Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
New York
Joined June 2009
- Tweets38.8K
- Following208
- Followers261K
- Likes2.9K
BleepingComputer retweeted
🟢 A green CI pipeline doesn't always mean it's secure.
🛡️ @ActiveState explains why GitHub Actions attack chains can remain exploitable despite passing CI security scans.
➡️ bleepingcomputer.com/news/se…
#cybersecurity #sponsored
BleepingComputer retweeted
🔎 Threat intelligence is only as useful as the context behind it.
📷@CriminalIP_US explains how its integration enriches threat indicators in OpenCTI with risk scoring, infrastructure intelligence, and phishing analysis.
➡️bleepingcomputer.com/news/se…
#cybersecurity #sponsored
BleepingComputer retweeted
⏰ Webinar today: Learn how automation and AI-assisted workflows can help reduce investigation delays and accelerate network incident response.
Join us and @tines_hq as we explore how to move from alert to resolution faster.
🎯 bleepingcomputer.com/rd/90/
#cybersecurity #networking
BleepingComputer retweeted
🚨 Prevention alone is no longer enough against modern attacks.
Join our webinar with @KaseyaCorp this Thursday to learn how IT teams combine security, backups, and recovery planning to stay resilient after breaches.
🎯 Register: bleepingcomputer.com/bcgo/88…
#cybersecurity #webinar
BleepingComputer retweeted
🚨 BREAKING: Hackers are now exploiting the cPanel authentication bypass flaw (CVE-2026-41940) to deploy "Sorry" ransomware on compromised websites.
Numerous sources say attacks began Thursday, with threat actors breaching servers and deploying a Go-based Linux encryptor that appends the .sorry extension to files.
What the ransomware does:
🔴 Encrypts files and appends the ".sorry" extension.
🔴 Protects the encryption key with an embedded RSA-2048 public key
🔴 Drops a README.md ransom note in every folder
🔴 Uses a fixed Tox ID for ransom negotiations
Victims are being instructed to contact the attacker via Tox to pay for decryption.
This is not related to the older 2018 HiddenTear ".sorry" ransomware. This is a new, Linux-targeting encryptor tied directly to active cPanel exploitation.
If you're running cPanel or WHM, patch immediately.
BleepingComputer retweeted
🚨Calling all IT, security, and cyber pros!
For the first time ever, NMFTA is offering an Early Bird Registration.
Save $50 on the 2026 #NMFTA Cybersecurity Conference—before prices go up.
➡️ Join your peers: bit.ly/4qZtVbV
#NMFTACyber
BleepingComputer retweeted
⚠️Oracle issued an emergency fix for a a critical E-Business Suite zero-day flaw tracked as CVE-2025-61882 that was exploited in Clop data theft attacks.
🔥The flaw is a critical unauthenticated RCE flaw. An exploit is publicly available to open a reverse shell.
🚨Patch now!
BleepingComputer retweeted
Please see the memo related to the August 24 network security incident below.
BleepingComputer retweeted
Ingram Micro outage caused by SafePay ransomware attack - @LawrenceAbrams
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
BleepingComputer retweeted
I've reverse engineered the DragonForce ransomware, which attacked the UK retail giant Co-op last week. hybrid-analysis.blogspot.com… #DragonForce #Ransomware
BleepingComputer retweeted
For those who deleted the inetpub folder, Microsoft has confirmed to BleepingComputer that installing and uninstalling Internet Information Services on a Windows device will recreate the inetpub with the same protections.
BleepingComputer retweeted
Great analysis! Appreciate you highlighting my research on CVE-2024-43405!
For more details: xitter.cf/guygoldenberg/status/1…
🚨CVE ALERT!
While working with Nuclei @wiz_io, I discovered CVE-2024-43405, a vulnerability that bypasses template signature verification, potentially allowing malicious code execution on machines running Nuclei 🛡️
Here’s what you need to know: 🧵
BleepingComputer retweeted
US Treasury Department breached through remote support platform - @LawrenceAbrams
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
BleepingComputer retweeted
Varonis Discovers New CVE in PostgreSQL PL/Perl
hubs.ly/Q02YdBNW0
BleepingComputer retweeted
The ransomware gang #Akira is not yet fully back in business, despite claiming 2 victims after a month of silence. But it is also leaking the data of 9 previously *unclaimed* victims! lemagit.fr/actualites/366615…
BleepingComputer retweeted
NEW: Fortinet has finally disclosed a new actively exploited critical FortiManager API flaw tracked as CVE-2024-47575 after it was privately disclosed to customers over a week ago.
bleepingcomputer.com/news/se…
BleepingComputer retweeted
The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens.
bleepingcomputer.com/news/se…
BleepingComputer retweeted
Internet Archive hacked, data breach impacts 31 million users - @LawrenceAbrams
bleepingcomputer.com/news/se…
bleepingcomputer.com/news/se…
