Latest News from Bleeping Computer

• Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

  A 34-year-old Armenian man has pleaded guilty to hacking U.S. companies and deploying the infamous Ryuk ransomware to encrypt their systems. [...]

• Police suspects Dutch hackers were involved in Odido breach

  The Dutch National Police (Politie) says it has found "strong indications" that Dutch hackers have been involved in a February breach at the telecommunications provider Odido. [...]

• Progress urges ShareFile admins to shut down servers over “credible” threat

  Progress Software is emailing ShareFile customers who use Storage Zone Controllers to immediately shut down their servers after identifying what it describes as a "credible external security threat" targeting the on-premises secure file-sharing software. [...]

• Hackers exploit critical auth bypass in Gitea Docker image

  Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators. [...]

• Money launderer accused of stealing seized crypto while in prison

  A Bulgarian national has been charged with stealing $290,000 in government-seized cryptocurrency while serving 121 months in prison for helping launder millions stolen from American fraud victims. [...]

• The Replicant in Your Directory: AI Agents and the Identity Security Gap

  AI agents are accelerating the growth of non-human identities, making it harder for organizations to understand what exists, who owns it, and what it can access. Netwrix explains why stronger visibility and identity governance are essential as AI expands the enterprise attack surface. [...]

• Zimbra urges customers to patch critical web client XSS flaw

  The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access the Zimbra Collaboration suite. [...]

• Former ransomware negotiator gets 4 years for BlackCat attacks

  A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. [...]

• OpenMandriva Linux says contributor tried to sabotage the project

  The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among contributors. [...]

• Injective SDK on npm infected with cryptocurrency wallet stealer

  Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases. [...]