#BleepingComputer
LightNews LightNews
techmeme.com
Researcher: *sshole, a decade-old OpenSSH flaw, lets attackers use a password of 256+ characters to log into passwordless accounts on some musl Linux systems (Lawrence Abrams/BleepingComputer)

Main Link | Techmeme Permalink
November 6, 2026 at 4:30 PM
ninjaintelgroup.bsky.social
🗞 Iris Ohyama data cloud breach exposes info of 7.7 million customers

via BleepingComputer
https://www.bleepingcomputer.com/news/security/iris-ohyama-data-cloud-breach-exposes-info-of-77-million-customers/
#cybersecurity #infosec #threatintel
November 9, 2026 at 7:40 AM
ninjaintelgroup.bsky.social
🗞 Hackers pull off $133 million French bank heist via service provider

via BleepingComputer
https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/
#cybersecurity #infosec #threatintel
November 8, 2026 at 7:40 AM
ninjaintelgroup.bsky.social
🗞 FBI, CISA warn of cyberattacks targeting refrigeration systems

via BleepingComputer
https://www.bleepingcomputer.com/news/security/fbi-cisa-warn-of-cyberattacks-targeting-refrigeration-systems/
#cybersecurity #infosec #threatintel
November 6, 2026 at 7:40 AM
ninjaintelgroup.bsky.social
🗞 SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

via BleepingComputer
https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/
#cybersecurity #infosec #threatintel
November 7, 2026 at 7:40 AM
sambowne.infosec.exchange.ap.brid.gy
OpenAI’s GPT-6 Astra silently obstructed safety research tasks https://www.bleepingcomputer.com/news/security/openais-gpt-6-astra-silently-obstructed-safety-research-tasks/
OpenAI’s GPT-6 Astra silently obstructed safety research tasks (BleepingComputer)
OpenAI has disclosed another AI alignment incident where GPT-6 Astra was found to sometimes quietly withhold help on safety research.
www.bleepingcomputer.com
November 8, 2026 at 7:50 AM
ninjaintelgroup.bsky.social
🗞 Vercel rolls out new protection against stolen session cookie attacks

via BleepingComputer
https://www.bleepingcomputer.com/news/security/vercel-rolls-out-new-protection-against-stolen-session-cookie-attacks/
#cybersecurity #infosec #threatintel
November 5, 2026 at 7:40 AM
niztal.bsky.social
Source: BleepingComputer
https://www.bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts/
OpenSSH flaw lets attackers log into password-disabled Linux accounts
BleepingComputer
www.bleepingcomputer.com
November 6, 2026 at 3:33 AM
bonaldodaquitania.mastodon.uno.ap.brid.gy
This is why you should always be a nice employer.
#binance #BinanceHack

@BleepingComputer https://infosec.exchange/@BleepingComputer/117554306403297248
BleepingComputer (@BleepingComputer@infosec.exchange)
Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company's wallet infrastructure and steal about $6.34 billion in digital assets. https://www.bleepingcomputer.com/news/security/binance-says-fake-job-interview-led-to-63-billion-crypto-heist/
infosec.exchange
November 3, 2026 at 8:11 PM
planetfoss.net.web.brid.gy
OpenAI’s GPT-6 Astra silently obstructed safety research tasks (BleepingComputer)
OpenAI has disclosed another AI alignment incident where GPT-6 Astra was found to sometimes quietly withhold help on safety research.
www.bleepingcomputer.com
November 5, 2026 at 8:14 PM
thenewoil.org
Fake #openai, #spacex events used to steal #microsoft, #google accounts

https://www.bleepingcomputer.com/news/security/fake-openai-spacex-events-used-to-steal-microsoft-google-accounts/

#cybersecurity #phishing #anthropic
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts (BleepingComputer)
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google …
www.bleepingcomputer.com
November 8, 2026 at 3:30 PM
malice.ai
BleepingComputer reported on November 9 that the move cites sanctions evasion and links to cybercrime gangs.
US Treasury reportedly cuts MEXC Global crypto exchange off from US financial system
malice.ai
November 9, 2026 at 1:52 PM
thenewoil.org
#openssh flaw lets attackers log into password-disabled #linux accounts

https://www.bleepingcomputer.com/news/security/openssh-flaw-lets-attackers-log-into-password-disabled-linux-accounts/

