Latest News from Bleeping Computer

• Claude Code leak used to push infostealer malware on GitHub

  Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. [...]

• Drift loses $280 million as hackers seize Security Council powers

  The Drift Protocol lost at least $280 million after a threat actor took control of its Security Council administrative powers in a planned, sophisticated operation. [...]

• Residential proxies evaded IP reputation checks in 78% of 4B sessions

  Researchers warn that residential proxies used to route malicious traffic are a big problem for IP reputation systems, as there is no clear distinction between attackers and legitimate users. [...]

• Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime

  Threat actors are exploiting vacant homes as "drop addresses" to intercept mail and enable fraud. Flare shows how postal services and fake identities are abused to turn mail into a fraud vector. [...]

• New Progress ShareFile flaws can be chained in pre-auth RCE attacks

  Two vulnerabilities in Progress ShareFile, an enterprise-grade secure file transfer solution, can be chained to enable unauthenticated file exfiltration from affected environments. [...]

• Medtech giant Stryker fully operational after data-wiping attack

  Stryker Corporation, one of the world's leading medical technology companies, says it's fully operational three weeks after many of its systems were wiped out in a cyberattack claimed by the Iranian-linked Handala hacktivist group. [...]

• Critical Cisco IMC auth bypass gives attackers Admin access

  Cisco has patched several critical and high-severity vulnerabilities, including an Integrated Management Controller (IMC) authentication bypass that enables attackers to gain Admin access. [...]

• Microsoft links Classic Outlook issue to email delivery problems

  Microsoft is investigating a known issue that prevents some Classic Outlook users from sending emails via Outlook.com. [...]

• Over 14,000 F5 BIG-IP APM instances still exposed to RCE attacks

  Internet security watchdog Shadowserver has found over 14,000 BIG-IP APM instances exposed online amid ongoing attacks exploiting a critical-severity remote code execution (RCE) vulnerability. [...]

• New CrystalRAT malware adds RAT, stealer and prankware features

  A new malware-as-a-service called CrystalRAT is being promoted on Telegram, offering remote access, data theft, keylogging, and clipboard hijacking capabilities. [...]