Slándáil Research: Security Feeds

Feed: Bleeping Computer News

Ransomware gang starts leaking alleged stolen Change Healthcare data

New SteganoAmor attacks use steganography to target 320 orgs globally

Microsoft will limit Exchange Online bulk emails to fight spam

Crypto miner arrested for skipping on $3.5 million in cloud server bills

Chipmaker Nexperia confirms breach after ransomware gang leaks data

Daixin ransomware gang claims attack on Omni Hotels

Cisco Duo warns third-party data breach exposed SMS MFA logs

Palo Alto Networks fixes zero-day exploited to backdoor firewalls

Microsoft lifts Windows 11 block on some Intel systems after 2 years

OpenTable won't add first names, photos to old reviews after backlash

Medium bans AI-generated content from its paid Partner Program

Firebird RAT creator and seller arrested in the U.S. and Australia

Hacker claims Giant Tiger data breach, leaks 2.8M records online

Palo Alto Networks zero-day exploited since March to backdoor firewalls

UK flooded with forged stamps despite using barcodes — to prevent just that

Microsoft now testing app ads in Windows 11's Start menu

FBI warns of massive wave of road toll SMS phishing attacks

Telegram fixes Windows app zero-day caused by file extension typo

Telegram fixes Windows app zero-day used to launch Python scripts

Ex-Amazon engineer gets 3 years for hacking crypto exchanges

Former AT&T customers get $6.3 million in data throttling refunds

Roku warns 576,000 accounts hacked in new credential stuffing attacks

Palo Alto Networks warns of PAN-OS firewall zero-day used in attacks

CISA makes its "Malware Next-Gen" analysis system publicly available

OpenTable is adding your first name to previously anonymous reviews

LastPass: Hackers targeted employee in failed deepfake CEO call

Optics giant Hoya hit with $10 million ransomware demand

CISA orders agencies impacted by Microsoft hack to mitigate risks

Intel and Lenovo servers impacted by 6-year-old BMC flaw

CISA says Sisense hack impacts critical infrastructure orgs

Apple: Mercenary spyware attacks target iPhone users in 92 countries

How to automate up to 90% of IT offboarding tasks

DuckDuckGo launches a premium Privacy Pro VPN service

Chrome Enterprise gets Premium security but you have to pay for it

Google Workspace rolls out multi-admin approval feature for risky changes

New Spectre v2 attack impacts Linux systems on Intel CPUs

Malicious PowerShell script pushing malware looks AI-written

AT&T now says data breach impacted 51 million customers

Reusing passwords: The hidden cost of convenience

Malicious Visual Studio projects on GitHub push Keyzetsu malware

Microsoft fixes two Windows zero-days exploited in malware attacks

Critical Rust flaw enables Windows command injection attacks

Windows 10 KB5036892 update released with 23 new fixes, changes

GHC-SCW: Ransomware gang stole health data of 533,000 people

Windows 11 KB5036893 released with 29 changes, Moment 5 features

Windows 11 KB5036893 update released with 29 changes, Moment 5 features

Microsoft April 2024 Patch Tuesday fixes 150 security flaws, 67 RCEs

RUBYCARP hackers linked to 10-year-old cryptomining botnet

Implementing container security best practices using Wazuh

New SharePoint flaws help hackers evade detection when stealing files

Over 90,000 LG Smart TVs may be exposed to remote attacks

Targus discloses cyberattack after hackers detected on file servers

Critical RCE bug in 92,000 D-Link NAS devices now exploited in attacks

Google rolls out new Find My Device network to Android devices

Hackers deploy crypto drainers on thousands of WordPress sites

Cyberattack on UK’s CVS Group disrupts veterinary operations

Notepad++ needs your help in "parasite website" shutdown

Notepad++ wants your help in "parasite website" shutdown

The new features coming in Windows 11 24H2, expected this fall

Home Depot confirms third-party data breach exposed employee info

New Windows driver blocks software from changing default web browser

US Health Dept warns hospitals of hackers targeting IT help desks

