Category: Bleeping Computer

Phishing
29
Jul
2024

Proofpoint settings exploited to send millions of phishing emails daily

A massive phishing campaign dubbed “EchoSpoofing” exploited now-fixed, weak permissions in Proofpoint’s email protection service to dispatch millions of spoofed emails…

Misconfigured Selenium Grid servers abused for Monero mining
29
Jul
2024

Misconfigured Selenium Grid servers abused for Monero mining

Threat actors are exploiting a misconfiguration in Selenium Grid, a popular web app testing framework, to deploy a modified XMRig tool…

WhatsApp for Windows lets Python, PHP scripts execute with no warning
28
Jul
2024

WhatsApp for Windows lets Python, PHP scripts execute with no warning

A security issue in the latest version of WhatsApp for Windows allows sending Python and PHP attachments that are executed…

X flare
28
Jul
2024

X begins training Grok AI with your posts, here’s how to disable

X has quietly begun training its Grok AI chat platform using members’ public posts without first alerting anyone that it is doing…

Windows 11
28
Jul
2024

Windows 11 taskbar has a hidden “End Task” feature, how to turn it on

Microsoft has added a feature to Windows 11 that allows you to end tasks directly from the taskbar, but it’s…

Google
26
Jul
2024

Google fixes Chrome Password Manager bug that hides credentials

Google has fixed a bug in Chrome’s Password Manager that caused user credentials to disappear temporarily for more than 18…

Crypto exchange Gemini discloses third-party data breach
26
Jul
2024

Crypto exchange Gemini discloses third-party data breach

Cryptocurrency exchange Gemini is warning it suffered a data breach incident caused by a cyberattack at its Automated Clearing House…

Data Breach
26
Jul
2024

FBCS data breach impact now reaches 4.2 million people

Debt collection agency Financial Business and Consumer Solutions (FBCS) has again increased the number of people impacted by a February…

Windows Server
26
Jul
2024

July Windows Server updates break Remote Desktop connections

Microsoft has confirmed that July’s security updates break remote desktop connections in organizations where Windows servers are configured to use…

Acronis
26
Jul
2024

Acronis warns of Cyber Infrastructure default password abused in attacks

Image: Midjourney​Acronis warned customers to patch a critical Cyber Infrastructure security flaw that lets attackers bypass authentication on vulnerable servers using…

Russia
26
Jul
2024

Russian ransomware gangs account for 69% of all ransom proceeds

Russian-speaking threat actors accounted for at least 69% of all crypto proceeds linked to ransomware throughout the previous year, exceeding…

PKfail
26
Jul
2024

PKfail Secure Boot bypass lets attackers install UEFI malware

Hundreds of UEFI products from 10 vendors are susceptible to compromise due to a critical firmware supply-chain issue known as…