BleepingComputer

Hardware wallet maker Ledger has asked sellers across Asia to stop sales following a supply-chain attack. Details remain limited, but the move suggests concerns that affected devices or packages could be compromised. The news is circulating in cybersecurity and crypto communities, with observers watching for more information on the scope of the breach and any impact on customers.

Malicious packages posing as legitimate Arch Linux software (AUR packages) are being used to distribute malware that executes with root privileges on infected systems. The campaign targets Linux users who install community-contributed packages, a supply-chain attack vector that has drawn concern in security circles given the trust placed in community repositories.

Northflank, a cloud deployment platform, has suffered a security breach that led to the abuse of customers' AI API keys. According to BleepingComputer, attackers were able to access credentials stored with the service and misuse them, potentially running up costs or consuming quotas on customers' AI accounts. Customers are being urged to review and rotate their keys.

Attackers compromised the Convertr analytics script to inject malicious code that skims payment card details from visitors, in a supply-chain attack affecting websites that load the script. Security researchers warn e-commerce and finance sites to check whether they are running the affected code and advise customers to monitor their card statements for fraudulent charges.

Cloud deployment platform Zeabur is shutting down following its second security breach in two months. The announcement was reported by BleepingComputer, though details on the nature of the breaches or a shutdown timeline have not yet been made public. Users of the platform are watching for guidance on migrating their projects elsewhere.

Harvard University has suffered a data breach affecting 851,000 accounts, according to a report by BleepingComputer. The incident exposed personal information linked to a large number of accounts tied to the university, raising questions about how the intrusion happened and who is behind it. Cybersecurity watchers are monitoring the story as details about the scope of the exposure continue to emerge.

Google says it has disrupted a botnet known as XCPE that infected roughly a million Android devices, many of them cheap TV streaming boxes sold with malware pre-installed or added after sale. The company banned the manufacturer tied to the scheme from its services and Play Store. Security observers are highlighting the risks of low-cost Android hardware shipping with hidden malicious code.

A ransomware attack on UNM Health, the health system of the University of New Mexico, has disrupted patient care and forced the postponement of surgeries. Reports indicate hospital operations have been affected as staff respond to the cyberattack. Cybersecurity watchers are flagging the incident as another example of ransomware's growing impact on healthcare providers and patient safety.

Sony's internet service provider subsidiary has suffered a data breach affecting approximately 2.5 million customer records, according to a report by BleepingComputer. The incident is the latest in a series of security problems for Sony, and details about what data was exposed and how the breach occurred remain limited.

Harvard University suffered a data breach that exposed information belonging to roughly 851,000 accounts, according to a security news report. The incident involves the personal data of students, staff or alumni associated with the university. Cybersecurity observers are flagging the breach as another example of a major academic institution failing to protect sensitive user information, raising concerns about university data security practices.

The FBI has linked the theft of roughly $6.3 billion worth of cryptocurrency from Binance to hackers associated with North Korea. The attribution points to state-sponsored cyber actors known for targeting crypto exchanges to fund the regime. Security watchers are circulating the news, noting it as one of the largest crypto thefts ever attributed to North Korean groups, and reviving debate over exchange security and international cyber sanctions.

A new Android vulnerability dubbed 'SMS of Death' allows attackers to remotely crash phones that have not received security updates, according to a report by BleepingComputer. The exploit works via SMS, meaning targets need only a phone number to be attacked. Security commentators are urging Android users to install the latest patches promptly, and the flaw is drawing attention across cybersecurity discussions.

BTCPay Server has issued a warning that attackers are stealing funds from hot wallets running on outdated instances of its open-source cryptocurrency payment platform. The organization is urging users to update their servers immediately to patch the vulnerability being exploited. Security observers are amplifying the alert across cybersecurity communities.

Chinese-linked hackers have used an AI tool called ARTEX to automate cyberattacks against around 200 organizations, according to a report by BleepingComputer. The campaign shows threat actors increasingly relying on artificial intelligence to scale reconnaissance and intrusion efforts with minimal human involvement. Security teams are being urged to review defenses as AI-driven offensive tooling lowers the cost and skill barrier for large-scale attacks.

The PC game launcher for Goddess of Victory: NIKKE was compromised to distribute remote access and data-stealing malware, security outlet BleepingComputer reports. Players who downloaded the launcher risked having their credentials and personal data harvested by attackers. Gamers and security researchers are warning users to download the game only through official channels and to scan systems for infection.

