Category: Bleeping Computer

Kubernetes
10
Jan
2023

Kubernetes clusters hacked in malware campaign via PostgreSQL

The Kinsing malware is now actively breaching Kubernetes clusters by leveraging known weaknesses in container images and misconfigured, exposed PostgreSQL…

GitHub
09
Jan
2023

GitHub makes it easier to scan your code for vulnerabilities

GitHub has introduced a new option to set up code scanning for a repository known as “default setup,” designed to help…

Drugs in the shape of a skull and crossbones
09
Jan
2023

Darknet drug markets move to custom Android apps for increased privacy

Online markets selling drugs and other illegal substances on the dark web have started to use custom Android apps for…

Supply chain
09
Jan
2023

Auth0 fixes RCE flaw in JsonWebToken library used by 22,000 projects

Auth0 fixed a remote code execution vulnerability in the immensely popular ‘JsonWebToken’ open-source library used by over 22,000 projects and…

Pokemon
09
Jan
2023

Hackers push fake Pokemon NFT game to take over Windows devices

Threat actors are using a well-crafted Pokemon NFT card game website to distribute the NetSupport remote access tool and take…

Windows 7
09
Jan
2023

Microsoft ends Windows 7 extended security updates on Tuesday

Windows 7 Professional and Enterprise editions will no longer receive extended security updates for critical and important vulnerabilities starting Tuesday,…

PyPI
07
Jan
2023

Malicious PyPi packages create CloudFlare Tunnels to bypass firewalls

Six malicious packages on PyPI, the Python Package Index, were found installing information-stealing and RAT (remote access trojan) malware while…

Windows
07
Jan
2023

Microsoft shares temporary fix for ODBC database connection issues

Microsoft has released a temporary fix for a known issue impacting Windows apps using ODBC database connections after installing the…

FCC
07
Jan
2023

FCC wants telecom carriers to report data breaches faster

The U.S. Federal Communications Commission wants to strengthen federal law enforcement and modernize breach notification requirements for telecommunications companies so…

Chains around a bitcoin
07
Jan
2023

The Week in Ransomware – January 6th 2023

This week saw a lot of ransomware news, ranging from new extortion tactics, to a ransomware gang giving away a…

Air France–KLM
07
Jan
2023

Air France and KLM notify customers of account hacks

Air France and KLM have informed Flying Blue customers that some of their personal information was exposed after their accounts…

Chick-fil-A
06
Jan
2023

Chick-fil-A investigates reports of hacked customer accounts

American fast-food restaurant chain Chick-fil-A is investigating what it described as “suspicious activity” linked to some of its customers’ accounts. “We…