Category: Bleeping Computer

Google
02
Jan
2026

Google is testing a new image AI and it’s going to be its fastest model

Google is testing a new image AI model called “Nano Banana 2 Flash,” and it’s going to be faster than…

Trust Wallet
02
Jan
2026

Trust Wallet links $8.5 million crypto theft to Shai-Hulud NPM attack

Trust Wallet believes the compromise of its web browser to steal roughly $8.5 million from over 2,500 crypto wallets is…

New GlassWorm malware wave targets Macs with trojanized crypto wallets
01
Jan
2026

New GlassWorm malware wave targets Macs with trojanized crypto wallets

A fourth wave of the “GlassWorm” campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver trojanized versions of crypto…

ChatGPT
01
Jan
2026

OpenAI is offering $20 ChatGPT Plus for free to some users

If you’re already subscribed to ChatGPT Plus, which costs $20, you can request OpenAI to cancel your subscription, and it…

Flipper Zero Raspberry PI
01
Jan
2026

NYC mayoral inauguration bans Flipper Zero, Raspberry Pi devices

New York City’s 2026 mayoral inauguration of Zohran Mamdani has published a list of banned items for the event, specifically…

Amazon: Ongoing cryptomining campaign uses hacked AWS accounts
31
Dec
2025

Hackers drain $3.9M from Unleash Protocol after multisig hijack

The decentralized intellectual property platform Unleash Protocol has lost around $3.9 million worth of cryptocurrency after someone executed an unauthorized contract…

RondoDox botnet exploits React2Shell flaw to breach Next.js servers
31
Dec
2025

RondoDox botnet exploits React2Shell flaw to breach Next.js servers

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers. First…

IBM
31
Dec
2025

IBM warns of critical API Connect auth bypass vulnerability

IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could allow attackers…

Disney
31
Dec
2025

Disney will pay $10 million to settle children’s data privacy lawsuit

Disney has agreed to pay a $10 million civil penalty to settle claims that it violated the Children’s Online Privacy…

New password spraying attacks target Cisco, PAN VPN gateways
31
Dec
2025

New ErrTraffic service enables ClickFix attacks via fake browser glitches

A new cybercrime tool called ErrTraffic allows threat actors to automate ClickFix attacks by generating ‘fake glitches’ on compromised websites to…

Zoom Stealer browser extensions harvest corporate meeting intelligence
30
Dec
2025

Zoom Stealer browser extensions harvest corporate meeting intelligence

A newly discovered campaign, which researchers call Zoom Stealer, is affecting 2.2 million Chrome, Firefox, and Microsoft Edge users through…

European Space Agency
30
Dec
2025

European Space Agency confirms breach of “external servers”

The European Space Agency (ESA) confirmed that attackers recently breached servers outside its corporate network, which contained what it described…