BleepingComputer
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. [...]
23 octobre 2026 à 16:55

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

23 octobre 2026 à 16:55

Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. [...]

BleepingComputer
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. [...]
23 octobre 2026 à 14:54

Microsoft Teams to get AI-powered, context-aware phishing detection

BleepingComputer

Par : Sergiu Gatlan

23 octobre 2026 à 14:54

Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. [...]

BleepingComputer
Quest Diagnostics confirms data breach exposed patient records
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system. [...]
23 octobre 2026 à 12:40

Quest Diagnostics confirms data breach exposed patient records

BleepingComputer

Par : Bill Toulas

23 octobre 2026 à 12:40

American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system. [...]

BleepingComputer
PHP shares mitigation for new RCE vulnerability with no patch
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch. [...]
23 octobre 2026 à 11:38

PHP shares mitigation for new RCE vulnerability with no patch

BleepingComputer

Par : Sergiu Gatlan

23 octobre 2026 à 11:38

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has no patch. [...]

BleepingComputer
You gave your AI agent access, but who is giving it orders?
AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate permissions. Gen Digital explains how its Agent Trust Hub helps protect agents through skill verification, secure connectivity, and runtime controls that intercept dangerous act [...]
23 octobre 2026 à 10:00

You gave your AI agent access, but who is giving it orders?

BleepingComputer

Par : Sponsored by Gen Digital

23 octobre 2026 à 10:00

AI agents can be manipulated through malicious emails, websites, and plugins into executing commands, stealing data, or deleting files using their legitimate permissions. Gen Digital explains how its Agent Trust Hub helps protect agents through skill verification, secure connectivity, and runtime controls that intercept dangerous act [...]

BleepingComputer
HPE patches eight max severity RCE and auth bypass AOS flaws
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. [...]
23 octobre 2026 à 08:48

HPE patches eight max severity RCE and auth bypass AOS flaws

BleepingComputer

Par : Sergiu Gatlan

23 octobre 2026 à 08:48

Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severity authentication bypass and code execution issues. [...]

BleepingComputer
Railway warns devs to rotate secrets after potential breach
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]
22 octobre 2026 à 17:25

Railway warns devs to rotate secrets after potential breach

BleepingComputer

Par : Bill Toulas

22 octobre 2026 à 17:25

Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]

BleepingComputer
Capcom confirms data breach affecting 11.7 million accounts
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. [...]
22 octobre 2026 à 16:22

Capcom confirms data breach affecting 11.7 million accounts

BleepingComputer

Par : Bill Toulas

22 octobre 2026 à 16:22

Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information. [...]

BleepingComputer
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]
22 octobre 2026 à 15:12

LiteLLM release pipeline hacked to distribute info-stealer malware

BleepingComputer

Par : Bill Toulas

22 octobre 2026 à 15:12

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables. [...]

BleepingComputer
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]
22 octobre 2026 à 13:18

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

BleepingComputer

Par : Sergiu Gatlan

22 octobre 2026 à 13:18

Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]

BleepingComputer
Machine speed attacks require machine speed detection and response
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated containment are critical. [...]
22 octobre 2026 à 10:02

Machine speed attacks require machine speed detection and response

BleepingComputer

Par : Sponsored by Exaforce

22 octobre 2026 à 10:02

Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving stolen GitHub tokens, malicious AI installers, and MFA phishing, explaining why faster detection and automated containment are critical. [...]

BleepingComputer
Amazon says PHP2Shell exploitation began 4 days before patches
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. [...]
22 octobre 2026 à 09:09

Amazon says PHP2Shell exploitation began 4 days before patches

BleepingComputer

Par : Sergiu Gatlan

22 octobre 2026 à 09:09

Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday. [...]

BleepingComputer
GitLab warns of new max severity code execution vulnerability
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. [...]
22 octobre 2026 à 07:41

GitLab warns of new max severity code execution vulnerability

BleepingComputer

Par : Sergiu Gatlan

22 octobre 2026 à 07:41

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. [...]

