Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

BleepingComputer

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

BleepingComputer

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits

Why Patch Automation Needs Brakes, Not Just an Accelerator

Why Patch Automation Needs Brakes, Not Just an Accelerator

BleepingComputer

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

Webinar: How malicious OAuth apps can lead to Google Workspace breaches

BleepingComputer

AI Changed the Exposure Problem. Validation Needs to Change With It.

AI Changed the Exposure Problem. Validation Needs to Change With It.

Microsoft: September updates cause RDS failures on Windows Server

Microsoft: September updates cause RDS failures on Windows Server

BleepingComputer

Revolut discloses data breach exposing financial info, passports

Revolut discloses data breach exposing financial info, passports

BleepingComputer

Microsoft: September updates break audio on some Windows PCs

Microsoft: September updates break audio on some Windows PCs

BleepingComputer

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

CISA: Hackers now exploit max severity GitLab flaw in attacks

CISA: Hackers now exploit max severity GitLab flaw in attacks

BleepingComputer

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

BleepingComputer

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

BleepingComputer

When the Whole Company Adopts AI: What It Does to Your SOC

When the Whole Company Adopts AI: What It Does to Your SOC

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

Hackers abused Claude to extract secrets from 1.8M Android apps

Hackers abused Claude to extract secrets from 1.8M Android apps

BleepingComputer

Florida confirms DMV database breached via stolen police account

Florida confirms DMV database breached via stolen police account

BleepingComputer

Passkey-themed phishing attacks lead to Microsoft 365 data theft

Passkey-themed phishing attacks lead to Microsoft 365 data theft

BleepingComputer