Category: Bleeping Computer

US indicts leader of Qakbot botnet linked to ransomware attacks
22
May
2025

US indicts leader of Qakbot botnet linked to ransomware attacks

The U.S. government has indicted Russian national Rustam Rafailevich Gallyamov, the leader of the Qakbot botnet malware operation that compromised…

Hackers use fake Ledger apps to steal Mac users’ seed phrases
22
May
2025

Hackers use fake Ledger apps to steal Mac users’ seed phrases

Cybercriminal campaigns are using fake Ledger apps to target macOS users and their digital assets by deploying malware that attempts…

Arrest
22
May
2025

Police arrests 270 dark web vendors, buyers in global crackdown

Police arrested 270 suspects following an international law enforcement action codenamed ‘Operation RapTor’ that targeted dark web vendors and customers…

Ivanti EPMM flaw exploited by Chinese hackers to breach govt agencies
22
May
2025

Ivanti EPMM flaw exploited by Chinese hackers to breach govt agencies

Chinese hackers have been exploiting a remote code execution flaw in Ivanti Endpoint Manager Mobile (EPMM) to breach high-profile organizations worldwide….

Panda bear
22
May
2025

Chinese hackers breach US local governments using Cityworks zero-day

Chinese-speaking hackers have exploited a now-patched Trimble Cityworks zero-day to breach multiple local governing bodies across the United States. Trimble…

GoDaddy
22
May
2025

FTC finalizes order requiring GoDaddy to secure hosting services

The U.S. Federal Trade Commission (FTC) has finalized an order requiring web hosting giant GoDaddy to secure its services to…

Signal
22
May
2025

Signal now blocks Microsoft Recall screenshots on Windows 11

​Signal has updated its Windows app to protect users’ privacy by blocking Microsoft’s AI-powered Recall feature from taking screenshots of…

Unpatched critical bugs in Versa Concerto lead to auth bypass, RCE
22
May
2025

Unpatched critical bugs in Versa Concerto lead to auth bypass, RCE

Critical vulnerabilities in Versa Concerto that are still unpatched could allow remote attackers to bypass authentication and execute arbitrary code…

Login prompt
22
May
2025

Critical Samlify SSO flaw lets attackers log in as admin

A critical Samlify authentication bypass vulnerability has been discovered that allows attackers to impersonate admin users by injecting unsigned malicious assertions…

Claude
22
May
2025

Anthropic web config hints at Claude Sonnet 4 and Opus 4

Anthropic is secretly working on new models called Claude Sonnet 4 and Opus 4, which are believed to be the company’s…

GPT
22
May
2025

OpenAI hints at a big upgrade for ChatGPT Operator Agent

ChatGPT’s Operator, which is still in research preview, will soon become a “very useful tool,” according to Jerry Tworek, VP…

Russian hackers breach orgs to track aid routes to Ukraine
22
May
2025

Russian hackers breach orgs to track aid routes to Ukraine

A Russian state-sponsored cyberespionage campaign attributed to APT28 (Fancy Bear/Forest Blizzard) hackers has been targeting and compromising international organizations since…