Category: Bleeping Computer

Surge in attacks exploiting old ThinkPHP and ownCloud flaws
13
Feb
2025

Surge in attacks exploiting old ThinkPHP and ownCloud flaws

Increased hacker activity has been observed in attempts to compromise poorly maintained devices that are vulnerable to older security issues…

CryptoCurrency falling
13
Feb
2025

zkLend loses $9.5M in crypto heist, asks hacker to return 90%

Decentralized money lender zkLend suffered a breach where threat actors exploited a smart contract flaw to steal 3,600 Ethereum, worth…

Fortinet
13
Feb
2025

Fortinet discloses second firewall auth bypass patched in January

Update 2/11/25 07:32 PM ET: After publishing our story, Fortinet has informed us that the new CVE-2025-24472 flaw added to FG-IR-24-535 today is not…

Google with a red starburst
12
Feb
2025

Google fixes flaw that could unmask YouTube users’ email addresses

Google has fixed two vulnerabilities that, when chained together, could expose the email addresses of YouTube accounts, causing a massive…

TruGrid header
12
Feb
2025

How TruGrid Simplifies RDP Deployment, Security, and Compliance

While the first article outlined why VPNs are risky and cloud-based RDP is a superior alternative, this article will take…

Sarcoma ransomware claims breach at giant PCB maker Unimicron
12
Feb
2025

Sarcoma ransomware claims breach at giant PCB maker Unimicron

A relatively new ransomware operation named ‘Sarcoma’ has claimed responsibility for an attack against the Unimicron printed circuit boards (PCB)…

DPRK hackers dupe targets into typing PowerShell commands as admin
12
Feb
2025

DPRK hackers dupe targets into typing PowerShell commands as admin

North Korean state actor ‘Kimsuky’ (aka ‘Emerald Sleet’ or ‘Velvet Chollima’) has been observed using a new tactic inspired from…

BadPilot network hacking campaign fuels Russian SandWorm attacks
12
Feb
2025

BadPilot network hacking campaign fuels Russian SandWorm attacks

A subgroup of the Russian state-sponsored hacking group APT44, also known as ‘Seashell Blizzard’ and ‘Sandworm’, has been targeting critical…

Ivanti fixes three critical flaws in Connect Secure & Policy Secure
12
Feb
2025

Ivanti fixes three critical flaws in Connect Secure & Policy Secure

Ivanti has released security updates for Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Secure Access Client (ISAC)…

Windows 11 KB5051987 & KB5051989 cumulative updates released
11
Feb
2025

Windows 11 KB5051987 & KB5051989 cumulative updates released

Microsoft has released Windows 11 KB5051987 and KB5051989 cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues….

Windows 10
11
Feb
2025

Windows 10 KB5051974 update force installs new Microsoft Outlook app

Microsoft has released the KB5051974 cumulative update for Windows 10 22H2 and Windows 10 21H2, which automatically installs the new…

Fortinet
11
Feb
2025

Fortinet warns of new zero-day exploited to hijack firewalls

Fortinet warned today that attackers are exploiting another authentication bypass zero-day bug in FortiOS and FortiProxy to hijack Fortinet firewalls…