Bleeping Computer

• PoisonSeed phishing campaign behind emails with wallet seed phrases
  A large-scale phishing campaign dubbed 'PoisonSeed' compromises corporate email marketing accounts to distribute emails containing crypto seed phrases used to drain cryptocurrency wallets. [...]
  Fri, 04 Apr 2025 12:49:05 -0400


• Australian pension funds hit by wave of credential stuffing attacks
  Over the weekend, a massive wave of credential stuffing attacks hit multiple large Australian super funds, compromising thousands of members' accounts. [...]
  Fri, 04 Apr 2025 12:12:27 -0400


• Europcar GitLab breach exposes data of up to 200,000 customers
  A hacker breached the GitLab repositories of multinational car-rental company Europcar Mobility Group and stole source code for Android and iOS applications, as well as some personal information belonging to up to 200,000 users. [...]
  Fri, 04 Apr 2025 10:07:21 -0400


• OpenAI's $20 ChatGPT Plus is now free for students until the end of May
  ChatGPT Plus subscription is now free, but only if you're a student based out of the United States of America and Canada. [...]
  Fri, 04 Apr 2025 09:50:57 -0400


• Max severity RCE flaw discovered in widely used Apache Parquet
  A maximum severity remote code execution (RCE) vulnerability has been discovered impacting all versions of Apache Parquet up to and including 1.15.0. [...]
  Thu, 03 Apr 2025 17:29:10 -0400


• Hunters International shifts from ransomware to pure data extortion
  The Hunters International Ransomware-as-a-Service (RaaS) operation is shutting down and rebranding with plans to switch to data theft and extortion-only attacks. [...]
  Thu, 03 Apr 2025 17:06:10 -0400


• Microsoft starts testing Windows 11 taskbar icon scaling
  ​Microsoft is testing a new taskbar icon scaling feature that automatically scales down Windows taskbar icons to show more apps when it gets too overcrowded. [...]
  Thu, 03 Apr 2025 16:04:17 -0400


• CISA warns of Fast Flux DNS evasion used by cybercrime gangs
  CISA, the FBI, the NSA, and international cybersecurity agencies are calling on organizations and DNS providers to mitigate the "Fast Flux" cybercrime evasion technique used by state-sponsored threat actors and ransomware gangs. [...]
  Thu, 03 Apr 2025 15:37:59 -0400


• Ivanti patches Connect Secure zero-day exploited since mid-March
  Ivanti has released security updates to patch a critical Connect Secure remote code execution vulnerability exploited by a China-linked espionage actor to deploy malware since at least mid-March 2025. [...]
  Thu, 03 Apr 2025 13:43:34 -0400


• Texas State Bar warns of data breach after INC ransomware claims attack
  The State Bar of Texas is warning it suffered a data breach after the INC ransomware gang claimed to have breached the organization and began leaking samples of stolen data. [...]
  Thu, 03 Apr 2025 11:43:17 -0400