Category: Bleeping Computer

Metal hand between sync cables
07
Jun
2024

Ukraine says hackers abuse SyncThing tool to steal data

The Computer Emergency Response Team of Ukraine (CERT-UA) reports about a new campaign dubbed “SickSync,” launched by the UAC-0020 (Vermin)…

PHP
07
Jun
2024

PHP fixes critical RCE flaw impacting all versions for Windows

A new PHP for Windows remote code execution (RCE) vulnerability has been disclosed, impacting all releases since version 5.x, potentially…

Los Angeles Unified School District (LAUSD)
07
Jun
2024

Los Angeles Unified School District investigates data theft claims

Los Angeles Unified School District (LAUSD) officials are investigating a threat actor’s claims that they’re selling stolen databases containing records…

Hacker
07
Jun
2024

Hackers exploit 2018 ThinkPHP flaws to install ‘Dama’ web shells

Image: Midjourney Chinese threat actors are targeting ThinkPHP applications vulnerable to CVE-2018-20062 and CVE-2019-9082 to install a persistent web shell named…

Metal hand between sync cables
07
Jun
2024

Ukraine says hackers abuse SyncThing data sync tool to steal data

The Computer Emergency Response Team of Ukraine (CERT-UA) reports about a new campaign dubbed “SickSync,” launched by the UAC-0020 (Vermin)…

GitHub
06
Jun
2024

New Gitloker attacks wipe GitHub repos in extortion scheme

Attackers are targeting GitHub repositories, wiping their contents, and asking the victims to reach out on Telegram for more information….

Fog
06
Jun
2024

New Fog ransomware targets US education sector via breached VPNs

A new ransomware operation named ‘Fog’ launched in early May 2024, using compromised VPN credentials to breach the networks of…

Panda
06
Jun
2024

PandaBuy pays ransom to hacker only to get extorted again

Chinese shopping platform Pandabuy told BleepingComputer it previously paid a a ransom demand to prevent stolen data from being leaked,…

Advance Auto Parts
06
Jun
2024

Advance Auto Parts stolen data for sale after Snowflake attack

Threat actors claim to be selling 3TB of data from Advance Auto Parts, a leading automotive aftermarket parts provider, stolen…

FBI
06
Jun
2024

FBI recovers 7,000 LockBit keys, urges ransomware victims to reach out

The FBI urges past victims of LockBit ransomware attacks to come forward after revealing that it has obtained over 7,000…

Linux version of TargetCompany ransomware focuses on VMware ESXi
06
Jun
2024

Linux version of TargetCompany ransomware focuses on VMware ESXi

Researchers observed a new Linux variant of the TargetCompany ransomware family that targets VMware ESXi environments using a custom shell script…

Google Chrome
06
Jun
2024

Google Chrome reduced cookie requests to improve performance

Google shared details on a recently introduced Chrome feature that changes how cookies are requested, with early tests showing increased…