New Phobos and 8base ransomware decryptor recover files for free

The Japanese police have released a Phobos and 8-Base ransomware decryptor that lets victims recover their files for free, with BleepingComputer confirming that it successfully decrypts files.

• Lawrence Abrams
• July 18, 2025
• 11:56 AM
• 0

Hackers scanning for TeleMessage Signal clone flaw exposing passwords

Researchers are seeing exploitation attempts for the CVE-2025-48927 vulnerability in the TeleMessage SGNL app, which allows retrieving usernames, passwords, and other sensitive data.

• Bill Toulas
• July 18, 2025
• 11:06 AM
• 0

How to conduct an AI risk assessment [Free Guide]

Shadow AI is growing fast. Stay one step ahead.

Learn how to take a scalable approach to AI risk assessments so you can safeguard your org's proprietary data without blocking innovation.

• Nudge Security Sponsorship

Binge smarter: MagellanTV’s documentary library is under $150 for life

If you're into deep dives on history, science, true crime, or space exploration—or are simply sick of your usual streaming service's boring options—this one-time deal from MagellanTV is worth checking out. Right now, you can get lifetime access to the streaming service for just $149.97—down from the regular $999 price.

• BleepingComputer Deals
• July 18, 2025
• 07:12 AM
• 0

OpenAI: GPT-5 is coming, "we'll see" if it creates a shockwave

OpenAI's next foundational and state-of-the-art model, GPT-5, is still on its way after a delay. OpenAI won't tell us the release date for now.

• Mayank Parmar
• July 18, 2025
• 05:47 AM
• 0

Citrix Bleed 2 exploited weeks before PoCs as Citrix denied attacks

A critical Citrix NetScaler vulnerability, tracked as CVE-2025-5777 and dubbed "CitrixBleed 2," was actively exploited nearly two weeks before proof-of-concept (PoC) exploits were made public, despite Citrix stating that there was no evidence of attacks.

• Lawrence Abrams
• July 17, 2025
• 07:37 PM
• 0

VMware fixes four ESXi zero-day bugs exploited at Pwn2Own Berlin

VMware fixed four vulnerabilities in VMware ESXi, Workstation, Fusion, and Tools that were exploited as zero-days during the Pwn2Own Berlin 2025 hacking contest in May 2025.

• Lawrence Abrams
• July 17, 2025
• 05:36 PM
• 2

Microsoft Teams voice calls abused to push Matanbuchus malware

The Matanbuchus malware loader has been seen being distributed through social engineering over Microsoft Teams calls impersonating IT helpdesk.

• Bill Toulas
• July 17, 2025
• 05:28 PM
• 0

Google sues to disrupt BadBox 2.0 botnet infecting 10 million devices

Google has filed a lawsuit against the anonymous operators of the Android BadBox 2.0 malware botnet, accusing them of running a global ad fraud scheme against the company's advertising platforms.

• Lawrence Abrams
• July 17, 2025
• 03:59 PM
• 0

LameHug malware uses AI LLM to craft Windows data-theft commands in real-time

A novel malware family named LameHug is using a large language model (LLM) to generate commands to be executed on compromised Windows systems.

• Bill Toulas
• July 17, 2025
• 02:57 PM
• 0

Get started in cybersecurity with this offensive security course bundle

Breaking into tech can be tough, especially when you're up against candidates with hands-on experience. One way to stand out is by learning on your own by setting up your own lab. The 2025 Complete Offensive Cyber Security Bundle helps you do exactly that, and it's on sale for $29.99 (reg. $180).

• BleepingComputer Deals
• July 17, 2025
• 02:10 PM
• 0

Hacker steals $27 million in BigONE exchange crypto breach

Cryptocurrency exchange BigONE announced that it suffered a security breach, in which hackers stole various digital assets valued at $27 million.

• Bill Toulas
• July 17, 2025
• 12:54 PM
• 0

Chinese hackers breached National Guard to steal network configurations

The Chinese state-sponsored hacking group known as Salt Typhoon breached and remained undetected in a U.S. Army National Guard network for nine months in 2024, stealing network configuration files and administrator credentials that could be used to compromise other government networks.

• Lawrence Abrams
• July 17, 2025
• 12:02 PM
• 3

Max severity Cisco ISE bug allows pre-auth command execution, patch now

A critical vulnerability (CVE-2025-20337) in Cisco's Identity Services Engine (ISE) could be exploited to let an unauthenticated attacker store malicious files, execute arbitrary code, or gain root privileges on vulnerable devices.

• Bill Toulas
• July 17, 2025
• 11:53 AM
• 0

This refurbished MacBook Pro deal is in limited supply

Apple products are a popular choice, but they're expensive. If you want a more budget friendly option, take a look at this refurbished 2021 MacBook Pro which costs over $2,000 when new but is now only $1,149.99.

• BleepingComputer Deals
• July 17, 2025
• 07:11 AM
• 1

Co-op confirms data of 6.5 million members stolen in cyberattack

UK retailer Co-op has confirmed that personal data of 6.5 million members was stolen in the massive cyberattack in April that shut down systems and caused food shortages in its grocery stores.

• Lawrence Abrams
• July 16, 2025
• 06:29 PM
• 0

U.S. Army soldier pleads guilty to extorting 10 tech, telecom firms

A 21-year old former U.S. Army soldier pleaded guilty to charges of hacking and extorting at least ten telecommunications and technology companies in the country.

• Bill Toulas
• July 16, 2025
• 05:00 PM
• 2

Louis Vuitton says regional data breaches tied to same cyberattack

Luxury fashion giant Louis Vuitton confirmed that breaches impacting customers in the UK, South Korea, and Turkey stem from the same security incident, which is believed to be linked to the ShinyHunters extortion group.

• Lawrence Abrams
• July 16, 2025
• 03:26 PM
• 0

This Adobe PDF competitor doesn’t require a subscription in this deal

Adobe Acrobat may have been a mainstay for a while, but there's an alternative PDF editor that you can own instead of rent. PDF Agile is an all-in-one PDF tool for Windows, and lifetime access is now only $39.99 (reg. $119).

• BleepingComputer Deals
• July 16, 2025
• 02:10 PM
• 0

Cloudflare says 1.1.1.1 outage not caused by attack or BGP hijack

To quash speculation of a cyberattack or BGP hijack incident causing the recent 1.1.1.1 Resolver service outage, Cloudflare explains in a post mortem that the incident was caused by an internal misconfiguration.

• Bill Toulas
• July 16, 2025
• 12:49 PM
• 2

SonicWall SMA devices hacked with OVERSTEP rootkit tied to ransomware

A threat actor has been deploying a previously unseen malware called OVERSTEP that modifies the boot process of fully-patched but no longer supported SonicWall Secure Mobile Access appliances.

• Ionut Ilascu
• July 16, 2025
• 11:33 AM
• 0