BleepingComputer
10.6K subscribers
41 photos
24.7K links
Latest news and stories from BleepingComputer.com

From a bleeping computer to a working computer.
Download Telegram
NPM nukes NodeJS malware opening Windows, Linux reverse shells

NPM has removed multiple packages hosted on its repository this week that established connection to remote servers and exfiltrated user data.
These 4 packages had collected over 1,000 total downloads over the course of the last few months up until being removed by NPM yesterday. [...]

https://www.bleepingcomputer.com/news/security/npm-nukes-nodejs-malware-opening-windows-linux-reverse-shells/
Using Windows 10 in-place upgrades to fix Windows Update issues

In some cases, some folks have noticed that the Windows Update fails with an uninformative error message almost every month. Even those who have successfully downloaded the update have hit trouble during the installation process. In this article, we'll highlight steps to use in-place upgrades to resolve update issues. [...]

https://www.bleepingcomputer.com/news/microsoft/using-windows-10-in-place-upgrades-to-fix-windows-update-issues/
Bug bounty reporter cashes out on someone else's exploit

While bug bounty programs have gained increased momentum and interest from the security research community for their role in promoting security awareness and responsible vulnerability disclosure, they are not without their share of problems.  [...]

https://www.bleepingcomputer.com/news/security/bug-bounty-reporter-cashes-out-on-someone-elses-exploit/
Windows GravityRAT malware now also targets Android, macOS

GravityRAT, a malware strain known for checking the CPU temperature of Windows computers to detect virtual machines or sandboxes, is now multi-platform spyware as it can now also be used to infect Android and macOS devices. [...]

https://www.bleepingcomputer.com/news/security/windows-gravityrat-malware-now-also-targets-android-macos/
Hackers hijack Telegram, email accounts in SS7 mobile attack

Hackers with access to the Signaling System 7 (SS7) used for connecting mobile networks across the world were able to gain access to Telegram messenger and email data of high-profile individuals in the cryptocurrency business. [...]

https://www.bleepingcomputer.com/news/security/hackers-hijack-telegram-email-accounts-in-ss7-mobile-attack/