Ex-US Air Force Members Jailed for BEC and Phishing Scams
Two ex-Air Force members received a combined 189-month sentence for multi-year BEC and phishing fraud operations.
§Source · Bleeping Computer
Bleeping Computer
Every dispatch we have aggregated from Bleeping Computer.
All dispatchesWednesday, September 30
Cybercriminals Exploit ChatGPT to Spread RAT Malware
Malicious sponsored search results promote custom ChatGPTs that guide users into ClickFix flows to install RATs.
Apple Addresses CoreGraphics Zero-Day Vulnerability Exploited in Attacks
Apple patched a CoreGraphics zero-day used in sophisticated targeted iOS attacks enabling remote code execution.
Monday, September 28
Compromised GitHub Actions Reactivated, Heightening Security Concerns
PremiumPreviously compromised GitHub Actions were re-enabled while still pointing to Mini Shai-Hulud malicious payloads, reactivating risk.
ShinyHunters Exploits Oracle PeopleSoft Vulnerability with WAF Bypass Trick
PremiumShinyHunters uses URL-encoding WAF bypass to exploit Oracle PeopleSoft CVE-2026-35273 and resume widespread attacks.
Cloudflare Addresses Data Leakage Issue in Shared Containers
PremiumCloudflare patched a Containers/Sandboxes flaw that allowed residual disk data leakage across customers on shared hosts.
Friday, September 25
Hackers Target Security Gateway VPN with Critical RCE Vulnerability
PremiumCheck Point confirms active exploitation of CVE-2026-85102 in Security Gateway VPN certificate functionality for pre-auth RCE.
Exploitation of Critical Roundcube Flaw Underscores Urgent Patch Needs
PremiumAttackers are actively exploiting a high-severity Roundcube Webmail flaw patched in May to perform code injection.
Ransomware Groups Exploit JetBrains TeamCity Vulnerability
PremiumCISA warns ransomware actors are exploiting a critical JetBrains TeamCity vulnerability patched in July to gain footholds.
AI Agents Compromise Over 600,000 Credit Cards in Major Cyber Heist
PremiumOpen-source AI agents used to infect retailers with skimmers, exfiltrating over 600,000 credit card records at scale.
Wednesday, September 23
Critical Zero-Day in Check Point Management Server Exploited
Check Point released emergency hotfixes for a critical Security Management Server zero-day allowing arbitrary script execution.
ShinyHunters Exploit Zero-Day to Breach FBI Systems via PeopleSoft
ShinyHunters claims to have exploited an Oracle PeopleSoft zero-day to access FBI systems and steal internal data.
Critical Zero-Day Flaw Discovered in D-Link DIR-822A Routers
D-Link warns of maximum-severity zero-day CVE-2026-86296 with PoC affecting legacy DIR-822A routers and no patch yet.
Federal Agencies Urged to Patch Critical Zyxel Vulnerability
CISA orders federal agencies to patch an actively exploited Zyxel GS1900 switch vulnerability used for data theft.
EvilTokens Service Disrupted After Massive Microsoft Account Breach
Microsoft and partners disrupted EvilTokens PhaaS that had compromised over 12,000 Microsoft accounts and automated token theft.
Monday, September 21
Malicious npm Packages Bypass Security by Activating at Runtime
PremiumAn npm campaign hides malicious runtime code to avoid install-script defenses, persisting by executing during normal package usage.
Critical Vulnerability in Check Point Software Exposes Systems to Root-Level Attacks
PremiumCheck Point released fixes for a critical vulnerability allowing remote code execution as root on management systems.
North Korean Hackers Exploit 30,000 Devices, Steal Millions in Crypto
PremiumAdvisory links WaterPlum to at least 30,000 infected devices worldwide and over $10.7 million in stolen crypto transfers.
Friday, September 18
Brevo Supply Chain Attack Compromises Customer Websites with Malicious Scripts
PremiumAttackers stole Brevo's Cloudflare API key to inject malicious ClickFix scripts into customer sites and embedded JavaScript files.
Chinese Cyber Espionage Targets Latin American Governments with New Malware
PremiumFamousSparrow uses new SparroWocky backdoor to conduct espionage against government targets in Latin America, enabling persistent access.
Get these articles delivered to your inbox.
Subscribe free