Category: Bleeping Computer

Windows 11
27
Oct
2025

Windows will soon prompt for memory scans after BSOD crashes

Microsoft has started testing a new feature that prompts Windows 11 users to run a memory scan when logging in…

State of Exposure Management text
27
Oct
2025

The State of Exposure Management in 2025: Insights From 3,000+ Organizations

In 2025, AI is making it easier for attackers to exploit weaknesses, while businesses are contending with expanding attack surfaces…

Italian spyware vendor linked to Chrome zero-day attacks
27
Oct
2025

Italian spyware vendor linked to Chrome zero-day attacks

A zero-day vulnerability in Google Chrome, exploited in Operation ForumTroll earlier this year, delivered malware linked to Italian spyware vendor…

QNAP
27
Oct
2025

QNAP warns of critical ASP.NET flaw in its Windows backup software

QNAP warned customers to patch a critical ASP.NET Core vulnerability that also impacts the company’s NetBak PC Agent, a Windows…

Google
27
Oct
2025

Google says everyone will be able to vibe code video games

Google AI Studio product lead teased that everyone will be able to vibe code video games by the end of…

Windows
27
Oct
2025

New policy removes pre-installed Microsoft Store apps

Microsoft now allows IT administrators to remove pre-installed Microsoft Store apps (also known as in-box apps) using a new app…

CISA
27
Oct
2025

CISA orders feds to patch actively exploited Windows Server WSUS flaw

The Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. government agencies to patch a critical-severity Windows Server Update Services (WSUS)…

Discord
27
Oct
2025

Hackers steal Discord accounts with RedTiger-based infostealer

Attackers are using the open-source red-team tool RedTiger to build an infostealer that collects Discord account data and payment information….

New
25
Oct
2025

New CoPhish attack steals OAuth tokens via Copilot Studio agents

A new phishing technique dubbed ‘CoPhish’ weaponizes Microsoft Copilot Studio agents to deliver fraudulent OAuth consent requests via legitimate and…

Hackers launch mass attacks exploiting outdated WordPress plugins
24
Oct
2025

Hackers launch mass attacks exploiting outdated WordPress plugins

A widespread exploitation campaign is targeting WordPress websites with GutenKit and Hunk Companion plugins vulnerable to critical-severity, old security issues…

Windows Server
24
Oct
2025

Critical WSUS flaw in Windows Server now exploited in attacks

Attackers are now exploiting a critical-severity Windows Server Update Service (WSUS) vulnerability, which already has publicly available proof-of-concept exploit code….

AWS
24
Oct
2025

This week’s AWS outage caused by major DNS failure

Amazon says a major DNS failure was behind a massive AWS (Amazon Web Services) outage that took down many websites…