Category: Bleeping Computer

Email
27
Jan
2026

Over 6,000 SmarterMail servers exposed to automated hijacking attacks

Nonprofit security organization Shadowserver has found over 6,000 SmarterMail servers exposed online and likely vulnerable to attacks exploiting a critical…

SoundCloud
27
Jan
2026

SoundCloud data breach impacts 29.8 million accounts

Hackers have stolen the personal and contact information belonging to over 29.8 million SoundCloud user accounts after breaching the audio…

New malware service guarantees phishing extensions on Chrome web store
27
Jan
2026

New malware service guarantees phishing extensions on Chrome web store

A new malware-as-a-service (MaaS) called ‘Stanley’ promises malicious Chrome extensions that can clear Google’s review process and publish them to the…

StealC hackers hacked as researchers hijack malware control panels
27
Jan
2026

New ClickFix attacks abuse Windows App-V scripts to push malware

A new malicious campaign mixes the ClickFix method with fake CAPTCHA and a signed Microsoft Application Virtualization (App-V) script to ultimately…

Microsoft Office
26
Jan
2026

Microsoft patches actively exploited Office zero-day vulnerability

Microsoft has released emergency out-of-band security updates to patch a high-severity Microsoft Office zero-day vulnerability exploited in attacks. The security…

Cloudflare
26
Jan
2026

Cloudflare misconfiguration behind recent BGP route leak

Cloudflare has shared more details about a recent 25-minute Border Gateway Protocol (BGP) route leak affecting IPv6 traffic, which caused measurable congestion,…

European Union flag
26
Jan
2026

EU launches investigation into X over Grok-generated sexual images

The European Commission announced today that it has launched formal proceedings under the Digital Services Act to investigate whether X…

Telnet
26
Jan
2026

Nearly 800,000 Telnet servers exposed to remote attacks

Internet security watchdog Shadowserver tracks nearly 800,000 IP addresses with Telnet fingerprints amid ongoing attacks exploiting a critical authentication bypass…

6 Okta security settings you might have overlooked
26
Jan
2026

6 Okta security settings you might have overlooked

In today’s SaaS-first organizations, identity providers like Okta hold the digital keys to the kingdom. As organizations continue to consolidate…

Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets
26
Jan
2026

Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies

The defense mechanisms that NPM introduced after the ‘Shai-Hulud’ supply-chain attacks have weaknesses that allow threat actors to bypass them via…

VMware
26
Jan
2026

CISA says critical VMware RCE flaw now actively exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged a critical VMware vCenter Server vulnerability as actively exploited and…

ChatGPT
26
Jan
2026

ChatGPT Temporary chat feature is getting a much-needed upgrade

OpenAI is testing a big upgrade for ChatGPT’s temporary chat feature. The update will allow you to retain personalization in temporary…