The Brutalist Report

Bleeping Computer

• Official SAP npm packages compromised to steal credentials [32d]
• Popular WordPress redirect plugin hid dormant backdoor for years [32d]
• Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining [32d]
• Hackers arrested for hijacking and selling 610,000 Roblox accounts [32d]
• cPanel, WHM emergency update fixes critical auth bypass bug [32d]
• European police dismantles €50 million crypto investment fraud ring [32d]
• Learning from the Vercel breach: Shadow AI & OAuth sprawl [32d]
• GitHub fixes RCE flaw that gave access to millions of private repos [32d]
• CISA orders feds to patch Windows flaw exploited as zero-day [32d]
• Microsoft says backend change broke Teams Free chat and calls [32d]