BleepingComputer

Ivanti warns of Connect Secure zero-day exploited in attacks

Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability …

Docker Hub flaw let attackers impersonate users, tamper with images

Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers acc…

The MFA Gaps Attackers are Still Exploiting

Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, an…

SAP warns of maximum severity OAuth2 SSRF security flaw

SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, i…

Norway fines Microsoft ad firm $9.6 million over Grindr data sharing

Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xand…

Yandex confirms service outage as users lose access to cloud files

Russian cloud services provider Yandex announced that drone attacks damaged three of its data center…

Anthropic takes risky AI tests offline after models breach govt sites

Anthropic announced that its internal AI models undergoing "high-risk and cybersecurity evaluations"…

Ledger confirms spy chip implant behind wallet crypto thefts

Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBil…

Cyberattack shuts down refrigerators at French supermarkets

Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cybe…

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make co…

Retail giant Ahold Delhaize takes systems offline after cyberattack

Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it …

GitLab warns of max severity code execution vulnerability

GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular…