Fixed Intel

Latest Cybersecurity News

Stay informed with real-time threat intelligence, vulnerability disclosures, and expert analysis from the cybersecurity community.

AllMalware & Threats468Vulnerabilities240Data Breaches20Ransomware0APT & Threat Actors0Cloud Security0MENA Cybersecurity0Compliance & Frameworks0Tools & Tutorials0Industry News1127
New GPUBreach attack enables system takeover via GPU rowhammer
BleepingComputer
Malware & Threats

New GPUBreach attack enables system takeover via GPU rowhammer

A new attack, dubbed GPUBreach, can induce Rowhammer bit-flips on GPU GDDR6 memories to escalate privileges and lead to a full system compromise.

BleepingComputerApr 6, 20263m5
Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit
BleepingComputer
Malware & Threats

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit

Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing attackers to gain SYSTEM or elevated administrator permissions.

BleepingComputerApr 6, 20263m5
Microsoft fixes Classic Outlook bug causing email delivery issues
BleepingComputer
Malware & Threats

Microsoft fixes Classic Outlook bug causing email delivery issues

Microsoft has resolved a known issue that was preventing some Classic Outlook users from sending emails via Outlook.com.

BleepingComputerApr 6, 20262m5
Microsoft removes Support and Recovery Assistant from Windows
BleepingComputer
Malware & Threats

Microsoft removes Support and Recovery Assistant from Windows

Microsoft has deprecated and removed the Support and Recovery Assistant (SaRA) command-line utility from all in-support versions of Windows updates starting March 10.

BleepingComputerApr 6, 20263m5
Microsoft links Medusa ransomware affiliate to zero-day attacks
BleepingComputer
Malware & Threats

Microsoft links Medusa ransomware affiliate to zero-day attacks

Microsoft says that Storm-1175, a China-based financially motivated cybercriminal group known for deploying Medusa ransomware payloads, has been deploying n-day and zero-day exploits in high-velocity attacks.

BleepingComputerApr 6, 20263m5
Drift $280M crypto theft linked to 6-month in-person operation
BleepingComputer
Malware & Threats

Drift $280M crypto theft linked to 6-month in-person operation

The Drift Protocol says that the $280+ million hack it suffered last week was the result of a long-term, carefully planned operation that included building "a functioning operational presence inside the Drift ecosystem."

BleepingComputerApr 6, 20263m6
CISA orders feds to patch Fortinet flaw exploited in attacks by Friday
BleepingComputer
Malware & Threats

CISA orders feds to patch Fortinet flaw exploited in attacks by Friday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered federal agencies to secure FortiClient Enterprise Management Server (EMS) instances against an actively exploited vulnerability by Friday.

BleepingComputerApr 6, 20263m5
Why Simple Breach Monitoring is No Longer Enough
BleepingComputer
Malware & Threats

Why Simple Breach Monitoring is No Longer Enough

Infostealers are harvesting credentials and session cookies at scale, bypassing traditional defenses. Lunar explains why simple breach monitoring alone can't keep up with modern credential-based attacks.

BleepingComputerApr 6, 20267m5
Traffic violation scams switch to QR codes in new phishing texts
BleepingComputer
Malware & Threats

Traffic violation scams switch to QR codes in new phishing texts

Scammers are sending fake "Notice of Default" traffic violation text messages impersonating state courts across the U.S., pressuring recipients to scan a QR code that leads to a phishing site demanding a $6.99 payment while stealing personal and financial information.

BleepingComputerApr 5, 20263m5
New FortiClient EMS flaw exploited in attacks, emergency patch released
BleepingComputer
Malware & Threats

New FortiClient EMS flaw exploited in attacks, emergency patch released

Fortinet has released an emergency weekend security update for a new critical FortiClient Enterprise Management Server (EMS) vulnerability that is actively exploited in attacks.

BleepingComputerApr 5, 20262m5
Hackers exploit React2Shell in automated credential theft campaign
BleepingComputer
Malware & Threats

Hackers exploit React2Shell in automated credential theft campaign

Hackers are running a large-scale campaign to steal credentials in an automated way after exploiting React2Shell (CVE-2025-55182) in vulnerable Next.js apps.

BleepingComputerApr 5, 20263m5
Axios npm hack used fake Teams error fix to hijack maintainer account
BleepingComputer
Malware & Threats

Axios npm hack used fake Teams error fix to hijack maintainer account

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social engineering campaign believed to have been conducted by North Korean threat actors.

BleepingComputerApr 4, 20266m5