- LACMA data breach last year exposed social security and medical data
by Bill Toulas on August 25, 2026 at 9:58 pmThe Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. […]
- Hackers abuse npm mirrors to host phishing redirect pagesby Lawrence Abrams on August 25, 2026 at 9:39 pm
Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. […]
- AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodesby Bill Toulas on August 25, 2026 at 8:25 pm
A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature. […]
- Massive DDoS attack disrupts Norway’s government digital servicesby Bill Toulas on August 25, 2026 at 3:52 pm
A large distributed denial-of-service (DDoS) attack has disrupted Norway’s shared government digital infrastructure since Monday, affecting services used by the public sector. […]
- Hospital operator Nutex Health says data stolen in cyberattackby Bill Toulas on August 25, 2026 at 2:44 pm
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. […]
- From Fake Workers to Account Recovery: The Growing Identity Verification Riskby Sponsored by Specops Software on August 25, 2026 at 2:01 pm
Attackers are increasingly targeting the processes used to establish or recover identity rather than attacking the login itself. Specops explains how stronger identity verification can help organizations prevent fake workers and social engineering attacks from gaining legitimate access. […]
- Microsoft PowerToys adds Alt+Tab-style switching for an app’s windowsby Sergiu Gatlan on August 25, 2026 at 1:51 pm
Microsoft updated its Windows PowerToys toolset with a new utility dubbed “Window Hopper” that lets users switch between an app’s windows more quickly. […]
- WhatsApp adds stronger two-step verification, multiple passkeysby Sergiu Gatlan on August 25, 2026 at 1:00 pm
WhatsApp has started rolling out several new account security features, including support for multiple passkeys and stronger two-step verification. […]
- Hackers breached over 270 Zimbra servers in ongoing attacksby Sergiu Gatlan on August 25, 2026 at 12:04 pm
Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks targeting a high-severity Zimbra Collaboration Suite (ZCS) vulnerability. […]
- Police arrests dozens of suspects in global cybercrime crackdownby Sergiu Gatlan on August 25, 2026 at 10:53 am
Law enforcement agencies from 22 countries helped identify 263 suspects and arrested 58 individuals linked to cybercrime networks coordinated by African crime groups. […]
- Unpatched Calix flaw lets hackers bypass NAT to expose internal devicesby Bill Toulas on August 24, 2026 at 9:14 pm
An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S. broadband providers allows remote, unauthenticated attackers to create port-forwarding rules that can expose local network devices to the public internet. […]
- Hackers target WordPress sites in miniOrange auth bypass attacksby Bill Toulas on August 24, 2026 at 7:26 pm
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. […]
- TikTok reaches $400M settlement with US over COPPA violationsby Bill Toulas on August 24, 2026 at 5:56 pm
The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children’s Online Privacy Protection Act (COPPA). […]
Bleeping Computer Cyber Security
We are an ethical website cyber security team and we perform security assessments to protect our clients.