Asl nashr rasmi · BleepingComputerMetaMask says recent attack didn't affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. [...]
Kiber yangiliklar
Ishonchli nashrlardan kundalik kiberxavfsizlik xabarlari: asl rasmlar, manba havolalari va nashr sanalari.
Oxirgi tanlov:
- Asl nashr rasmi · BleepingComputer
Asl nashr rasmi · BleepingComputerRunaway AI hacking agent behind WorkOS breach after escaping sandbox
WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims…
Asl nashr rasmi · BleepingComputerSonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]
Asl nashr rasmi · BleepingComputerD-Link warns of multiple zero-days in DGS-3130 Series switches
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. [...]
Asl nashr rasmi · BleepingComputerOpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs
OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for…
Asl nashr rasmi · BleepingComputerChainalysis says breach exposed credentials for all customers
Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers. [...]
Asl nashr rasmi · BleepingComputerFake security tools on GitHub push backdoors and infostealers
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [...]
Asl nashr rasmi · BleepingComputerCISA flags WordPress RCE flaw as actively exploited in attacks
The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the…
- Asl nashr rasmi · BleepingComputer
WorkOS says attacker used ARTEX AI to breach internal sales app
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. [...]
Asl nashr rasmi · BleepingComputerHackers hijack cPGuard autoupdate to deploy backdoor, steal data
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]
Asl nashr rasmi · BleepingComputerGoogle disrupts million-device XCPE Android malware botnet, bans TV box maker
Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says…
Asl nashr rasmi · BleepingComputerSynology warns of C3RB3R ransomware attacks targeting NAS devices
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. [...]
Asl nashr rasmi · BleepingComputerIvanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at…
Asl nashr rasmi · BleepingComputerOver 1,000 GitLab servers vulnerable to ongoing RCE attacks
Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. [...]
Asl nashr rasmi · BleepingComputerAlpine Linux rebuilds GitLab after attempted RCE attack
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab…
Asl nashr rasmi · BleepingComputerFrom Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how…
Asl nashr rasmi · BleepingComputerNorthflank security breach leads to abuse of customers' AI API keys
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to…
Asl nashr rasmi · BleepingComputerChainalysis discloses data breach from "offensive agentic techniques"
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email…
.jpg)
Asl nashr rasmi · BleepingComputerNew Android SMS of Death exploit can remotely crash unpatched phones
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets…
Asl nashr rasmi · BleepingComputerJapan's GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the…
Asl nashr rasmi · BleepingComputerUNM Health ransomware attack disrupts patient care, surgeries
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. [...]
Asl nashr rasmi · BleepingComputerMicrosoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not…
Asl nashr rasmi · BleepingComputerWarp discloses breach exposing AI agent logs, user telemetry data
Warp reported that a third-party vendor breach exposed agent decision logs and user telemetry from its development environment.
Asl nashr rasmi · BleepingComputerAbandoned Popcorn Time app exposed millions of device to RCE attacks
Researchers found an abandoned Time4Popcorn updater accepting unsigned downloads over HTTP, exposing millions of devices to potential SYSTEM/root code execution. Eye Security disabled the updater on Windows and macOS; users should uninstall the app.
Asl nashr rasmi · BleepingComputerBlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
Research on BlackX describes a Secure Boot bypass used in an espionage campaign, with malicious kernel components intended to interfere with defensive monitoring.
Asl nashr rasmi · BleepingComputerPHP shares mitigation for new RCE vulnerability with no patch
PHP maintainers have published mitigation guidance for CVE-2026-115560, an RCE issue requiring an unusual combination of session configuration and application behavior.
Xavfsizlik nashrlaridan tanlangan xabarlar. To‘liq maqola uchun asl manbaga o‘ting. Rasmlar ko‘rsatilgan nashrga tegishli.