Webinar: Which Google Workspace security controls actually matter?

As fast-growing companies expand their online presence, they often find themselves overwhelmed by a multitude of security recommendations for protecting Google Workspace. With time and resources stretched thin, the question remains: which controls will actually make the greatest difference in securing sensitive data? On September 23, BleepingComputer is hosting a live webinar titled “Breach autopsy: … Read more

Microsoft Teams will let admins block custom file extensions

Microsoft is expanding its security features in Microsoft Teams, allowing administrators to customize which file types are blocked to meet their organization’s specific needs. This update will give companies more flexibility to tailor their security policies while maintaining a secure collaboration environment. The new feature, called Weaponizable File Protection, scans conversations and blocks chat or … Read more

Secure enterprise sharing with access reviews for Microsoft 365

Cloud sharing has revolutionized modern office life, making it easier than ever to collaborate with coworkers, clients, and business partners. However, this convenience comes at a cost: millions of teams struggle to keep track of who has access to sensitive shared files, leaving them vulnerable to data security risks. Unmanaged cloud sharing is a widespread … Read more

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

Malware Campaign Uses Fake GitHub Repositories to Spread Rapuncel Infostealer and Disable Antivirus Software A sophisticated malware campaign has been uncovered, using fake GitHub repositories to impersonate well-known software firms and push a previously undocumented information stealer called Rapuncel. LastPass and Delphos Labs have discovered that the campaign targets at least 40 companies, including password … Read more

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

A critical vulnerability in WordPress has been disclosed, allowing attackers to install malicious themes on affected sites. The Click2Shell flaw, discovered by security researchers, can lead to code execution and potentially devastating consequences for website owners and their visitors. The issue stems from a misconfigured setting that allows an attacker to exploit the theme installation … Read more

Secure enterprise sharing with access reviews for Microsoft 365

Cloud sharing has revolutionized office life, making it easier than ever to collaborate with coworkers, clients, and business partners. However, this convenience comes at a cost: many organizations are struggling to keep track of who has access to their sensitive data. In fact, 61% of security leads report that shared files often remain active longer … Read more

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

A Sophisticated Malware Campaign Exploits GitHub Repositories to Bypass Security Measures and Steal Sensitive Data A complex and highly organized malware campaign has been uncovered, utilizing fake GitHub repositories to impersonate well-known software firms and push a previously unknown information stealer called Rapuncel. This campaign not only steals sensitive data from infected devices but also … Read more

Gyazo server flaw exploited to steal 23.6 million user records

A massive data breach has hit Gyazo, a popular cloud-based screenshot and screen-recording tool used by 23 million users worldwide. Hackers exploited a server vulnerability to steal approximately 23.6 million user records, leaving many wondering what happened, who is affected, and how it will impact their online security. The incident occurred on September 11, 2026, … Read more

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

A notorious hacking group, known as Transparent Tribe, has unleashed a new backdoor malware written in Rust programming language. The malicious code, dubbed “RustBackdoor,” is being deployed using private GitHub repositories for command and control (C2) purposes, allowing attackers to maintain stealthy access to compromised systems. Transparent Tribe, a cybercrime collective with a history of … Read more

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

A critical vulnerability in WordPress, one of the most widely used content management systems (CMS) on the internet, has been discovered. The bug, known as Click2Shell, allows attackers to trick users into installing malicious themes and plugins, ultimately paving the way for code execution. This flaw affects over 60% of WordPress installations, putting millions of … Read more