Category: Bleeping Computer

Palo Alto Networks
06
Dec
2025

New wave of VPN login attempts targets Palo Alto GlobalProtect portals

A campaign has been observed targeting Palo Alto GlobalProtect portals with login attempts and launching scanning activity against SonicWall SonicOS…

Critical React, Next.js flaw lets hackers execute code on servers
06
Dec
2025

React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable

Over 77,000 Internet-exposed IP addresses are vulnerable to the critical React2Shell remote code execution flaw (CVE-2025-55182), with researchers now confirming…

Barts Health NHS discloses data breach after Oracle zero-day hack
05
Dec
2025

Barts Health NHS discloses data breach after Oracle zero-day hack

Barts Health NHS Trust, a major healthcare provider in England, announced that Clop ransomware actors have stolen files from one of…

Hackers watching
05
Dec
2025

A Practical Guide to Continuous Attack Surface Visibility

AUTHOR: Topher Lyons, Solutions Engineer at Sprocket Security The Limits of Passive Internet-Scan Data Most organizations are familiar with the…

FBI
05
Dec
2025

FBI warns of virtual kidnapping scams using altered social media photos

The FBI warns that criminals are altering images shared on social media and using them as fake proof of life…

X (formerly known as Twitter)
05
Dec
2025

EU fines X $140 million over deceptive blue checkmarks

The European Commission has fined X €120 million ($140 million) for violating transparency obligations under the Digital Services Act (DSA)….

Cloudflare
05
Dec
2025

Cloudflare blames today’s outage on emergency React2Shell patch

Earlier today, Cloudflare experienced a widespread outage that caused websites and online platforms worldwide to go down, returning a “500…

Inotiv
05
Dec
2025

Pharma firm Inotiv discloses data breach after ransomware attack

American pharmaceutical firm Inotiv is notifying thousands of people that they’re personal information was stolen in an August 2025 ransomware attack….

React2Shell critical flaw actively exploited in China-linked attacks
05
Dec
2025

React2Shell critical flaw actively exploited in China-linked attacks

Multiple China-linked threat actors began exploiting the React2Shell vulnerability (CVE-2025-55182) affecting React and Next.js just hours after the max-severity issue…

Cloudflare
05
Dec
2025

Cloudflare down, websites offline with 500 Internal Server Error

Cloudflare is down, as websites are crashing with a 500 Internal Server Error. Cloudflare has confirmed that it’s investigating the…

Hackers are exploiting ArrayOS AG VPN flaw to plant webshells
05
Dec
2025

Hackers are exploiting ArrayOS AG VPN flaw to plant webshells

Threat actors have been exploiting a command injection vulnerability in Array AG Series VPN devices to plant webshells and create…

Multiple London councils
05
Dec
2025

NCSC’s ‘Proactive Notifications’ warns orgs of flaws in exposed devices

The UK’s National Cyber Security Center (NCSC) announced the testing phase of a new service called Proactive Notifications, designed to…