EncryptHub's dual life: Cybercriminal vs Windows bug-bounty researcher

EncryptHub, a notorious threat actor linked to breaches at 618 organizations, is believed to have reported two Windows zero-day vulnerabilities to Microsoft, revealing a conflicted figure straddling the line between cybercrime and security research. [...] | Continue reading


@bleepingcomputer.com | 3 hours ago

Google fixes Android zero-days exploited in attacks, 60 other flaws

Google has released patches for 62 vulnerabilities in Android's April 2025 security update, including two zero-days exploited in targeted attacks. [...] | Continue reading


@bleepingcomputer.com | 7 hours ago

Europcar GitLab breach exposes data of up to 200,000 customers

A hacker breached the GitLab repositories of multinational car-rental company Europcar Mobility Group and stole source code for Android and iOS applications, as well as some personal information belonging to up to 200,000 users. [...] | Continue reading


@bleepingcomputer.com | 3 days ago

OpenAI's $20 ChatGPT Plus is now free for students until the end of May

ChatGPT Plus subscription is now free, but only if you're a student based out of the United States of America and Canada. [...] | Continue reading


@bleepingcomputer.com | 3 days ago

Max severity RCE flaw discovered in widely used Apache Parquet

A maximum severity remote code execution (RCE) vulnerability has been discovered impacting all versions of Apache Parquet up to and including 1.15.0. [...] | Continue reading


@bleepingcomputer.com | 4 days ago

Microsoft starts testing Windows 11 taskbar icon scaling

​Microsoft is testing a new taskbar icon scaling feature that automatically scales down Windows taskbar icons to show more apps when it gets too overcrowded. [...] | Continue reading


@bleepingcomputer.com | 4 days ago

CISA warns of Fast Flux DNS evasion used by cybercrime gangs

CISA, the FBI, the NSA, and international cybersecurity agencies are calling on organizations and DNS providers to mitigate the "Fast Flux" cybercrime evasion technique used by state-sponsored threat actors and ransomware gangs. [...] | Continue reading


@bleepingcomputer.com | 4 days ago

Ivanti patches Connect Secure zero-day exploited since mid-March

Ivanti has released security updates to patch a critical Connect Secure remote code execution vulnerability exploited by a China-linked espionage actor to deploy malware since at least mid-March 2025. [...] | Continue reading


@bleepingcomputer.com | 4 days ago

Oracle privately confirms Cloud breach to customers

Oracle has finally acknowledged to some customers that attackers have stolen old client credentials after breaching a "legacy environment" last used in 2017. [...] | Continue reading


@bleepingcomputer.com | 4 days ago

Recent GitHub supply chain attack traced to leaked SpotBugs token

A cascading supply chain attack on GitHub that targeted Coinbase in March has now been traced back to a single token stolen from a SpotBugs workflow, which allowed a threat actor to compromise multiple GitHub projects. [...] | Continue reading


@bleepingcomputer.com | 4 days ago

Verizon Call Filter API flaw exposed customers' incoming call history

A vulnerability in Verizon's Call Filter feature allowed customers to access the incoming call logs for another Verizon Wireless number through an unsecured API request. [...] | Continue reading


@bleepingcomputer.com | 5 days ago

GitHub expands security tools after 39 million secrets leaked in 2024

Over 39 million secrets like API keys and account credentials were leaked on GitHub throughout 2024, exposing organizations and users to significant security risks. [...] | Continue reading


@bleepingcomputer.com | 5 days ago

Microsoft adds hotpatching support to Windows 11 Enterprise

Microsoft has announced that hotpatch updates are now available for business customers using Windows 11 Enterprise 24H2 on x64 (AMD/Intel) systems, starting today. [...] | Continue reading


@bleepingcomputer.com | 5 days ago

The Reality Behind Security Control Failures—And How to Prevent Them

Most orgs only discover their security controls failed after a breach. With OnDefend's continuous validation, you can test, measure, and prove your defenses work—before attackers exploit blind spots. [...] | Continue reading


@bleepingcomputer.com | 5 days ago

Counterfeit Android devices found preloaded With Triada malware

A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, allowing threat actors to steal data as soon as they are set up. [...] | Continue reading


@bleepingcomputer.com | 5 days ago

Cisco warns of CSLU backdoor admin account used in attacks

Cisco warns admins to patch a critical Cisco Smart Licensing Utility (CSLU) vulnerability, which exposes a built-in backdoor admin account now used in attacks. [...] | Continue reading