The University of Copenhagen has suffered a data breach affecting 525,000 people, according to a report by BleepingComputer. Details about what data was exposed, how the breach occurred, and who may be responsible have not yet been fully disclosed. The incident is one of the larger breaches involving a Danish institution, and further information is expected as the university investigates.

The University of Copenhagen has suffered a data breach affecting roughly 525,000 people, according to security coverage of the incident. The breach is being widely shared among privacy and cybersecurity observers, who are flagging it as a significant incident for a major European educational institution and a reminder of the data-security risks facing universities.

A UK multi-academy school estate has been struck by ransomware belonging to the 3AM group, in what security researchers suspect may be one of the first AI-assisted cyberattacks on education infrastructure. Details remain limited, but the incident is drawing attention for its potential use of artificial intelligence in the attack and its impact on schools' operations and data.

BTCPay Server, an open-source Bitcoin payment processor, has warned administrators that attackers are stealing funds from hot wallets on instances running outdated software. The warning, reported by BleepingComputer, urges merchants and node operators to update their servers immediately and secure their wallet keys. The incident highlights ongoing security risks for self-hosted crypto payment infrastructure.

Hardware wallet maker Trezor has issued a warning about a suspected implant designed to steal cryptocurrency from its devices. The alert, reported by BleepingComputer, is raising concerns in the crypto community about supply-chain tampering and the physical security of cold-storage wallets. Users are being urged to check their devices and follow the company's guidance.

Binance says the theft of $6.3 billion in cryptocurrency was traced to a single compromised DevOps laptop, according to reporting by BleepingComputer. The disclosure highlights how one endpoint with privileged access can jeopardize even major crypto exchanges, and security commentators are sharing the story to stress better operational security and access controls across the industry.

Binance says last week's massive crypto theft was carried out after attackers posed as recruiters in a fake job interview, tricking an insider into compromising systems. The exchange disclosed that the scheme led to the loss of roughly $63 billion in cryptocurrency. Security observers are highlighting the incident as an example of social engineering targeting crypto firms.

Attackers have gained access to Microsoft 365 customer environments by exploiting ConnectWise, a widely used remote access and IT management platform, in what is being described as a supply-chain attack. Security teams are being urged to check whether their tenants were exposed and to review access logs. The incident raises fresh concerns about the security of third-party tools used by IT service providers.

A fraudulent crypto app that slipped onto Apple's App Store has been linked to the theft of roughly $23,000 from a user's wallet, according to BleepingComputer. The fake app posed as a legitimate crypto terminal to trick victims into entering their recovery credentials. The case highlights ongoing scrutiny of Apple's app review process and the risks of malicious apps reaching official stores.

The release pipeline of LiteLLM, a popular open-source library for interfacing with large language models, has been compromised to distribute info-stealer malware. Attackers reportedly injected malicious code into official builds, putting developers who downloaded recent releases at risk of credential and data theft. The incident adds to growing concern over software supply chain attacks targeting widely used AI development tools, with security researchers urging users to verify builds and rotate exposed secrets.

Developer platform Northflank suffered a security breach that led to attackers abusing customers' AI API keys, according to a report by BleepingComputer. The incident raises concerns about how cloud and AI infrastructure providers protect credentials, and may have left customers facing unexpected costs or unauthorized model usage. Customers are being warned to rotate keys and review usage logs.

A ransomware attack on UNM Health, the University of New Mexico's health system, has forced the disruption of patient care and led to the postponement of surgeries. Reports indicate hospital operations have been affected as staff work around systems taken offline. The incident adds to a growing list of healthcare providers targeted by ransomware, a trend that has drawn concern from security experts and regulators.

Warp has disclosed a security breach after a third-party vendor in its infrastructure was compromised. The incident exposed AI agent decision logs and user telemetry from its agentic development environment. The disclosure, reported by BleepingComputer, is drawing attention among security researchers discussing the risks of entrusting sensitive operational data to AI coding tools and their vendor supply chains.

Security researchers report that Popcorn Time, the abandoned torrent streaming app, left millions of devices vulnerable to remote code execution attacks. The long-discontinued software is no longer patched, meaning anyone still running it can be exploited by attackers over the network. Cybersecurity outlets are urging users to uninstall the app, and the finding is circulating widely across tech and security communities.