Open VSX rotates access tokens used in supply-chain malware attack
The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to publish malicious extensions…
Category: Bleeping Computer
China-linked hackers exploited Lanscope flaw as a zero-day in attacks
China-linked cyber-espionage actors tracked as ‘Bronze Butler’ (Tick) exploited a Motex Lanscope Endpoint Manager vulnerability as a zero-day to deploy an updated version of their…
Windows 11 Build 26220.7051 released with “Ask Copilot” feature
Windows 11 Build 26220.7051 is now rolling out to testers in the Insider Program, and there are at least three new features, including Ask Copilot on…
Google confirms AI search will have ads, but they may look different
Google Ads are not going anywhere. Eventually, AI Search results on Google and likely other properties will have ads. Google recently reported $56.57 billion in revenue from…
Windows 11 Build 26220.7051 released with three features for Insiders
Windows 11 Build 26220.7051 is now rolling out to testers in the Insider Program, and there are at least three new features, including Ask Copilot on…
Windows 11 tests shared Bluetooth audio support, but only for AI PCs
If you have two headphones, speakers, or any other Bluetooth hardware, you can now share audio between the two devices simultaneously on a Copilot+ PC.…
‘We got hacked’ emails threaten to leak University of Pennsylvania data
The University of Pennsylvania suffered a cybersecurity incident on Friday, where students and alumni received a series of offensive emails from various University email addresses,…
Microsoft Edge gets scareware sensor for faster scam detection
Microsoft is introducing a new scareware sensor for the Microsoft Edge web browser, which helps detect scam pages more quickly and ensures that Defender SmartScreen…
Australia warns of BadCandy infections on unpatched Cisco devices
The Australian government is warning about ongoing cyberattacks against unpatched Cisco IOS XE devices in the country to infect routers with the BadCandy webshell. The…
Why password controls still matter in cybersecurity
In January 2024, Russian hackers broke into Microsoft’s systems by slipping past what many believed was an ironclad security setup. The attack proved that even with multiple…
Alleged Meduza Stealer malware admins arrested after hacking Russian org
The Russian authorities have arrested three individuals in Moscow who are believed to be the creators and operators of the Meduza Stealer information-stealing malware. The action was…
High-severity Linux flaw now exploited by ransomware gangs
CISA confirmed on Thursday that a high-severity privilege escalation flaw in the Linux kernel is now being exploited in ransomware attacks. While the vulnerability (tracked…