel $2,000 sextortion email scam
25-07-26 (11:34)   OpenAI confirms ChatGPT is down worldwide
24-07-26 (22:03)   OnTrac notifies customers of data breach after network hack
24-07-26 (21:20)   Hermes AI agent used to automate attack on Thai Finance Ministry
24-07-26 (20:03)   Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
24-07-26 (17:49)   Microsoft blames massive Microsoft 365 outage on maintenance bug
24-07-26 (16:20)   Chick-fil-A data breach affects more than 13,000 customers
24-07-26 (16:20)   Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack
24-07-26 (15:03)   Europol flags 4,340 URLs for removal in 'The Com' crackdown
24-07-26 (13:20)   Man gets six years for hacking 750 women's Snapchat accounts
24-07-26 (09:49)   Clop ransomware targets Windchill, FlexPLM in data theft attacks
23-07-26 (23:34)   New Dolphin X malware uses AI to rank high-value targets
23-07-26 (22:20)   Australian energy provider Origin says data breach exposes client data
23-07-26 (21:49)   Fake Claude app promoted by Bing ads pushes SectopRAT malware
23-07-26 (19:03)   Russian hackers exploit Zimbra zero-click flaw for email theft
23-07-26 (18:34)   Hackers abuse Notepad++ plugins to stealthily install malware
23-07-26 (17:49)   Microsoft 365 outage affects Teams, SharePoint and other services
23-07-26 (16:20)   FedRAMP Rev5 Is Ending: What the 20x Transition Really Requires
23-07-26 (14:34)   EU fines Google $1 billion for search, app store antitrust violations
23-07-26 (13:49)   New RefluXFS Linux flaw lets attackers gain root privileges
23-07-26 (12:03)   New msaRAT malware uses Chrome, Edge browsers to route C2 traffic
23-07-26 (11:34)   Microsoft working to fix Exchange Online mailbox quarantine issue
23-07-26 (10:20)   Check Point warns of SmartConsole zero-day exploited in attacks
22-07-26 (23:49)   Upbound says hack caused $13 million in fraudulent Acima leases
22-07-26 (22:20)   South Korea discloses data breach impacting diplomats worldwide
22-07-26 (19:03)   Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack
22-07-26 (17:34)   How enterprise GenAI can amplify ransomware risk — and how to contain it
22-07-26 (16:20)   New InfraTrust report reveals infrastructure flaws admins should patch first
22-07-26 (15:34)   Adobe Chrome extension flaw let sites access private WhatsApp chats
22-07-26 (13:49)   CISA orders urgent action on actively exploited Langflow RCE flaw
22-07-26 (13:20)   Stop renting storage space — this lifetime 2TB plan is yours for $59
22-07-26 (12:49)   Microsoft to stop Exchange 2016 / 2019 security updates in October
22-07-26 (08:49)   Chick-fil-A discloses data breach after credential stuffing attacks
22-07-26 (07:20)   OpenAI says its AI models hacked Hugging Face during testing
22-07-26 (01:20)   Police dismantle Kratos phishing platform, arrest developer
22-07-26 (00:49)   FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
21-07-26 (22:20)   Critical SharePoint RCE flaw exploited to steal machine keys
21-07-26 (21:03)   Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak
21-07-26 (18:49)   Critical wp2shell WordPress flaws exploited to install webshells
21-07-26 (16:20)   Closing the Identity Gaps in Critical Infrastructure Security
21-07-26 (13:20)   US seizes over 1,000 websites in FIFA World Cup piracy crackdown
21-07-26 (12:20)   Critical Palo Alto VPN bug now exploited by Qilin ransomware gang
21-07-26 (11:20)   Microsoft shares manual fix for WSUS sync delays and timeouts
21-07-26 (10:20)   Windows LegacyHive zero-day flaw gets free, unofficial patches
21-07-26 (00:49)   Estée Lauder discloses data breach via Oracle E-Business flaw
21-07-26 (00:34)   SonicWall SMA1000 flaws exploited as zero-days to push custom malware
21-07-26 (00:34)   Hackers steal $23.7 million in crypto from Ostium in off-chain attack
20-07-26 (23:20)   Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes
20-07-26 (23:20)   JadePuffer agentic attacks now target AI model data with ransomware
20-07-26 (19:49)   New HollowGraph malware uses Microsoft Graph for stealthy C2 comms
20-07-26 (16:20)   An AI SOC Evaluation Guide for Security Leaders