BleepingComputer.com News Headlines

07-11-26 (01:03)   SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
06-11-26 (23:34)   Runaway AI hacking agent behind WorkOS breach after escaping sandbox
06-11-26 (21:34)   OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs
06-11-26 (19:49)   Fake security tools on GitHub push backdoors and infostealers
06-11-26 (18:20)   QNAP says hackers breaching NAS devices in Plex2Shell attacks
06-11-26 (16:34)   Veeam warns of Software Appliance boot failures on AMD EPYC hosts
06-11-26 (16:03)   IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It
06-11-26 (15:20)   Chainalysis says breach exposed credentials for all customers
06-11-26 (13:49)   D-Link warns of multiple zero-days in DGS-3130 Series switches
06-11-26 (10:34)   MetaMask says recent attack didn't affect wallet infrastructure
06-11-26 (02:03)   FBI, CISA warn of cyberattacks targeting refrigeration systems
05-11-26 (22:34)   Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
05-11-26 (22:03)   Nearly 1.5 million exposed secrets targeted in new revocation program
05-11-26 (20:34)   OpenAI's GPT-6 Astra silently obstructed safety research tasks
05-11-26 (18:49)   OpenSSH flaw lets attackers log into password-disabled Linux accounts
05-11-26 (17:34)   Hackers backdoor Linux servers using trojanized CWP web server
05-11-26 (17:20)   DigiCert data breach exposes customer information, identity documents
05-11-26 (16:20)   Closing the Identity Gap at the Service Desk
05-11-26 (10:20)   GhostMap Android flaw lets malicious app trigger persistent boot loop
04-11-26 (22:34)   Vercel rolls out new protection against stolen session cookie attacks
04-11-26 (22:03)   Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
04-11-26 (20:20)   DreamHost confirms data breach exposed FTP logins and webmail sessions
04-11-26 (19:03)   Cyberattack disrupts blood storage refrigeration systems in France
04-11-26 (18:03)   NIKKE PC game launcher hacked to spread remote access, data-stealing malware
04-11-26 (17:03)   mSecure password manager hack prompts password reset warnings
04-11-26 (16:20)   Google Calendar phishing campaign hijacks sessions, bypasses MFA
04-11-26 (15:49)   SonicWall warns of unpatched flaws in end-of-life GMS software
04-11-26 (14:20)   US charges two Canadians accused of hacking US universities
04-11-26 (13:20)   CISA flags WordPress RCE flaw as actively exploited in attacks
04-11-26 (10:49)   Hackers use n-day exploits in zero-click attacks on iOS, Android devices
03-11-26 (23:20)   Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
03-11-26 (22:34)   WorkOS says attacker used ARTEX AI to breach internal sales app
03-11-26 (21:20)   Binance says fake job interview led to $6.3 billion crypto heist
03-11-26 (20:03)   Google: LLMjacking attacks rack up $1 million in cloud AI charges
03-11-26 (16:20)   Barracuda warns of critical flaws allowing root access to devices
03-11-26 (16:20)   Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028
03-11-26 (15:20)   UK school estate hit by 3AM ransomware in suspected AI-assisted attack
03-11-26 (14:34)   Police seizes over 100 servers in investment scam crackdown
03-11-26 (13:20)   Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs
03-11-26 (12:03)   Harvard University data breach exposed info of 851,000 accounts
02-11-26 (22:49)   Chinese hackers use ARTEX AI in automated attacks against 200 orgs
02-11-26 (20:03)   Fintech platform Sageworks taken offline after suspected cyberattack
02-11-26 (19:20)   Google disrupts million-device XCPE Android malware botnet, bans TV box maker
02-11-26 (17:20)   BTCPay Server warns of hot wallet crypto thefts on outdated instances
02-11-26 (16:20)   Your Mobile Carrier Stores Your Call Logs for Years
02-11-26 (15:34)   Hackers disrupt refrigeration systems at European supermarkets
02-11-26 (15:20)   Microsoft fixes Smart App Control broken by October Windows update
02-11-26 (13:49)   Over 1,000 GitLab servers vulnerable to ongoing RCE attacks
02-11-26 (12:34)   Synology warns of C3RB3R ransomware attacks targeting NAS devices
02-11-26 (10:34)   Ivanti patches two more Connect Secure zero-days chained in attacks
