Category: Bleeping Computer

Git logo
27
Jan
2025

Clone2Leak attacks exploit Git flaws to steal credentials

A set of three distinct but related attacks, dubbed ‘Clone2Leak,’ can leak credentials by exploiting how Git and its credential…

Ransomware gang uses SSH tunnels for stealthy VMware ESXi access
26
Jan
2025

Ransomware gang uses SSH tunnels for stealthy VMware ESXi access

Ransomware actors targeting ESXi bare metal hypervisors are leveraging SSH tunneling to persist on the system while remaining undetected. VMware…

UnitedHealth header image
26
Jan
2025

UnitedHealth now says 190 million impacted by 2024 data breach

UnitedHealth has revealed that 190 million Americans had their personal and healthcare data stolen in the Change Healthcare ransomware attack,…

TalkTalk
26
Jan
2025

TalkTalk investigates breach after data for sale on hacking forum

UK telecommunications company TalkTalk is investigating a third-party supplier data breach after a threat actor began selling alleged customer data…

PayPal
25
Jan
2025

PayPal to pay $2 million settlement over 2022 data breach

New York State has announced a $2,000,000 settlement with PayPal over charges it failed to comply with the state’s cybersecurity regulations,…

Zyxel Firewalls
25
Jan
2025

Zyxel warns of bad signature update causing firewall boot loops

Zyxel is warning that a bad security signature update is causing critical errors for USG FLEX or ATP Series firewalls, including putting…

Windows
24
Jan
2025

Microsoft to deprecate WSUS driver synchronization in 90 days

Microsoft has reminded Windows administrators that driver synchronization in Windows Server Update Services (WSUS) will be deprecated on April 18,…

Hackers use Windows RID hijacking to create hidden admin account
24
Jan
2025

Hackers use Windows RID hijacking to create hidden admin account

A North Korean threat group has been using a technique called RID hijacking that tricks Windows into treating a low-privileged account…

Subaru
24
Jan
2025

Subaru Starlink flaw let hackers hijack cars in US and Canada

Security researchers have discovered an arbitrary account takeover flaw in Subaru’s Starlink service that could let attackers track, control, and hijack vehicles in…

Hacker smiley face
24
Jan
2025

Hacker infects 18,000 “script kiddies” with fake malware builder

A threat actor targeted low-skilled hackers, known as “script kiddies,” with a fake malware builder that secretly infected them with…

SmartTech header
24
Jan
2025

Managed Detection and Response – How are you monitoring?

Security Information and Event Management (SIEM) systems are now a critical component of enterprise security operations, helping organizations detect, respond…

Exchange Server
24
Jan
2025

Outdated Exchange servers fail to auto-mitigate security bugs

Microsoft says outdated Exchange servers cannot receive new emergency mitigation definitions because an Office Configuration Service certificate type is being…