Lightnews — Scholar-powered news

BleepingComputer @bleepingcomputer.com · 21m

SonicWall has confirmed that all customers that used the company's cloud backup service are affected by the security breach last month.

SonicWall: Firewall configs stolen for all cloud backup customers

SonicWall has confirmed that all customers that used the company's cloud backup service are affected by the security breach last month.

www.bleepingcomputer.com

1

BleepingComputer @bleepingcomputer.com · 1h

Microsoft is working to resolve an outage affecting its Azure Front Door content delivery network (CDN), which is preventing customers from accessing some Microsoft 365 services.

Azure outage blocks access to Microsoft 365 services, admin portals

Microsoft is working to resolve an outage affecting its Azure Front Door content delivery network (CDN), which is preventing customers from accessing some Microsoft 365 services.

www.bleepingcomputer.com

3

BleepingComputer @bleepingcomputer.com · 3h

A pro-Russian hacktivist group called TwoNet pivoted in less than a year from launching distributed denial-of-service (DDoS) attacks to targeting critical infrastructure.

Hacktivists target critical infrastructure, hit decoy plant

A pro-Russian hacktivist group called TwoNet pivoted in less than a year from launching distributed denial-of-service (DDoS) attacks to targeting critical infrastructure.

www.bleepingcomputer.com

2 4

BleepingComputer @bleepingcomputer.com · 14h

Discord says they will not be negotiating with threat actors who claim to have stolen the data of 5.5 million unique users from the company's Zendesk support system instance, including government IDs and partial payment information for some people.

Hackers claim Discord breach exposed data of 5.5 million users

Discord says they will not be negotiating with threat actors who claim to have stolen the data of 5.5 million unique users from the company's Zendesk support system instance, including government IDs and partial payment information for some people.

www.bleepingcomputer.com

7 10

BleepingComputer @bleepingcomputer.com · 19h

The Qilin ransomware group has claimed responsibility for the attack at Japanese beer maker Asahi, adding the company to its extortion page on the dark web yesterday.

Qilin ransomware claims Asahi brewery breach, leaks data

The Qilin ransomware group has claimed responsibility for the attack at Japanese beer maker Asahi, adding the company to its extortion page on the dark web yesterday.

www.bleepingcomputer.com

1 6

BleepingComputer @bleepingcomputer.com · 19h

Microsoft is working to resolve an ongoing outage preventing users from accessing Microsoft 365 services, including Microsoft Teams, Exchange Online, and the admin center.

Microsoft 365 outage blocks access to Teams, Exchange Online

Microsoft is working to resolve an ongoing outage preventing users from accessing Microsoft 365 services, including Microsoft Teams, Exchange Online, and the admin center.

www.bleepingcomputer.com

2 4

BleepingComputer @bleepingcomputer.com · 20h

Microsoft is enabling threshold-based auto-archiving by default in Exchange Online to prevent email flow issues caused by mailboxes filling up faster than expected.

Microsoft enables Exchange Online auto-archiving by default

Microsoft is enabling threshold-based auto-archiving by default in Exchange Online to prevent email flow issues caused by mailboxes filling up faster than expected.

www.bleepingcomputer.com

2 5

BleepingComputer @bleepingcomputer.com · 21h

The 'Crimson Collective' threat group has been targeting AWS (Amazon Web Services) cloud environments for the past weeks, to steal data and extort companies.

Crimson Collective hackers target AWS cloud instances for data theft

The 'Crimson Collective' threat group has been targeting AWS (Amazon Web Services) cloud environments for the past weeks, to steal data and extort companies.

www.bleepingcomputer.com

3 6

BleepingComputer @bleepingcomputer.com · 22h

Threat actors are actively exploiting a critical vulnerability in the Service Finder WordPress theme that allows them to bypass authentication and log in as administrators.

Hackers exploit auth bypass in Service Finder WordPress theme

Threat actors are actively exploiting a critical vulnerability in the Service Finder WordPress theme that allows them to bypass authentication and log in as administrators.

www.bleepingcomputer.com

4

BleepingComputer @bleepingcomputer.com · 23h

The UK Metropolitan Police has arrested two suspects following an investigation into the doxing of children online after a ransomware attack on a chain of London-based nurseries.

London police arrests suspects linked to nursery breach, child doxing

The UK Metropolitan Police has arrested two suspects following an investigation into the doxing of children online after a ransomware attack on a chain of London-based nurseries.

www.bleepingcomputer.com

1 5

BleepingComputer @bleepingcomputer.com · 1d

Salesforce has confirmed that it will not negotiate with or pay a ransom to the threat actors behind a massive wave of data theft attacks that impacted the company's customers this year.

Salesforce refuses to pay ransom over widespread data theft attacks

Salesforce has confirmed that it will not negotiate with or pay a ransom to the threat actors behind a massive wave of data theft attacks that impacted the company's customers this year.

www.bleepingcomputer.com

3 8

BleepingComputer @bleepingcomputer.com · 1d

The Docker team has announced unlimited access to its Hardened Images catalog to make access to secure software bundles affordable for all development teams at startups and SMBs.

Docker makes Hardened Images Catalog affordable for small businesses

The Docker team has announced unlimited access to its Hardened Images catalog to make access to secure software bundles affordable for all development teams at startups and SMBs.

www.bleepingcomputer.com

4 8

BleepingComputer @bleepingcomputer.com · 1d

Google has decided not to fix a new ASCII smuggling attack in Gemini that could be used to trick the AI assistant into providing users with fake information, alter the model’s behavior, and silently poison its data.
www.bleepingcomputer.com/news/securit...

