News Feed

Bleeping Computer 3 hours, 42 minutes ago

OpenAI is offering $20 ChatGPT Plus for free to some users

If you're already subscribed to ChatGPT Plus, which costs $20, you can request OpenAI to cancel your subscription, and it may offer one month of free usage. [...]

Read full article

Bleeping Computer 6 hours, 46 minutes ago

The biggest cybersecurity and cyberattack stories of 2025

2025 was a big year for cybersecurity, with cyberattacks, data breaches, threat groups reaching new notoriety levels, and, of course, zero-day flaws exploited in breaches. Some stories, though, were more impactful or popular with our readers than others. This article explores 15 of the biggest cybersecurity stories of 2025. [...]

Read full article

Bleeping Computer 7 hours, 43 minutes ago

New GlassWorm malware wave targets Macs with trojanized crypto wallets

A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver trojanized versions of crypto wallet applications. [...]

Read full article

Bleeping Computer 1 day ago

NYC mayoral inauguration bans Flipper Zero, Raspberry Pi devices

New York City's 2026 mayoral inauguration of Zohran Mamdani has published a list of banned items for the event, specifically prohibiting the Flipper Zero and Raspberry Pi devices. [...]

Read full article

Dark Reading 1 day, 5 hours ago

Sunken Ships: Will Orgs Learn From Ivanti EPMM Attacks?

The April/May zero-day exploitations of Ivanti's mobile device management platform meant unprecedented pwning of thousands of orgs by a Chinese APT — and history will probably repeat itself.

Read full article

Bleeping Computer 1 day, 7 hours ago

Hackers drain $3.9M from Unleash Protocol after multisig hijack

The decentralized intellectual property platform Unleash Protocol has lost around $3.9 million worth of cryptocurrency after someone executed an unauthorized contract upgrade that allowed asset withdrawals. [...]

Read full article

Bleeping Computer 1 day, 8 hours ago

RondoDox botnet exploits React2Shell flaw to breach Next.js servers

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers. [...]

Read full article

Dark Reading 1 day, 8 hours ago

When the Cloud Rains on Everyone's IoT Parade

What happens to all of those always-connected devices and Internet of Things when the cloud goes down? Disruptions to sleep, school, and smart homes, just to name a few issues.

Read full article

Dark Reading 1 day, 9 hours ago

Identity Security 2026: Four Predictions & Recommendations

Agentic AI adoption and identity security risks, IGA expands in mid-market, SOC-identity team collaboration, and identity platform consolidation—this 2026 predictions post previews identity trends.

Read full article

Dark Reading 1 day, 9 hours ago

Contrarians No More: AI Skepticism Is on the Rise

Concerns about an economic bubble bursting, along with doubts regarding return on investment, suggest the tide may be turning for the artificial intelligence industry.

Read full article

Bleeping Computer 1 day, 12 hours ago

IBM warns of critical API Connect auth bypass vulnerability

IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could allow attackers to access apps remotely. [...]

Read full article

Bleeping Computer 1 day, 13 hours ago

Disney will pay $10 million to settle children's data privacy lawsuit

Disney has agreed to pay a $10 million civil penalty to settle claims that it violated the Children's Online Privacy Protection Act by mislabeling videos and allowing data collection for targeted advertising. [...]

Read full article

Bleeping Computer 2 days, 1 hour ago

New ErrTraffic service enables ClickFix attacks via fake browser glitches

A new cybercrime tool called ErrTraffic allows threat actors to automate ClickFix attacks by generating 'fake glitches' on compromised websites to lure users into downloading payloads or following malicious instructions [...]

Read full article

The Record 2 days, 6 hours ago

Ransomware responders plead guilty to using ALPHV in attacks on US organizations

Two Americans who worked for incident response firms face up to 20 years in prison for turning ransomware upon U.S. businesses.

Read full article

Bleeping Computer 2 days, 6 hours ago

European Space Agency confirms breach of "external servers"

The European Space Agency (ESA) confirmed that attackers recently breached servers outside its corporate network, which contained what it described as "unclassified" information on collaborative engineering activities. [...]

Read full article

Bleeping Computer 2 days, 7 hours ago

Zoom Stealer browser extensions harvest corporate meeting intelligence

A newly discovered campaign, which researchers call Zoom Stealer, is affecting 2.2 million Chrome, Firefox, and Microsoft Edge users through 18 extensions that collect online meeting-related data like URLs, IDs, topics, descriptions, and embedded passwords. [...]

Read full article

Bleeping Computer 2 days, 7 hours ago

US cybersecurity experts plead guilty to BlackCat ransomware attacks

Two former employees of cybersecurity incident response companies Sygnia and DigitalMint have pleaded guilty to targeting U.S. companies in BlackCat (ALPHV) ransomware attacks in 2023. [...]

Read full article

Bleeping Computer 2 days, 8 hours ago

CISA orders feds to patch MongoBleed flaw exploited in attacks

CISA ordered U.S. federal agencies to patch an actively exploited MongoDB vulnerability (MongoBleed) that can be exploited to steal credentials, API keys, and other sensitive data. [...]

Read full article

Cyber Security Ventures 2 days, 8 hours ago

The Top Cybersecurity Predictions For 2026

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Dec. 30, 2025 –Read the full story in Government Technology Dan Lohrmann, internationally recognized cybersecurity leader, technologist, keynote speaker and author covered “The Top 26 Security Predictions for 2026” in Government Technology The post The Top Cybersecurity …

Read full article

Dark Reading 2 days, 9 hours ago

Cybersecurity Predictions 2026: An AI Arms Race and Malware Autonomy

The year ahead will see an intensified AI-driven cybersecurity arms race, with attackers leveraging autonomous malware and advanced AI technologies to outpace defenders, while security teams adopt increasingly sophisticated AI tools to combat evolving threats amidst growing vendor consolidation and platformization in the industry.

Read full article