Over 92,000 exposed D-Link NAS devices have a backdoor account

Recent Windows updates break Microsoft Connected Cache delivery

The Week in Ransomware - April 5th 2024 - Virtual Machines under Attack

New Ivanti RCE flaw may impact 16,000 exposed VPN gateways

Microsoft fixes Windows Sysprep issue behind 0x80073cf2 errors

Fake Facebook MidJourney AI page promoted malware to 1.2 million people

Acuity confirms hackers stole non-sensitive govt data from GitHub repos

Panera Bread week-long IT outage caused by ransomware attack

New Latrodectus malware replaces IcedID in network breaches

Visa warns of new JSOutProx malware variant targeting financial orgs

Microsoft fixes Outlook security alerts bug caused by December updates

Hoya’s optics production and orders disrupted by cyberattack

US cancer center data breach exposes info of 827,000 patients

New HTTP/2 DoS attack can crash web servers with a single connection

The Biggest Takeaways from Recent Malware Attacks

Microsoft still unsure how hackers stole MSA key in 2023 Exchange attack

SurveyLama data breach exposes info of 4.4 million users

Omni Hotels confirms cyberattack behind ongoing IT outage

Chilean hosting firm's VMware ESXi servers hit by new SEXi ransomware

Hosting firm's VMware ESXi servers hit by new SEXi ransomware

Jackson County in state of emergency after ransomware attack

US State Department investigates alleged theft of government data

Critical flaw in LayerSlider WordPress plugin impacts 1 million sites

Ivanti fixes VPN gateway vulnerability allowing RCE, DoS attacks

Google fixes one more Chrome zero-day exploited at Pwn2Own

AT&T faces lawsuits over data breach affecting 73 million customers

Google fixes two Pixel zero-day flaws exploited by forensics firms

6 Prompts You Don't Want Employees Putting in Microsoft Copilot

Microsoft warns Gmail blocks some Outlook email as spam, shares fix

Winnti's new UNAPIMON tool hides malware from security software

Omni Hotels experiencing nationwide IT outage since Friday

New Chrome feature aims to stop hackers from using stolen cookies

Google agrees to delete Chrome browsing data of 136 million users

Russia charges suspects behind theft of 160,000 credit cards

New XZ backdoor scanner detects implant in any Linux binary

India rescues 250 citizens enslaved by Cambodian cybercrime gang

Google now blocks spoofed emails for better phishing protection

OWASP discloses data breach caused by wiki misconfiguration

Yacht retailer MarineMax discloses data breach after cyberattack

FTC: Americans lost $1.1 billion to impersonation scams in 2023

Shopping platform PandaBuy data leak impacts 1.3 million users

DinodasRAT malware targets Linux servers in espionage campaign

It's surprisingly difficult for AI to create just a plain white image

AT&T confirms data for 73 million customers leaked on hacker forum

Vultur banking malware for Android poses as McAfee Security app

Activision: Enable 2FA to secure accounts recently stolen by malware

Red Hat warns of backdoor in XZ tools used by most Linux distros

Google Podcasts service shuts down in the US next week

Decade-old Linux ‘wall’ bug helps make fake SUDO prompts, steal passwords

Retail chain Hot Topic hit by new credential stuffing attacks

PyPI suspends new user registration to block malware campaign

Cisco warns of password-spraying attacks targeting VPN services

How Pentesting-as-a-Service can Reduce Overall Security Costs

New Darcula phishing service targets iPhone users via iMessage

Windows 11 22H2 Home and Pro get preview updates until June 26

Google fixes Chrome zero-days exploited at Pwn2Own 2024

INC Ransom threatens to leak 3TB of NHS Scotland stolen data

CISA tags Microsoft SharePoint RCE bug as actively exploited

KuCoin charged with AML violations that let cybercriminals launder billions

Ransomware as a Service and the Strange Economics of the Dark Web

Google: Spyware vendors behind 50% of zero-days exploited in 2023

Windows 11 KB5035942 update enables Moment 5 features for everyone

Windows 10 KB5035941 update released with lock screen widgets

Finland confirms APT31 hackers behind 2021 parliament breach

