Category: Bleeping Computer

Botnet
20
Aug
2025

“Rapper Bot” malware seized, alleged developer identified and charged

The U.S. Department of Justice (DoJ) announced charges against the alleged developer and administrator of the “Rapper Bot” DDoS-for-hire botnet. Ethan Foltz, 22,…

Threat actors abuse Google Apps Script in evasive phishing attacks
20
Aug
2025

Why email security needs its EDR moment to move beyond prevention

Security leaders today are rethinking email security, not because traditional methods have failed outright, but because the threat landscape and…

Hackers steal Microsoft logins using legitimate ADFS redirects
20
Aug
2025

Hackers steal Microsoft logins using legitimate ADFS redirects

Hackers are using a novel technique that combines legitimate office.com links with Active Directory Federation Services (ADFS) to redirect users to…

Padlock
20
Aug
2025

Major password managers can leak logins in clickjacking attacks

Six major password managers with tens of millions of users are currently vulnerable to unpatched clickjacking flaws that could allow…

Microsoft
20
Aug
2025

Microsoft investigates outage impacting Copilot, Office.com

Microsoft is investigating an ongoing issue preventing users across North America from accessing Office.com and the company’s Copilot AI-powered assistant….

Windows
20
Aug
2025

Microsoft reportedly fixing SSD failures caused by Windows updates

Recently released Windows 11 24H2 updates are reportedly causing data corruption and failure issues for some SSD and HDD models…

Windows
20
Aug
2025

Microsoft fixes Windows upgrades failing with 0x8007007F error

Microsoft has resolved a known issue that caused Windows upgrades to fail with 0x8007007F errors on some Windows 11 and…

Windows
20
Aug
2025

Microsoft releases emergency updates to fix Windows recovery

Microsoft has released emergency Windows out-of-band updates to resolve a known issue breaking reset and recovery operations after installing the…

PyPI now blocks domain resurrection attacks used for hijacking accounts
19
Aug
2025

PyPI now blocks domain resurrection attacks used for hijacking accounts

The Python Package Index (PyPI) has introduced new protections against domain resurrection attacks that enable hijacking accounts through password resets….

Microsoft Teams
19
Aug
2025

Microsoft shares workaround for Teams “couldn’t connect” error

Microsoft is resolving a known issue that causes “couldn’t connect” errors when launching the Microsoft Teams desktop and web applications….

Okta open-sources Auth0 rules catalog for threat detection
19
Aug
2025

Okta open-sources catalog of Auth0 rules for threat detection

Okta has open-sourced ready-made Sigma-based queries for Auth0 customers to detect account takeovers, misconfigurations, and suspicious behavior in event logs….

Fake Microsoft Office add-in tools push malware via SourceForge
19
Aug
2025

Elastic rejects claims of a zero-day RCE flaw in Defend EDR

Enterprise search and security company Elastic is rejecting reports of a zero-day vulnerability impacting its Defend endpoint detection and response…