Category: Bleeping Computer

Panda Express
01
May
2024

Panda Restaurants discloses data breach after corporate systems hack

Image: Coolcaesar (CC BY-SA 4.0) Panda Restaurant Group, the parent company of Panda Express, Panda Inn, and Hibachi-San, disclosed a…

Simone Veil Hospital
01
May
2024

French hospital CHC-SV refuses to pay LockBit extortion demand

The Hôpital de Cannes – Simone Veil (CHC-SV) in France announced it received a ransom demand from the Lockbit 3.0 ransomware…

GitLab
01
May
2024

CISA says GitLab account takeover bug is actively exploited in attacks

​CISA warned today that attackers are actively exploiting a maximum-severity GitLab vulnerability that allows them to take over accounts via…

Windows Server
01
May
2024

April Windows Server updates cause NTLM auth failures

Microsoft has confirmed customer reports of NTLM authentication failures and high load after installing last month’s Windows Server security updates….

Router
01
May
2024

New Cuttlefish malware infects routers to monitor traffic for credentials

A new malware named ‘Cuttlefish’ has been spotted infecting enterprise-grade and small office/home office (SOHO) routers to monitor data that…

Windows 10
01
May
2024

Microsoft says April Windows updates break VPN connections

Microsoft has confirmed that the April 2024 Windows security updates break VPN connections across client and server platforms. The company…

Qantas
01
May
2024

Qantas app exposed sensitive traveler details to random users

Qantas Airways confirms that some of its customers were impacted by a misconfiguration in its app that exposed sensitive information and boarding passes to…

Phishing
01
May
2024

New Latrodectus malware attacks use Microsoft, Cloudflare themes

Latrodectus malware is now being distributed in phishing campaigns using Microsoft Azure and Cloudflare lures to appear legitimate while making…

The Philadelphia Inquirer
30
Apr
2024

Data of over 25,000 people stolen in 2023 breach

Daily newspaper Philadelphia Inquirer revealed that attackers behind a May 2023 security breach have stolen the personal and financial information…

Google
30
Apr
2024

Google now pays up to $450,000 for RCE bugs in some Android apps

Google has increased rewards for reporting remote code execution vulnerabilities within select Android apps by ten times, from $30,000 to…

Letter R on fire
30
Apr
2024

R language flaw allows code execution via RDS/RDX files

A new vulnerability has been discovered in the R programming language that allows arbitrary code execution upon deserializing specially crafted RDS and RDX files….

Docker
30
Apr
2024

Millions of Docker repos found pushing malware, phishing sites

Three large-scale campaigns targeted Docker Hub users, planting millions of repositories that pushed malware and phishing sites since early 2021. As…