$700 cybercrime software turns Raspberry Pi into an evasive fraud tool

Germany warns of 17K vulnerable Microsoft Exchange servers exposed online

Hackers exploit Ray framework flaw to breach servers, hijack resources

Free VPN apps on Google Play turned Android phones into proxies

TheMoon malware infects 6,000 ASUS routers in 72 hours for proxy service

US fines man $9.9 million for thousands of disturbing robocalls

Panera Bread experiencing nationwide IT outage since Saturday

It's not just you: ChatGPT is down for many worldwide

US sanctions crypto exchanges used by Russian darknet market, banks

CISA urges software devs to weed out SQL injection vulnerabilities

Hackers poison source code for largest Discord bot platform

Hackers poison source code from largest Discord bot platform

New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts

US sanctions APT31 hackers behind critical infrastructure attacks

New ZenHammer memory attack impacts AMD Zen CPUs

Google's new AI search results promotes sites pushing malware, scams

Over 100 US and EU orgs targeted in StrelaStealer malware attacks

Opera sees big jump in EU users on iOS, Android after DMA update

Microsoft to shut down 50 cloud services for Russian businesses

Microsoft releases emergency fix for Windows Server crashes

Russian hackers target German political parties with WineLoader malware

Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own

Darknet marketplace Nemesis Market seized by German police

New GoFetch attack on Apple Silicon CPUs can steal crypto keys

Hackers earn $1,132,500 for 29 zero-days at Pwn2Own Vancouver

Windows 11 Notepad finally gets spellcheck and autocorrect

KDE advises extreme caution after theme wipes Linux user's files

Unsaflok flaw can let hackers unlock millions of hotel doors

Evasive Sign1 malware campaign infects 39,000 WordPress sites

Exploit released for Fortinet RCE bug used in attacks, patch now

What the Latest Ransomware Attacks Teach About Defending Networks

Microsoft confirms Windows Server issue behind domain controller crashes

Windows 11, Tesla, and Ubuntu Linux hacked at Pwn2Own Vancouver

New Windows Server updates cause domain controller crashes, reboots

Spa Grand Prix email account hacked to phish banking info from fans

New ‘Loop DoS’ attack may impact up to 300,000 online systems

GitHub’s new AI-powered tool auto-fixes vulnerabilities in your code

Ivanti fixes critical Standalone Sentry bug reported by NATO

UK bakery Greggs is latest victim of recent POS system outages

Flipper Zero makers respond to Canada’s ‘harmful’ ban proposal

Here's why Twitter sends you to a different site than what you clicked

Misconfigured Firebase instances leaked 19 million plaintext passwords

White House and EPA warn of hackers breaching water systems

US Defense Dept received 50,000 vulnerability reports since 2016

CISA shares critical infrastructure defense tips against Chinese hackers

FTC warns scammers are impersonating its employees to steal money

Ukraine arrests hackers trying to sell 100 million stolen accounts

Oracle warns that macOS 14.4 update breaks Java on Apple CPUs

New AcidPour data wiper targets Linux x86 network devices

Avoid high cyber insurance costs by improving Active Directory security

Investment advisers pay $400K to settle ‘AI washing’ charges

Chinese Earth Krahang hackers breach 70 orgs in 23 countries

Microsoft announces deprecation of 1024-bit RSA keys in Windows

Apex Legends players worried about RCE flaw after ALGS hacks

Fujitsu found malware on several systems, confirms data breach

Fujitsu found malware on IT systems, confirms data breach

How the New NIST 2.0 Guidelines Help Detect SaaS Threats

AT&T says leaked data of 70 million people is not from its systems

Microsoft again bothers Chrome users with Bing popup ads in Windows

New acoustic attack determines keystrokes from typing patterns

Hackers exploit Aiohttp bug to find vulnerable networks

International Monetary Fund email accounts hacked in cyberattack

McDonald's: Global outage was caused by "configuration change"

