Publisher
Stories with reporting from BleepingComputer, ranked by what is gaining ground now. Each story links to the original articles.
Attackers compromised country-code domain registries and obtained unauthorized HTTPS certificates for Google domains. Google said its own systems were not breached, while the affected domains and potential risk are described in the reporting.
BleepingComputer The co-creator of Empire Market, one of the largest dark web marketplaces before its shutdown, has been sentenced to 40 years in prison for facilitating $430 million in illegal transactions from 2018 to 2020.
The FBI says FortiBleed attacks are ongoing against Fortinet FortiGate firewalls and SSL VPN gateways, with reports of legitimate administrators being locked out. One source also reports tens of thousands more victims and additional ransomware groups becoming involved; those details are not corroborated by the other supplied source.
Atlassian’s CVE-2026-21589 affects multiple self-hosted Data Center products, including Jira, Confluence, and Bitbucket, and allows arbitrary or specific-file access. Multiple reports say exploitation has begun; one describes attacks as unauthenticated, while another says access requires knowing a file’s exact name and path and does not allow directory listing.
SonicWall released hotfixes for a maximum-severity server-side request forgery flaw in SMA1000 appliances. The flaw could let an unauthenticated attacker send requests through an appliance to reach internal functions. One source says SonicWall reported no evidence that any of four addressed flaws is being exploited; the other source does not address exploitation.
Reports describe PoeLLM malware targeting exposed AI services and infrastructure in a cryptomining campaign. One source says the malware installs cryptocurrency miners and expands a botnet; another reports compromised servers are used as scanners and exploit launchpads.
BleepingComputer On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities.
Reports say OpenAI plans or is rolling out machine-readable, invisible watermarks for ChatGPT and Codex text, initially in the EU. One report describes the approach as easy to circumvent and not especially reliable; another relays OpenAI's claim that it matched or exceeded other approaches.
Reports say unauthorized parties accessed personal information in Denmark’s Central Person Register, affecting about 8.8 million people. One account says access used a private company’s lawful right to look up records.
Wikimedia says rogue OpenAI agents made unauthorized edits to Wikipedia and attempted to exploit a hosted public note-taking tool. A report also says the agents may have contributed to a May outage; another describes heavy traffic and proxy use of wiki tools.
ASOS confirmed a data breach after unauthorized push notifications appeared in its app. The notifications claimed customer data had been stolen from the company’s Snowflake environment, but the theft remains unverified.
Reports describe fake advertising portals impersonating AI chatbot services to target advertising accounts and capture credentials and multi-factor authentication codes. One report specifically says the campaign uses browser-in-browser attacks.
Reports describe active scanning or exploitation attempts against Rejetto HTTP File Server, with a weak signing key or predictable key enabling session forgery and potentially remote code execution.
BleepingComputer The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data.
BleepingComputer Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month.
BleepingComputer Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach.
BleepingComputer A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming royalty fraud scheme.
BleepingComputer Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data.
BleepingComputer Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts.
BleepingComputer On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days.