01-11-26 (21:03)   FBI links $6.3 billion Binance crypto heist to North Korean hackers
01-11-26 (16:20)   Alpine Linux rebuilds GitLab after attempted RCE attack
01-11-26 (15:03)   OpenAI says it's doubling Pro usage limits and bringing Work features to Chat
31-10-26 (19:03)   Northflank security breach leads to abuse of customers' AI API keys
31-10-26 (16:49)   New Android SMS of Death exploit can remotely crash unpatched phones
31-10-26 (15:20)   Reddit to lock content behind logins to fight scrapers
31-10-26 (14:20)   From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
31-10-26 (14:03)   Chainalysis discloses data breach from "offensive agentic techniques"
30-10-26 (22:20)   Critical Linux kernel flaw allows remote root attacks on MPTCP servers
30-10-26 (17:03)   Trezor warns of suspected crypto-theft implant in hardware wallet
30-10-26 (15:49)   Malicious Claude Code extension on Cursor planted SSH backdoors
30-10-26 (15:03)   SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
30-10-26 (14:03)   CISA says max severity GitLab flaw now exploited in the wild
30-10-26 (12:34)   Microsoft finally fixes VPN issues caused by September updates
30-10-26 (11:20)   Drupal warns of critical Commerce Core flaw exploited in attacks
30-10-26 (10:20)   Binance links $6.3 billion crypto theft to compromised DevOps laptop
30-10-26 (00:49)   OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut
29-10-26 (23:49)   Binance probes potential $5.8 billion crypto-theft hack
29-10-26 (23:20)   Hugging Face malware campaign returns to hijack GPUs for crypto mining
29-10-26 (23:20)   Japan Airlines suffers third-party data breach exposing passenger info
29-10-26 (22:49)   Polymarket halts trading after crypto-draining script breach, $2.5M traced
29-10-26 (20:34)   Fake crypto app on Apple App Store linked to $23K wallet theft
29-10-26 (19:49)   Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
29-10-26 (17:20)   Chrome extensions with 13.4 million installs caught hijacking searches
29-10-26 (15:49)   Microsoft fixes Remote Desktop failures caused by recent Windows updates
29-10-26 (15:20)   3 Ways AI Agents Already Operate in Your Browser
29-10-26 (15:03)   CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
29-10-26 (13:03)   Windows 11 KB5127936 update released with 41 changes and fixes
29-10-26 (12:20)   New Cisco firewall zero-day exploited to crash SSL VPN devices
28-10-26 (21:49)   Police seize Virtualine bulletproof service tied to ransowmare, cybercrime
28-10-26 (19:49)   Discord to let search engines index public server messages
28-10-26 (17:49)   Sony ISP subsidiary data breach exposes 2.5 million customer records
28-10-26 (17:20)   Volt Typhoon hides zero-day attacks using 'Silent Train' framework
28-10-26 (15:49)   Microsoft urges Entra ID admins to migrate users to passkeys
28-10-26 (15:20)   InfraTrust report warns of exploited flaws in critical network infrastructure
28-10-26 (15:20)   Even after PHP2Shell, blast radius matters more than a CVSS score
28-10-26 (13:20)   Hackers now scanning systems for recently-patched Oracle flaw
28-10-26 (12:03)   CISA warns of hackers now exploiting critical Node2Shell flaw
28-10-26 (10:49)   Nefilim and Hive ransomware affiliate gets 70 months in prison
28-10-26 (00:49)   Japan's GMO urges customers to shut down PCs amid ransomware threat
27-10-26 (23:49)   OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
27-10-26 (23:20)   UNM Health ransomware attack disrupts patient care, surgeries
27-10-26 (22:03)   Hackers hijack Convertr analytics script to steal payment card data
27-10-26 (19:34)   Microsoft releases Windows OOB updates to distrust eMudhra certificates
27-10-26 (17:20)   Warp discloses breach exposing AI agent logs, user telemetry data
27-10-26 (15:20)   Tailscale warns of SSH flaws allowing root privilege escalation
27-10-26 (15:20)   The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest
27-10-26 (11:49)   Apple backports CoreGraphics zero-day patches to older iPhones
27-10-26 (10:34)   Energy giant ENGIE discloses data breach affecting customers
27-10-26 (09:34)   CISA confirms PHP2Shell vulnerabilities now exploited in attacks