The Brutalist Report

Bleeping Computer

• CrushFTP zero-day exploited in attacks to gain admin access on servers [25d]
• New CrushFTP zero-day exploited in attacks to hijack servers [25d]
• Arch Linux pulls AUR packages that installed Chaos RAT malware [25d]
• UK ties GRU to stealthy Microsoft 365 credential-stealing malware [25d]
• Microsoft mistakenly tags Windows Firewall error log bug as fixed [25d]
• New ChatGPT o3-alpha model hints at coding upgrade [25d]
• Russian alcohol retailer WineLab closes stores after ransomware attack [25d]
• New Phobos ransomware decryptor lets victims recover files for free [25d]
• Hackers scanning for TeleMessage Signal clone flaw exposing passwords [25d]
• OpenAI: GPT-5 is coming, "we'll see" if it creates a shockwave [26d]