Category: Bleeping Computer

Goblin
10
Mar
2024

Magnet Goblin hackers use 1-day flaws to drop custom Linux malware

Image: Midjourney A financially motivated hacking group named Magnet Goblin uses various 1-day vulnerabilities to breach public-facing servers and deploy…

WordPress
10
Mar
2024

Hackers exploit WordPress plugin flaw to infect 3,300 sites with malware

Hackers are breaching WordPress sites by exploiting a vulnerability in outdated versions of the Popup Builder plugin, infecting over 3,300…

Locked bitcoin
09
Mar
2024

The Week in Ransomware – March 8th 2024

We saw another ransomware operation shut down this week after first getting breached by law enforcement and then targeting critical…

Lock with a bitcoin symbol in chains
09
Mar
2024

The Week in Ransomware – March 8th 2024

We saw another ransomware operation shut down this week after first getting breached by law enforcement and then targeting critical…

QNAP warning
09
Mar
2024

QNAP warns of critical auth bypass flaw in its NAS devices

QNAP warns of vulnerabilities in its NAS software products, including QTS, QuTS hero, QuTScloud, and myQNAPcloud, that could allow attackers…

Fortinet fixes critical FortiNAC remote command execution flaw
08
Mar
2024

Critical Fortinet flaw may impact 150,000 exposed devices

Scans on the public web show that approximately 150,000 Fortinet FortiOS and FortiProxy secure web gateway systems are vulnerable to…

UnitedHealth Group
08
Mar
2024

UnitedHealth brings some Change Healthcare pharmacy services back online

Optum’s Change Healthcare has started to bring systems back online after suffering a crippling BlackCat ransomware attack last month that…

Tesla Logo
08
Mar
2024

MiTM phishing attack can let attackers unlock and steal a Tesla

Update: Title and content updated to clarify this is MiTM phishing attack conducted using a Flipper Zero but it could…

Microsoft
08
Mar
2024

Microsoft says Russian hackers breached its systems, accessed source code

Microsoft says the Russian ‘Midnight Blizzard’ hacking group recently accessed some of its internal systems and source code repositories using…

Cloud servers
08
Mar
2024

CISA, NSA share best practices for securing cloud services

The NSA and the Cybersecurity and Infrastructure Security Agency (CISA) have released five joint cybersecurity bulletins containing on best practices…

Tesla Logo
08
Mar
2024

Flipper Zero WiFi phishing attack can unlock and steal Tesla cars

Update: Title updated to clarify this is phishing attack conducted using a Flipper Zero. An easy phishing attack using a…

Swiss
08
Mar
2024

Play ransomware leaked 65,000 government documents

The National Cyber Security Centre (NCSC) of Switzerland has released a report on its analysis of a data breach following…