BleepingComputer - News
- Apache fixes remote code execution bypass in Tomcat web serverby Bill Toulas on December 23, 2024 at 12:33 pm
Apache has released a security update that addresses an important vulnerability in Tomcat web server that could lead to an attacker achieving remote code execution. [...]
- Microsoft fixes bug behind random Office 365 deactivation errorsby Sergiu Gatlan on December 23, 2024 at 12:22 pm
Microsoft has rolled out a fix for a known issue that causes random "Product Deactivated" errors for customers using Microsoft 365 Office apps. [...]
- North Korean hackers stole $1.3 billion worth of crypto this yearby Bill Toulas on December 22, 2024 at 3:19 pm
North Korean hackers have stolen $1.34 billion worth of cryptocurrency across 47 cyberattacks that occurred in 2024, according to a new report by blockchain analysis company Chainalysis. [...]
- New FlowerStorm Microsoft phishing service fills void left by Rockstar2FAby Bill Toulas on December 21, 2024 at 3:16 pm
A new Microsoft 365 phishing-as-a-service platform called "FlowerStorm" is growing in popularity, filling the void left behind by the sudden shutdown of the Rockstar2FA cybercrime service. [...]
- Google Chrome uses AI to analyze pages in new scam detection featureby Mayank Parmar on December 20, 2024 at 9:31 pm
Google is using artificial intelligence to power a new Chrome scam protection feature that analyzes brands and the intent of pages as you browse the web. [...]
- Malicious Rspack, Vant packages published using stolen NPM tokensby Bill Toulas on December 20, 2024 at 5:47 pm
Three popular npm packages, @rspack/core, @rspack/cli, and Vant, were compromised through stolen npm account tokens, allowing threat actors to publish malicious versions that installed cryptominers. [...]
- US charges Russian-Israeli as suspected LockBit ransomware coderby Lawrence Abrams on December 20, 2024 at 4:48 pm
The US Department of Justice has charged a Russian-Israeli dual-national for his suspected role in developing malware and managing the infrastructure for the notorious LockBit ransomware group. [...]
- Sophos discloses critical Firewall remote code execution flawby Bill Toulas on December 20, 2024 at 3:31 pm
Sophos has addressed three vulnerabilities in its Sophos Firewall product that could allow remote unauthenticated threat actors to perform SQL injection, remote code execution, and gain privileged SSH access to devices. [...]
- Krispy Kreme breach, data theft claimed by Play ransomware gangby Sergiu Gatlan on December 20, 2024 at 1:00 pm
The Play ransomware gang has claimed responsibility for a cyberattack that impacted the business operations of the U.S. doughnut chain Krispy Kreme in November. [...]
- Ascension: Health data of 5.6 million stolen in ransomware attackby Sergiu Gatlan on December 20, 2024 at 12:05 pm
Ascension, one of the largest private U.S. healthcare systems, is notifying nearly 5.6 million patients and employees that their personal and health data was stolen in a May cyberattack linked to the Black Basta ransomware operation. [...]
- Massive live sports piracy ring with 812 million yearly visits taken offlineby Sergiu Gatlan on December 20, 2024 at 11:07 am
The Alliance for Creativity and Entertainment (ACE) has taken down one of the world's largest live sports streaming piracy rings, with over 821 million visits last year. [...]