Category: Bleeping Computer

DPRK hackers dupe targets into typing PowerShell commands as admin
12
Feb
2025

DPRK hackers dupe targets into typing PowerShell commands as admin

North Korean state actor ‘Kimsuky’ (aka ‘Emerald Sleet’ or ‘Velvet Chollima’) has been observed using a new tactic inspired from…

BadPilot network hacking campaign fuels Russian SandWorm attacks
12
Feb
2025

BadPilot network hacking campaign fuels Russian SandWorm attacks

A subgroup of the Russian state-sponsored hacking group APT44, also known as ‘Seashell Blizzard’ and ‘Sandworm’, has been targeting critical…

Ivanti fixes three critical flaws in Connect Secure & Policy Secure
12
Feb
2025

Ivanti fixes three critical flaws in Connect Secure & Policy Secure

Ivanti has released security updates for Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Secure Access Client (ISAC)…

Windows 11 KB5051987 & KB5051989 cumulative updates released
11
Feb
2025

Windows 11 KB5051987 & KB5051989 cumulative updates released

Microsoft has released Windows 11 KB5051987 and KB5051989 cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues….

Windows 10
11
Feb
2025

Windows 10 KB5051974 update force installs new Microsoft Outlook app

Microsoft has released the KB5051974 cumulative update for Windows 10 22H2 and Windows 10 21H2, which automatically installs the new…

Fortinet
11
Feb
2025

Fortinet warns of new zero-day exploited to hijack firewalls

Fortinet warned today that attackers are exploiting another authentication bypass zero-day bug in FortiOS and FortiProxy to hijack Fortinet firewalls…

Police arrest
11
Feb
2025

Police arrests 2 Phobos ransomware suspects, seizes 8Base sites

A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of two suspected hackers in…

SonicWall firewall exploit lets hackers hijack VPN sessions, patch now
11
Feb
2025

SonicWall firewall exploit lets hackers hijack VPN sessions, patch now

Security researchers at Bishop Fox have published complete exploitation details for the CVE-2024-53704 vulnerability that allows bypassing the authentication mechanism…

Russian hackers
11
Feb
2025

Russian military hackers deploy malicious Windows activators in Ukraine

The Sandworm Russian military cyber-espionage group is targeting Windows users in Ukraine with trojanized Microsoft Key Management Service (KMS) activators…

US indicts 8Base ransomware operators for Phobos encryption attacks
11
Feb
2025

US indicts 8Base ransomware operators for Phobos encryption attacks

The U.S. Justice Department announced the names of two Phobos ransomware affiliates arrested yesterday in Thailand, charging them on 11…

Hackers in data center
11
Feb
2025

US sanctions LockBit ransomware’s bulletproof hosting provider

​The United States, Australia, and the United Kingdom have sanctioned Zservers, a Russia-based bulletproof hosting (BPH) services provider, for supplying…

Hacker
11
Feb
2025

Over 12,000 KerioControl firewalls exposed to exploited RCE flaw

Over twelve thousand GFI KerioControl firewall instances are exposed to a critical remote code execution vulnerability tracked as CVE-2024-52875. KerioControl…