Category: Bleeping Computer

Microsoft: Hackers steal emails in device code phishing attacks
15
Feb
2025

Hackers steal emails in device code phishing attacks

An active campaign from a threat actor potentially linked to Russia is targeting Microsoft 365 accounts of individuals at organizations of interest using device code…

Hackers exploit authentication bypass in Palo Alto Networks PAN-OS
15
Feb
2025

Hackers exploit authentication bypass in Palo Alto Networks PAN-OS

Hackers are launching attacks against Palo Alto Networks PAN-OS firewalls by exploiting a recently fixed vulnerability (CVE-2025-0108) that allows bypassing authentication….

SonicWall
14
Feb
2025

SonicWall firewall bug leveraged in attacks after PoC exploit release

Attackers are now targeting an authentication bypass vulnerability affecting SonicWall firewalls shortly after the release of proof-of-concept (PoC) exploit code….

SonicWall
14
Feb
2025

SonicWall firewall bug targeted in attacks after PoC exploit release

Attackers are now targeting an authentication bypass vulnerability affecting SonicWall firewalls shortly after the release of proof-of-concept (PoC) exploit code….

Malicious PirateFi game infects Steam users with Vidar malware
14
Feb
2025

Malicious PirateFi game infects Steam users with Vidar malware

A free-to-play game named PirateFi in the Steam store has been distributing the Vidar infostealing malware to unsuspecting users. The…

Hacker
14
Feb
2025

PostgreSQL flaw exploited as zero-day in BeyondTrust breach

​Rapid7’s vulnerability research team says attackers exploited a PostgreSQL security flaw as a zero-day to breach the network of privileged…

Chinese hackers
14
Feb
2025

Chinese hackers breach more US telecoms via unpatched Cisco routers

China’s Salt Typhoon hackers are still actively targeting telecoms worldwide and have breached more U.S. telecommunications providers via unpatched Cisco…

Windows Server 2025
14
Feb
2025

Microsoft fixes bug causing Windows Server 2025 boot errors

​Microsoft has fixed a known issue causing “boot device inaccessible” errors during startup on some Windows Server 2025 systems using…

whoAMI attacks give hackers code execution on Amazon EC2 instances
14
Feb
2025

whoAMI attacks give hackers code execution on Amazon EC2 instances

Security researchers discovered a name confusion attack that allows access to an Amazon Web Services account to anyone that publishes an…

Dutch Police seizes 127 XHost servers, dismantles bulletproof hoster
13
Feb
2025

Dutch Police seizes 127 XHost servers, dismantles bulletproof hoster

The Dutch Police (Politie) dismantled the ZServers/XHost bulletproof hosting operation after taking offline 127 servers used by the illegal platform. Earlier this…

Hacker leaks account data of 12 million Zacks Investment users
13
Feb
2025

Hacker leaks account data of 12 million Zacks Investment users

Zacks Investment Research (Zacks) last year reportedly suffered another data breach that exposed sensitive information related to roughly 12 million…

Chinese espionage tools deployed in RA World ransomware attack
13
Feb
2025

Chinese espionage tools deployed in RA World ransomware attack

A China-based threat actor, tracked as Emperor Dragonfly and commonly associated with cybercriminal endeavors, has been observed using in a ransomware…