Category: Bleeping Computer

SharePoint
20
Jul
2025

Microsoft SharePoint zero-day exploited in RCE attacks, no patch available

A critical zero-day vulnerability in Microsoft SharePoint, tracked as CVE-2025-53770, has been actively exploited since at least July 18th, with…

Hacker
19
Jul
2025

Threat actors downgrade FIDO2 MFA auth in PoisonSeed phishing attack

A PoisonSeed phishing campaign is bypassing FIDO2 security key protections by abusing the cross-device sign-in feature in WebAuthn to trick users…

NPM
19
Jul
2025

Popular npm linter packages hijacked via phishing to drop malware

Popular JavaScript libraries were hijacked this week and turned into malware droppers, in a supply chain attack achieved via targeted phishing…

GPT-5
19
Jul
2025

ChatGPT”s GPT-5-reasoning-alpha model spotted ahead of launch

GPT-5 might be just a few days or weeks away, as we’ve spotted references to a new model called gpt-5-reasoning-alpha-2025-07-13….

AI
19
Jul
2025

OpenAI, Anthropic, Google may disrupt education market with new AI tools

AI companies could soon disrupt the education market with their new AI-based learning tools for students. BleepingComputer recently reported that OpenAI…

CrushFTP
19
Jul
2025

New CrushFTP zero-day exploited in attacks to hijack servers

CrushFTP is warning that threat actors are actively exploiting a zero-day vulnerability tracked as CVE-2025-54309, which allows attackers to gain…

CrushFTP
19
Jul
2025

CrushFTP zero-day exploited in attacks to gain admin access on servers

CrushFTP is warning that threat actors are actively exploiting a zero-day vulnerability tracked as CVE-2025-54309, which allows attackers to gain…

CrushFTP
19
Jul
2025

CrushFTP zero-day exploited to gain admin access on servers

CrushFTP is warning that threat actors are actively exploiting a zero-day vulnerability tracked as CVE-2025-54309, which allows attackers to gain…

Arch Linux
19
Jul
2025

Arch Linux pulls AUR packages that installed Chaos RAT malware

Arch Linux has pulled three malicious packages uploaded to the Arch User Repository (AUR) were used to install the CHAOS…

ChatGPT
19
Jul
2025

New ChatGPT o3-alpha model hints at coding upgrade

ChatGPT’s o3 is OpenAI’s best model to date because it features reasoning, and it might get even better in the…

Russian hackers breach orgs to track aid routes to Ukraine
18
Jul
2025

UK ties GRU to stealthy Microsoft 365 credential-stealing malware

The UK National Cyber Security Centre (NCSC) has formally attributed ‘Authentic Antics’ espionage malware attacks to APT28 (Fancy Bear), a…

Windows 11
18
Jul
2025

Microsoft mistakenly tags Windows Firewall error log bug as fixed

Microsoft has mistakenly tagged an ongoing Windows Firewall error message bug as fixed in recent updates, stating that they are…