#sshole #ssh #cybersecurity
OpenSSH flaw lets attackers log into password-disabled Linux accounts (BleepingComputer)
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication …
www.bleepingcomputer.com
November 7, 2026 at 4:00 PM
planetfoss.net.web.brid.gy
Hackers exploit SSHole OpenSSH flaw to breach Linux systems (BleepingComputer)
Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access.
www.bleepingcomputer.com
November 9, 2026 at 4:21 PM
planetfoss.net.web.brid.gy
York University breach exposed personal information dating to 2007 (BleepingComputer)
York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms.
www.bleepingcomputer.com
November 9, 2026 at 10:22 PM
cyzoio.bsky.social
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/runaway-ai-hacking-agent-behind-workos-breach-after-escaping-sandbox/
More cyber news: https://cyzo.io/news?utm_source=social&utm_medium=social&utm_campaign=cyzo_news
#Cyzo #Cybersecurity
November 8, 2026 at 2:20 PM
cwealthsentinel.bsky.social
D-Link warns that its DGS-3130 series switches, built mainly for small and midsize businesses, carry several unpatched flaws, and it advises turning off its Discovery Protocol until new firmware arrives. The full report from BleepingComputer is attached. #CyberSecurity
D-Link warns of multiple zero-days in DGS-3130 Series switches
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches.
www.bleepingcomputer.com
November 7, 2026 at 6:38 PM
botmutiny.com
BleepingComputer: CrowdStrike says a China-nexus group used ARTEX AI agents with DeepSeek to target 200+ organizations. The findings are CrowdStrike's.
https://botmutiny.com/blog/crowdstrike-says-china-linked-group-used-artex-ai-agents-and-deepseek-against-20-c8s273jp
via @bleepingcomputer.com
CrowdStrike: Vapor Panda ARTEX AI Campaign
CrowdStrike says Vapor Panda used ARTEX and DeepSeek to target 200+ organizations. BleepingComputer reports; the findings are CrowdStrike's.
botmutiny.com
November 7, 2026 at 6:30 PM
cyzoio.bsky.social
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/ctm360-exposes-fake-gift-card-scams-exploiting-trusted-brands/
More cyber news: https://cyzo.io/news?utm_source=social&utm_medium=social&utm_campaign=cyzo_news
#Cyzo #Cybersecurity
November 8, 2026 at 2:20 AM
hrbrmstr.mastodon.social.ap.brid.gy
cc: @krypt3ia https://infosec.exchange/@BleepingComputer/117559485723831601
BleepingComputer (@BleepingComputer@infosec.exchange)
France's national blood service has confirmed that a cyberattack targeting a refrigeration equipment provider raised temperature and defrost settings at three of its facilities, threatening stored blood products. https://www.bleepingcomputer.com/news/security/cyberattack-disrupts-blood-storage-refrigeration-systems-in-france/
infosec.exchange
November 4, 2026 at 6:07 PM
planetfoss.net.web.brid.gy
Russian cloud firm Beget rebuilds from scratch after data wiper attack (BleepingComputer)
A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said.
www.bleepingcomputer.com
November 9, 2026 at 6:21 PM
dammnews.bsky.social
ON THE DAMMNEWS WIRE — FAKE SECURITY TOOLS ON GITHUB PUSH BACKDOORS AND INFOSTEALERS (BleepingComputer) · SIREN 96
Every publisher covering it: https://dammnews.com/s/e524bbe4f1
November 6, 2026 at 7:00 PM
planetfoss.net.web.brid.gy
The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI. (BleepingComputer)
AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant.
www.bleepingcomputer.com
November 9, 2026 at 4:22 PM
planetfoss.net.web.brid.gy
FBI agent stole $2.5 million in crypto from hackers under investigation (BleepingComputer)
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation.
www.bleepingcomputer.com
November 9, 2026 at 4:22 PM
sipirtu.com
Hackers are backdooring Linux servers by distributing a trojanized version of the CWP web server called CWPdoor.

Source: BleepingComputer
Hackers backdoor Linux servers using trojanized CWP web server
A new Linux malware called CWPdoor is being distributed through a trojanized version of cwpsrv, the web server behind the Control Web Panel (CWP) management interface.
www.bleepingcomputer.com
November 5, 2026 at 5:32 PM