US moves to recover $2.3 million from "pig butchers" on Binance

PornHub now also blocks Texas over age verification laws

Microsoft announces Office LTSC 2024 preview starting next month

Admin of major stolen account marketplace gets 42 months in prison

Former telecom manager admits to doing SIM swaps for $1,000

McDonald's IT systems outage impacts restaurants worldwide

StopCrypt: Most widely distributed ransomware now evades detection

StopCrypt: Most widely distributed ransomware evolves to evade detection

SIM swappers hijacking phone numbers in eSIM attacks

Tech support firms Restoro, Reimage fined $26 million for scare tactics

Google Chrome gets real-time phishing protection later this month

French unemployment agency data breach impacts 43 million people

Nissan confirms ransomware attack exposed data of 100,000 people

Windows 11 gets single Teams app for work and personal accounts

Hackers abuse Windows SmartScreen flaw to drop DarkGate malware

Hackers exploit Windows SmartScreen flaw to drop DarkGate malware

US govt probes if ransomware gang stole Change Healthcare data

Fortinet warns of critical RCE bug in endpoint management software

PixPirate Android malware uses new tactic to hide on phones

Pen test vendor rotation: do you need to change annually?

Bitcoin Fog mixer operator convicted for laundering $400 million

LockBit ransomware affiliate gets four years in jail, to pay $860k

Brave: Sharp increase in installs after iOS DMA update in EU

Windows KB5035849 update failing to install with 0xd000034 errors

Stanford: Data of 27,000 people stolen in September ransomware attack

Acer confirms Philippines employee data leaked on hacking forum

Windows 11 KB5035853 update released, here's what's new

Windows 10 KB5035845 update released with 9 new changes, fixes

Microsoft March 2024 Patch Tuesday fixes 60 flaws, 18 RCE bugs

Tor’s new WebTunnel bridges mimic HTTPS traffic to evade censorship

Google paid $10 million in bug bounty rewards last year

Over 12 million auth secrets and keys leaked on GitHub in 2023

Tuta Mail adds new quantum-resistant encryption to protect email

Microsoft says Windows 10 21H2 support is ending in June

Okta says data leaked on hacking forum not from its systems

Researchers expose Microsoft SCCM misconfigs usable in cyberattacks

Equilend warns employees their data was stolen by ransomware gang

Over 15,000 hacked Roku accounts sold for 50¢ each to buy hardware

Fake Leather wallet app on Apple App Store is a crypto drainer

YouTube stops recommending videos when signed out of Google

Hackers exploit WordPress plugin flaw to infect 3,300 sites with malware

Magnet Goblin hackers use 1-day flaws to drop custom Linux malware

The Week in Ransomware - March 8th 2024 - Waiting for the BlackCat rebrand

Critical Fortinet flaw may impact 150,000 exposed devices

QNAP warns of critical auth bypass flaw in its NAS devices

UnitedHealth brings some Change Healthcare pharmacy services back online

Microsoft says Russian hackers breached its systems, accessed source code

CISA, NSA share best practices for securing cloud services

Switzerland: Play ransomware leaked 65,000 government documents

Windows 10 KB5001716 update fails with 0x80070643 errors, how to fix

Flipper Zero WiFi attack can unlock and steal Tesla cars

Flipper Zero WiFi phishing attack can unlock and steal Tesla cars

MiTM phishing attack can let attackers unlock and steal a Tesla

AnyCubic fixes exploited 3D printer zero day flaw with new firmware

Google engineer caught stealing AI tech secrets for Chinese firms

FBI: U.S. lost record $12.5 billion to online crime in 2023

PetSmart warns of credential stuffing attacks trying to hack accounts

TeamCity auth bypass bug exploited to mass-generate admin accounts

Critical TeamCity flaw now widely exploited to create admin accounts

Hacked WordPress sites use visitors' browsers to hack other sites

Hackers impersonate U.S. government agencies in BEC attacks