@BleepinComputer

Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!

 New York
bleepingcomputer.com/
Joined June 2009
  • Tweets38.9K
  • Following208
  • Followers262K
2KMedia
Microsoft urges Entra ID admins to migrate users to passkeys bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…

Microsoft urges Entra ID admins to migrate users to passkeys

Microsoft again asked Entra ID administrators to migrate users to phishing-resistant methods to avoid sign-in disruptions before it retires SMS and voice authentication in February 2027.

bleepingcomputer.com
1,058
⚠️ Exploiting PHP2Shell may give attackers access to more than a server. Stolen API keys, cloud credentials, and service accounts can open doors across an organization. 🔍 @TheTokenSec explains how to limit the blast radius. ➡️ bleepingcomputer.com/news/se… #cybersecurity #sponsored
2
3
1
4
2,587
InfraTrust report warns of exploited flaws in critical network infrastructure bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

InfraTrust report warns of exploited flaws in critical network infrastructure

Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces of firewalls, VPNs, application delivery...

bleepingcomputer.com
1
2
2,420
Hackers now scanning systems for recently-patched Oracle flaw bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Hackers now scanning systems for recently-patched Oracle flaw

Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability.

bleepingcomputer.com
5
4
28
4,592
Get 2TB of lifetime FileJump cloud storage for just $55 bleepingcomputer.com/offer/d… bleepingcomputer.com/offer/d…

Get 2TB of lifetime FileJump cloud storage for just $55

FileJump Cloud Storage offers a permanent option with this 2TB lifetime subscription, allowing you to secure your content without endless monthly payments. This plan is currently on sale for just...

bleepingcomputer.com
2
5
3,892
CISA has confirmed that hackers are actively exploiting a critical Brotli vulnerability (CVE-2026-111497), also known as Node2Shell, Broccoli2Shell, and HTTP2Shell. bleepingcomputer.com/news/se…

CISA warns of hackers now exploiting critical Node2Shell flaw

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and...

bleepingcomputer.com
9
29
3
100
8,230
A Ukrainian national was sentenced to 70 months in prison for his role in Nefilim and Hive ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021. bleepingcomputer.com/news/se…

Nefilim and Hive ransomware affiliate gets 70 months in prison

A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021.

bleepingcomputer.com
2
9
26
4,750
Japan's GMO urges customers to shut down PCs amid ransomware threat bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Japan's GMO urges customers to shut down PCs amid ransomware threat

The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae Desktop Cloud threatened to launch a...

bleepingcomputer.com
7
6
1
33
7,747
OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests bleepingcomputer.com/news/ar… bleepingcomputer.com/news/ar…

OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests

OpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems.

bleepingcomputer.com
5
17
6,822
UNM Health ransomware attack disrupts patient care, surgeries bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

UNM Health ransomware attack disrupts patient care, surgeries

The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities.

bleepingcomputer.com
6
10
1
37
7,727
Hackers hijack Convertr analytics script to steal payment card data bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Hackers hijack Convertr analytics script to steal payment card data

A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout.

bleepingcomputer.com
10
8
2
23
7,074
Microsoft releases Windows OOB updates to distrust eMudhra certificates bleepingcomputer.com/news/mi… bleepingcomputer.com/news/mi…

Microsoft releases Windows OOB updates to distrust eMudhra certificates

Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic...

bleepingcomputer.com
5
38
131
15,012
Prep for the CISSP exam with 21 hours of training for $19.99 bleepingcomputer.com/offer/d… bleepingcomputer.com/offer/d…

Prep for the CISSP exam with 21 hours of training for $19.99

Passing the rigorous CISSP means knowing eight separate areas of security, from risk management to secure software development. If you want one course for each area, try the CISSP Security & Risk...

bleepingcomputer.com
9
5,988
Warp discloses breach exposing AI agent logs, user telemetry data bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Warp discloses breach exposing AI agent logs, user telemetry data

Agent decision logs and telemetry data belonging to Warp agentic development environment users were exposed in an attack on a third-party vendor in the project's infrastructure.

bleepingcomputer.com
20
6
2
27
7,746
Tailscale warns of SSH flaws allowing root privilege escalation bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Tailscale warns of SSH flaws allowing root privilege escalation

The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root privileges, and more.

bleepingcomputer.com
14
11
1
46
9,224
🔐 Some of the most damaging cyberattacks don't use malware. Stolen sessions, malicious mail rules, and legitimate RMMs can be enough. 🔍 @HuntressLabs ranks the threats hitting orgs hardest in its Tragic Quadrant report. ➡️ bleepingcomputer.com/news/se… #cybersecurity #sponsored
1
16
5,988
Get 1TB of lifetime cloud storage for one $159.99 payment bleepingcomputer.com/offer/d… bleepingcomputer.com/offer/d…

Get 1TB of lifetime cloud storage for one $159.99 payment

Your files shouldn't be difficult to find just because you switched devices. Koofr's 1TB Cloud Storage Lifetime Subscription is $159.99 (MSRP $810) for a limited time, combining accessible storage...

bleepingcomputer.com
6
6,249
Apple backports CoreGraphics zero-day patches to older iPhones bleepingcomputer.com/news/ap… bleepingcomputer.com/news/ap…

Apple backports CoreGraphics zero-day patches to older iPhones

​Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices.

bleepingcomputer.com
12
9
50
8,622
Energy giant ENGIE discloses data breach affecting customers bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

Energy giant ENGIE discloses data breach affecting customers

French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.

bleepingcomputer.com
11
9
30
8,007
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. bleepingcomputer.com/news/se…

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch...

bleepingcomputer.com
11
43
3
152
12,909
Load more