Articles on TechRepublic
Samsung Galaxy A55 and A35 Get One UI 9 — but Not Everyone Can Update Yet
Samsung's Galaxy A55 and A35 are getting Android 17 through One UI 9, starting in South Korea. Here's what's changing and when other regions may follow. The post Samsung Galaxy A55 and A35 Get One UI 9 — but Not Everyone Can Update Yet appeared first on TechRepublic.
23 octobre 2026 à 05:10

Samsung Galaxy A55 and A35 Get One UI 9 — but Not Everyone Can Update Yet

Articles on TechRepublic

Par : TechRepublic Staff

23 octobre 2026 à 05:10

Samsung's Galaxy A55 and A35 are getting Android 17 through One UI 9, starting in South Korea. Here's what's changing and when other regions may follow.

The post Samsung Galaxy A55 and A35 Get One UI 9 — but Not Everyone Can Update Yet appeared first on TechRepublic.

Articles on TechRepublic
Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls
Zoom unveils AI agents and its Unified Context Layer at Zoomtopia 2026. Learn how its new automation and security tools could affect IT teams. The post Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls appeared first on TechRepublic.
22 octobre 2026 à 16:50

Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls

Articles on TechRepublic

Par : Zeus Kerravala

22 octobre 2026 à 16:50

Zoom unveils AI agents and its Unified Context Layer at Zoomtopia 2026. Learn how its new automation and security tools could affect IT teams.

The post Zoomtopia 2026: Zoom Introduces AI Agents, New Security Controls appeared first on TechRepublic.

Articles on TechRepublic
Google Chrome Cheat Sheet: Features, Gemini AI, Security, and More
Explore Google Chrome's features, Gemini AI, Auto Browse, security settings, privacy controls, and Chrome Enterprise tools in this complete cheat sheet. The post Google Chrome Cheat Sheet: Features, Gemini AI, Security, and More appeared first on TechRepublic.
22 octobre 2026 à 13:39

Google Chrome Cheat Sheet: Features, Gemini AI, Security, and More

Articles on TechRepublic

Par : Matt Gonzales

22 octobre 2026 à 13:39

Explore Google Chrome's features, Gemini AI, Auto Browse, security settings, privacy controls, and Chrome Enterprise tools in this complete cheat sheet.

The post Google Chrome Cheat Sheet: Features, Gemini AI, Security, and More appeared first on TechRepublic.

Articles on TechRepublic
Amazon’s New Blink Cameras Offer 4K Video and Up to 7,000 Feet of Wireless Range
Amazon introduces five Blink security cameras with 4K video, long-range wireless connectivity, and new viewing features. Compare prices and key limitations. The post Amazon’s New Blink Cameras Offer 4K Video and Up to 7,000 Feet of Wireless Range appeared first on TechRepublic.
22 octobre 2026 à 12:57

Amazon’s New Blink Cameras Offer 4K Video and Up to 7,000 Feet of Wireless Range

Articles on TechRepublic

Par : Joseph Ofonagoro

22 octobre 2026 à 12:57

Amazon introduces five Blink security cameras with 4K video, long-range wireless connectivity, and new viewing features. Compare prices and key limitations.

The post Amazon’s New Blink Cameras Offer 4K Video and Up to 7,000 Feet of Wireless Range appeared first on TechRepublic.

Articles on TechRepublic
ChatGPT Locked Chats Explained: How to Use It and What to Know
ChatGPT now lets users lock private conversations with a PIN or biometrics. Learn how Locked Chats works, its limitations, and the risks of resetting a PIN. The post ChatGPT Locked Chats Explained: How to Use It and What to Know appeared first on TechRepublic.
22 octobre 2026 à 10:56

ChatGPT Locked Chats Explained: How to Use It and What to Know

Articles on TechRepublic

Par : Joseph Ofonagoro

22 octobre 2026 à 10:56

ChatGPT now lets users lock private conversations with a PIN or biometrics. Learn how Locked Chats works, its limitations, and the risks of resetting a PIN.

The post ChatGPT Locked Chats Explained: How to Use It and What to Know appeared first on TechRepublic.

BleepingComputer
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]
21 octobre 2026 à 14:34

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

BleepingComputer

Par : Bill Toulas

21 octobre 2026 à 14:34

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. [...]

BleepingComputer
OpenAI agents disabled safety monitoring, one lied about it
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so. [...]
21 octobre 2026 à 12:26

OpenAI agents disabled safety monitoring, one lied about it

BleepingComputer

Par : Bill Toulas

21 octobre 2026 à 12:26

OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do so. [...]

Vue normale