Bleeping Computer

• Google Chrome uses AI to analyze pages in new scam detection feature
  Google is using artificial intelligence to power a new Chrome scam protection feature that analyzes brands and the intent of pages as you browse the web. [...]
  Fri, 20 Dec 2024 16:31:05 -0500


• Malicious Rspack, Vant packages published using stolen NPM tokens
  Three popular npm packages, @rspack/core, @rspack/cli, and Vant, were compromised through stolen npm account tokens, allowing threat actors to publish malicious versions that installed cryptominers. [...]
  Fri, 20 Dec 2024 12:47:54 -0500


• US charges Russian-Israeli as suspected LockBit ransomware coder
  The US Department of Justice has charged a Russian-Israeli dual-national for his suspected role in developing malware and managing the infrastructure for the notorious LockBit ransomware group. [...]
  Fri, 20 Dec 2024 11:48:25 -0500


• Sophos discloses critical Firewall remote code execution flaw
  Sophos has addressed three vulnerabilities in its Sophos Firewall product that could allow remote unauthenticated threat actors to perform SQL injection, remote code execution, and gain privileged SSH access to devices. [...]
  Fri, 20 Dec 2024 10:31:13 -0500


• Krispy Kreme breach, data theft claimed by Play ransomware gang
  The Play ransomware gang has claimed responsibility for a cyberattack that impacted the business operations of the U.S. doughnut chain Krispy Kreme in November. [...]
  Fri, 20 Dec 2024 08:00:00 -0500


• Ascension: Health data of 5.6 million stolen in ransomware attack
  ​Ascension, one of the largest private U.S. healthcare systems, is notifying nearly 5.6 million patients and employees that their personal and health data was stolen in a May cyberattack linked to the Black Basta ransomware operation. [...]
  Fri, 20 Dec 2024 07:05:33 -0500


• Massive live sports piracy ring with 812 million yearly visits taken offline
  ​The Alliance for Creativity and Entertainment (ACE) has taken down one of the world's largest live sports streaming piracy rings, with over 821 million visits last year. [...]
  Fri, 20 Dec 2024 06:07:12 -0500


• Romanian Netwalker ransomware affiliate sentenced to 20 years in prison
  ​Daniel Christian Hulea, a Romanian man charged for his involvement in NetWalker ransomware attacks, was sentenced to 20 years in prison after pleading guilty to computer fraud conspiracy and wire fraud conspiracy in June. [...]
  Fri, 20 Dec 2024 02:56:00 -0500


• BadBox malware botnet infects 192,000 Android devices despite disruption
  The BadBox Android malware botnet has grown to over 192,000 infected devices worldwide despite a recent sinkhole operation that attempted to disrupt the operation in Germany. [...]
  Thu, 19 Dec 2024 17:01:58 -0500


• Microsoft 365 users hit by random product deactivation errors
  ​Microsoft is investigating a known issue randomly triggering "Product Deactivated" errors for customers using Microsoft 365 Office apps. [...]
  Thu, 19 Dec 2024 15:45:12 -0500