@bleepingcomputer.com | 5 days ago

New Windows 11 trick lets you bypass Microsoft Account requirement

A previously unknown trick lets you easily bypass using a Microsoft Account in Windows 11, just as Microsoft tries to make it harder to use local accounts. [...] | Continue reading


@bleepingcomputer.com | 6 days ago

Google rolls out easy end-to-end encryption for Gmail business users

​Google has started rolling out a new end-to-end encryption (E2EE) model for Gmail enterprise users, making it easier to send encrypted emails to any recipient. [...] | Continue reading


@bleepingcomputer.com | 6 days ago

Nearly 24,000 IPs behind wave of Palo Alto Global Protect scans

A significant spike in scanning activity targeting Palo Alto Network GlobalProtect login portals has been observed, with researchers concerned it may be a prelude to an upcoming attack or flaw being exploited. [...] | Continue reading


@bleepingcomputer.com | 6 days ago

Critical auth bypass bug in CrushFTP now exploited in attacks

Attackers are now targeting a critical authentication bypass vulnerability in the CrushFTP file transfer software using exploits based on publicly available proof-of-concept code. [...] | Continue reading


@bleepingcomputer.com | 6 days ago

VMware Workstation auto-updates broken After Broadcom URL redirect

VMware Workstation users report that the software's automatic update functionality is broken after Broadcom redirected the download URL to its generic support page, triggering certificate errors. [...] | Continue reading


@bleepingcomputer.com | 7 days ago

OpenAI says Deep Research is coming to ChatGPT free "very soon"

OpenAI has confirmed that its powerful AI agent "Deep Research" will begin rolling out to free users "very soon." At the moment, Deep Research is available only for Plus and Enterprise customers. [...] | Continue reading


@bleepingcomputer.com | 7 days ago

Microsoft uses AI to find flaws in GRUB2, U-Boot, Barebox bootloaders

Microsoft used its AI-powered Security Copilot to discover 20 previously unknown vulnerabilities in the GRUB2, U-Boot, and Barebox open-source bootloaders. [...] | Continue reading


@bleepingcomputer.com | 7 days ago

Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks

A phishing-as-a-service (PhaaS) platform named 'Lucid' has been targeting 169 entities in 88 countries using well-crafted messages sent on iMessage (iOS) and RCS (Android). [...] | Continue reading


@bleepingcomputer.com | 7 days ago

Hackers abuse WordPress MU-Plugins to hide malicious code

Hackers are utilizing the WordPress mu-plugins ("Must-Use Plugins") directory to stealthily run malicious code on every page while evading detection. [...] | Continue reading


@bleepingcomputer.com | 7 days ago

New Crocodilus malware steals Android users’ crypto wallet keys

A newly discovered Android malware dubbed Crocodilus tricks users into providing the seed phrase for the cryptocurrency wallet using a warning to back up the key to avoid losing access. [...] | Continue reading


@bleepingcomputer.com | 8 days ago

Microsoft's killing script used to avoid Microsoft Account in Windows 11

Microsoft has removed the 'BypassNRO.cmd' script from Windows 11 preview builds, which allowed users to bypass the requirement to use a Microsoft Account when installing the operating system. [...] | Continue reading


@bleepingcomputer.com | 8 days ago

Retail giant Sam’s Club investigates Clop ransomware breach claims

​Sam's Club, an American warehouse supermarket chain owned by U.S. retail giant Walmart, is investigating claims of a Clop ransomware breach. [...] | Continue reading


@bleepingcomputer.com | 10 days ago

OpenAI now pays researchers $100,000 for critical vulnerabilities

Artificial intelligence company OpenAI has announced a fivefold increase in the maximum bug bounty rewards for "exceptional and differentiated" critical security vulnerabilities from $20,000 to $100,000. [...] | Continue reading


@bleepingcomputer.com | 10 days ago

Phishing-as-a-service operation uses DNS-over-HTTPS for evasion

A newly discovered phishing-as-a-service (PhaaS) operation that researchers call Morphing Meerkat, has been using the DNS over HTTPS (DoH) protocol to evade detection. [...] | Continue reading


@bleepingcomputer.com | 10 days ago

Oracle Health breach compromises patient data at US hospitals

A breach at Oracle Health impacts multiple US healthcare organizations and hospitals after a threat actor stole patient data from legacy servers. [...] | Continue reading


@bleepingcomputer.com | 10 days ago

Hijacked Microsoft Stream classic domain spams SharePoint sites

The legacy domain for Microsoft Stream was hijacked to show a fake Amazon site promoting a Thailand casino, causing all SharePoint sites with old embedded videos to display it as spam. [...] | Continue reading


