Category: Bleeping Computer

Phishing
05
Feb
2025

Hackers spoof Microsoft ADFS login pages to steal credentials

A help desk phishing campaign targets an organization’s Microsoft Active Directory Federation Services (ADFS) using spoofed login pages to steal…

Cryptocurrency falling
05
Feb
2025

Crypto-stealing apps found in Apple App Store for the first time

Android and iOS apps on the Google Play Store and Apple App Store contain a malicious software development kit (SDK)…

CISA
05
Feb
2025

CISA tags Microsoft .NET and Apache OFBiz bugs as exploited in attacks

The US Cybersecurity & Infrastructure Security Agency (CISA) has added four vulnerabilities to its Known Exploited Vulnerabilities catalog, urging federal agencies…

Amazon S3 Namesquatting image
05
Feb
2025

How attackers abuse S3 Bucket Namesquatting — And How to Stop Them

With the sheer amount of data and users leveraging AWS, it’s easy for misconfigurations to slip through the cracks. One…

Arrest
05
Feb
2025

Spain arrests suspected hacker of US and Spanish military agencies

The Spanish police have arrested a suspected hacker in Alicante for allegedly conducting 40 cyberattacks targeting critical public and private organizations,…

Zyxel
05
Feb
2025

Zyxel won’t patch newly exploited flaws in end-of-life routers

Zyxel has issued a security advisory about actively exploited flaws in CPE Series devices, warning that it has no plans…

Cryptocurrency falling
04
Feb
2025

Google Play, Apple App Store apps caught stealing crypto wallets

Android and iOS apps on the Google Play Store and Apple App Store contain a malicious software development kit (SDK)…

Hacker
04
Feb
2025

Cyber agencies share security guidance for network edge devices

Five Eyes cybersecurity agencies in the UK, Australia, Canada, New Zealand, and the U.S. have issued guidance urging makers of…

Panda
04
Feb
2025

Chinese cyberspies use new SSH backdoor in network device hacks

A Chinese hacking group is hijacking the SSH daemon on network appliances by injecting malware into the process for persistent…

7-Zip
04
Feb
2025

7-Zip MotW bypass exploited in zero-day attacks against Ukraine

A 7-Zip vulnerability allowing attackers to bypass the Mark of the Web (MotW) Windows security feature was exploited by Russian…

Router
04
Feb
2025

Netgear warns users to patch critical WiFi router vulnerabilities

Netgear has fixed two critical vulnerabilities affecting multiple WiFi router models and urged customers to update their devices to the…

Specops VPN shield
04
Feb
2025

How hackers target your Active Directory with breached VPN passwords

As the gateways to corporate networks, VPNs are an attractive target for attackers seeking access to Active Directory environments. And…