Category: Bleeping Computer

Path of Exile 2
14
Jan
2025

Stolen Path of Exile 2 admin account used to hack player accounts

Path of Exile 2 developers confirmed that a hacked admin account allowed a threat actor to change the password and…

CISA
14
Jan
2025

CISA orders agencies to patch BeyondTrust bug exploited in attacks

​CISA has tagged a command injection vulnerability (CVE-2024-12686) in BeyondTrust’s Privileged Remote Access (PRA) and Remote Support (RS) as actively…

Apple
13
Jan
2025

macOS bug lets hackers install malicious kernel drivers

Apple recently addressed a macOS vulnerability that allows attackers to bypass System Integrity Protection (SIP) and install malicious kernel drivers…

Hacker
13
Jan
2025

Hackers exploit critical Aviatrix Controller RCE flaw in attacks

Threat actors are exploiting a critical remote command execution vulnerability, tracked as CVE-2024-50603, in Aviatrix Controller instances to install backdoors…

Nominet
13
Jan
2025

UK domain registry Nominet confirms breach via Ivanti zero-day

Nominet, the official .UK domain registry and one of the largest country code registries, has confirmed that its network was…

Hand holding a key
13
Jan
2025

Ransomware abuses Amazon AWS feature to encrypt S3 buckets

A new ransomware campaign encrypts Amazon S3 buckets using AWS’s Server-Side Encryption with Customer Provided Keys (SSE-C) known only to…

Microsoft 365
13
Jan
2025

Microsoft MFA outage blocking access to Microsoft 365 apps

​Microsoft is investigating an ongoing Multi-Factor Authentication (MFA) outage that is blocking customers from accessing Microsoft 365 Office apps. Some affected…

Apple logo over a red world
12
Jan
2025

Phishing texts trick Apple iMessage users into disabling protection

Cybercriminals are exploiting a trick to turn off Apple iMessage’s built-in phishing protection for a text and trick users into…

Church
12
Jan
2025

Pastor who saw crypto project in his “dream” indicted for fraud

A pastor at a Pasco, Washington, church has been indicted on 26 counts of fraud for allegedly operating a cryptocurrency scam…

Money chained
11
Jan
2025

Scammers file first — Get your IRS Identity Protection PIN now

The IRS relaunched its Identity Protection Personal Identification Number (IP PIN) program this week and all US taxpayers are encouraged to…

Hacker
11
Jan
2025

Fake LDAPNightmware exploit on GitHub spreads infostealer malware

A deceptive proof-of-concept (PoC) exploit for CVE-2024-49113 (aka “LDAPNightmare”) on GitHub infects users with infostealer malware that exfiltrates sensitive data…

Telefónica logo
10
Jan
2025

Telefónica confirms internal ticketing system breach after data leak

Spanish telecommunications company Telefónica confirms its internal ticketing system was breached after stolen data was leaked on a hacking forum….