@bleepingcomputer.com | 11 days ago

Windows 11 KB5053656 update released with 38 changes and fixes

​​Microsoft has released the KB5053656 preview cumulative update for Windows 11 24H2 with 38 changes, including real-time translation on AMD and Intel-powered Copilot+ PCs and fixes for authentication and blue-screen issues. [...] | Continue reading


@bleepingcomputer.com | 11 days ago

Mozilla warns Windows users of critical Firefox sandbox escape flaw

Mozilla has released Firefox 136.0.4 to patch a critical security vulnerability that can let attackers escape the web browser's sandbox on Windows systems. [...] | Continue reading


@bleepingcomputer.com | 11 days ago

WhatsApp's Meta AI is now rolling out in Europe, and it can't be turned off

You can't escape AI in WhatsApp even if you are based in one of the 41 European countries. Today, more people are seeing the Meta AI chatbot being added to WhatsApp. [...] | Continue reading


@bleepingcomputer.com | 11 days ago

Vivaldi integrates Proton VPN into the browser to fight web tracking

Vivaldi has announced the integration of Proton VPN directly into its browser without requiring add-on downloads or plugin activations, allowing users to protect their data against 'Big Tech' surveillance for free. [...] | Continue reading


@bleepingcomputer.com | 11 days ago

Dozens of solar inverter flaws could be exploited to attack power grids

Dozens of vulnerabilities in products from three leading makers of solar inverters, Sungrow, Growatt, and SMA, could be exploited to control devices or execute code remotely on the vendor's cloud platform. [...] | Continue reading


@bleepingcomputer.com | 11 days ago

Oracle customers confirm data stolen in alleged cloud breach is valid

Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers and the theft of account data for 6 million people, BleepingComputer has confirmed with multiple companies that associated data samples shared by the threat actor are valid. [...] | Continue reading


@bleepingcomputer.com | 12 days ago

Claude is testing ChatGPT-like Deep Research feature Compass

Claude could be getting a ChatGPT-like Deep Research feature called Compass. You can tell Claude's Compass what you need, and the AI agent will take care of everything. [...] | Continue reading


@bleepingcomputer.com | 12 days ago

Microsoft fixes printing issues caused by January Windows updates

Microsoft has fixed a known issue causing some USB printers to start printing random text after installing Windows updates released since late January 2025. [...] | Continue reading


@bleepingcomputer.com | 12 days ago

Google fixes Chrome zero-day exploited in espionage campaign

​Google has fixed a high-severity Chrome zero-day vulnerability exploited to escape the browser's sandbox and deploy malware in espionage attacks targeting Russian organizations. [...] | Continue reading


@bleepingcomputer.com | 12 days ago

CrushFTP warns users to patch unauthenticated access flaw immediately

CrushFTP warned customers of an unauthenticated HTTP(S) port access vulnerability and urged them to patch their servers immediately. [...] | Continue reading


@bleepingcomputer.com | 13 days ago

Cloudflare R2 service outage caused by password rotation error

Cloudflare has announced that its R2 object storage and dependent services experienced an outage lasting 1 hour and 7 minutes, causing 100% write and 35% read failures globally. [...] | Continue reading


@bleepingcomputer.com | 13 days ago

New Windows zero-day leaks NTLM hashes, gets unofficial patch

Free unofficial patches are available for a new Windows zero-day vulnerability that can let remote attackers steal NTLM credentials by tricking targets into viewing malicious files in Windows Explorer. [...] | Continue reading


@bleepingcomputer.com | 13 days ago

EncryptHub linked to zero-day attacks targeting Windows systems

A threat actor known as EncryptHub has been linked to Windows zero-day attacks exploiting a Microsoft Management Console vulnerability patched this month. [...] | Continue reading


@bleepingcomputer.com | 13 days ago

New Android malware uses Microsoft’s .NET MAUI to evade detection

New Android malware campaigns use Microsoft's cross-platform framework .NET MAUI while disguising as legitimate services to evade detection. [...] | Continue reading


@bleepingcomputer.com | 13 days ago

23andMe files for bankruptcy, customers advised to delete DNA data

​California-based genetic testing provider 23andMe has filed for Chapter 11 bankruptcy and plans to sell its assets following years of financial struggles [...] | Continue reading


@bleepingcomputer.com | 14 days ago

New VanHelsing ransomware targets Windows, ARM, ESXi systems

A new multi-platform ransomware-as-a-service (RaaS) operation named VanHelsing has emerged, targeting Windows, Linux, BSD, ARM, and ESXi systems. [...] | Continue reading


@bleepingcomputer.com | 14 days ago