Google won’t fix new ASCII smuggling attack in Gemini

Google has decided not to fix a new ASCII smuggling attack in Gemini that could be used to trick the AI assistant into providing users with fake information, alter the model's behavior, and silently p...

www.bleepingcomputer.com

1 3 9

BleepingComputer @bleepingcomputer.com · 1d

Sports betting giant DraftKings has notified an undisclosed number of customers that their accounts had been hacked in a recent wave of credential stuffing attacks.

DraftKings warns of account breaches in credential stuffing attacks

Sports betting giant DraftKings has notified an undisclosed number of customers that their accounts had been hacked in a recent wave of credential stuffing attacks.

www.bleepingcomputer.com

1 2

BleepingComputer @bleepingcomputer.com · 1d

The Clop ransomware gang has been exploiting a critical Oracle E-Business Suite (EBS) zero-day bug in data theft attacks since at least early August, according to cybersecurity company CrowdStrike.

Clop exploited Oracle zero-day for data theft since early August

The Clop ransomware gang has been exploiting a critical Oracle E-Business Suite (EBS) zero-day bug in data theft attacks since at least early August, according to cybersecurity company CrowdStrike.

www.bleepingcomputer.com

1 2

BleepingComputer @bleepingcomputer.com · 1d

North Korean hackers have stolen an estimated $2 billion worth of cryptocurrency assets in 2025, marking the largest annual total on record.

North Korean hackers stole over $2 billion in crypto this year

North Korean hackers have stolen an estimated $2 billion worth of cryptocurrency assets in 2025, marking the largest annual total on record.

www.bleepingcomputer.com

2 11

BleepingComputer @bleepingcomputer.com · 1d

Microsoft REALLY doesn’t want you to use Windows 11 without a Microsoft Account

Microsoft kills more Microsoft Account bypasses in Windows 11

Microsoft REALLY doesn’t want you to use Windows 11 without a Microsoft Account

www.bleepingcomputer.com

5 8

BleepingComputer @bleepingcomputer.com · 2d

This week, Google has launched an AI Vulnerability Reward Program dedicated to security researchers who find and report flaws in the company's AI systems.

Google's new AI bug bounty program pays up to $30,000 for flaws

This week, Google has launched an AI Vulnerability Reward Program dedicated to security researchers who find and report flaws in the company's AI systems.

www.bleepingcomputer.com

1 1

BleepingComputer @bleepingcomputer.com · 2d

Enterprise software giant Red Hat is now being extorted by the ShinyHunters gang, with samples of stolen customer engagement reports (CERs) leaked on their data leak site.

Red Hat data breach escalates as ShinyHunters joins extortion

Enterprise software giant Red Hat is now being extorted by the ShinyHunters gang, with samples of stolen customer engagement reports (CERs) leaked on their data leak site.

www.bleepingcomputer.com

3 6

BleepingComputer @bleepingcomputer.com · 2d

A cybercrime group, tracked as Storm-1175, has been actively exploiting a maximum severity GoAnywhere MFT vulnerability in Medusa ransomware attacks for nearly a month.

Microsoft: Critical GoAnywhere bug exploited in ransomware attacks

A cybercrime group, tracked as Storm-1175, has been actively exploiting a maximum severity GoAnywhere MFT vulnerability in Medusa ransomware attacks for nearly a month.

www.bleepingcomputer.com

2 6

BleepingComputer @bleepingcomputer.com · 2d

Microsoft is investigating a bug that causes Copilot issues when multiple Office apps are running simultaneously on the same system.

Microsoft: Running multiple Office apps causes Copilot issues

Microsoft is investigating a bug that causes Copilot issues when multiple Office apps are running simultaneously on the same system.

www.bleepingcomputer.com

1 8

BleepingComputer @bleepingcomputer.com · 2d

A new hacking competition called Zeroday Cloud, focused on open-source cloud and AI tools, announced a total prize pool of $4.5 million in bug bounties for researchers that submit exploits for various targets.

Zeroday Cloud hacking contest offers $4.5 million in bounties

A new hacking competition called Zeroday Cloud, focused on open-source cloud and AI tools, announced a total prize pool of $4.5 million in bug bounties for researchers that submit exploits for various targets.

www.bleepingcomputer.com

1 3

BleepingComputer @bleepingcomputer.com · 2d

OpenAI's ChatGPT Pulse, which is a tool that gives you personalised updates based on usage patterns, is coming to the web.

ChatGPT Pulse is coming to the web, but no word on free or Plus roll out

OpenAI's ChatGPT Pulse, which is a tool that gives you personalised updates based on usage patterns, is coming to the web.

www.bleepingcomputer.com

1

BleepingComputer @bleepingcomputer.com · 2d

AI startups are convinced AI agents are the future, and OpenAI is building a tool that will allow you to create your own AI Agents.

OpenAI is testing ChatGPT-powered Agent Builder

AI startups are convinced AI agents are the future, and OpenAI is building a tool that will allow you to create your own AI Agents.

www.bleepingcomputer.com

2 7

BleepingComputer @bleepingcomputer.com · 2d

The Redis security team has released patches for a maximum severity vulnerability that could allow attackers to gain remote code execution on thousands of vulnerable instances.

Redis warns of critical flaw impacting thousands of instances

The Redis security team has released patches for a maximum severity vulnerability that could allow attackers to gain remote code execution on thousands of vulnerable instances.

www.bleepingcomputer.com

1 8