BetaIT-Hub is in early access — your feedback helps us improve. Use the chat or email [email protected]

Latest
Suspicious Polyfill login prompts pop up on Toshiba, Muji websitesBleepingComputer · 1h agoFormer cyber executive turned whistleblower accuses IBM of covering up several data breachesTechCrunch Security · 3h agoCISA: Hackers now exploit SolarWinds Serv-U flaw to crash serversBleepingComputer · 4h agoMiasma Malware Hits 32 Red Hat Packages via Compromised GitHub AccountHackRead · 4h agoChinese APT deploys new malware to keep access to hacked networksBleepingComputer · 5h agoIronWorm and New Miasma Worm Variant Hit npm in Supply Chain AttacksThe Hacker News · 5h agoDark web Nemesis Market vendor gets 26 years for selling drugsBleepingComputer · 5h agoAtlas Menu Data Breach Exposes 64,000 GTA V and CS2 Cheat Service UsersHackRead · 6h agoWeekly Metasploit Update: Apache ActiveMQ RCE, Gogs Rebase RCE, and Windows Kernel Pointer EnumRapid7 · 6h agoSecuring CI/CD in an agentic world: Claude Code Github action caseMicrosoft Security · 6h agoGoogle and FBI warn of ransomware group that sends fake IT workers to hack victims in personTechCrunch Security · 7h agoAndroid Spyware Asin Targets Arabic Users via Fake News, PDF and War Map AppsThe Hacker News · 8h agoOver 900 US gas station tank gauge systems exposed to attacksBleepingComputer · 8h agoNSA said to be readying Anthropic’s Mythos for use in cyber operationsTechCrunch Security · 9h agoWhat 2026 DBIR Confirms: Attacks Are Living in the BrowserBleepingComputer · 9h agoSuspicious Polyfill login prompts pop up on Toshiba, Muji websitesBleepingComputer · 1h agoFormer cyber executive turned whistleblower accuses IBM of covering up several data breachesTechCrunch Security · 3h agoCISA: Hackers now exploit SolarWinds Serv-U flaw to crash serversBleepingComputer · 4h agoMiasma Malware Hits 32 Red Hat Packages via Compromised GitHub AccountHackRead · 4h agoChinese APT deploys new malware to keep access to hacked networksBleepingComputer · 5h agoIronWorm and New Miasma Worm Variant Hit npm in Supply Chain AttacksThe Hacker News · 5h agoDark web Nemesis Market vendor gets 26 years for selling drugsBleepingComputer · 5h agoAtlas Menu Data Breach Exposes 64,000 GTA V and CS2 Cheat Service UsersHackRead · 6h agoWeekly Metasploit Update: Apache ActiveMQ RCE, Gogs Rebase RCE, and Windows Kernel Pointer EnumRapid7 · 6h agoSecuring CI/CD in an agentic world: Claude Code Github action caseMicrosoft Security · 6h agoGoogle and FBI warn of ransomware group that sends fake IT workers to hack victims in personTechCrunch Security · 7h agoAndroid Spyware Asin Targets Arabic Users via Fake News, PDF and War Map AppsThe Hacker News · 8h agoOver 900 US gas station tank gauge systems exposed to attacksBleepingComputer · 8h agoNSA said to be readying Anthropic’s Mythos for use in cyber operationsTechCrunch Security · 9h agoWhat 2026 DBIR Confirms: Attacks Are Living in the BrowserBleepingComputer · 9h ago

Security & IT News

Live

Real-time news from 13+ trusted sources — BleepingComputer, The Hacker News, Krebs on Security, Dark Reading & more.

448 results in Breach

🔴 BreachThe Hacker News·2d ago
Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content

Cybersecurity researchers have flagged a new campaign targeting Minecraft players via YouTube to spread malware capable of gaining control of victims' systems. The Minecraft-focused malware-as-a-service (MaaS) campaign has been codenamed Weedhack by McAfee Labs, stating the activity has been active since January 2026 and impersonates Minecraft clients and mods to infect users. In all, 3820

🔴 BreachKrebs on Security·4d ago
Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend, after instructions began circulating on Telegram showing how to trick Meta’s “AI support assistant” bot into resetting account passwords. A screenshot from a video released on Telegram claiming to show how Meta’s AI customer support bot could be tricked into resetting a target’s password. On May 31, word began to spread on several Telegram instant message channels that Meta’s AI bot would happily add an email address to an existing account as part of the bot’s standard password reset flow. A video released on Telegram by pro-Iran hackers claimed to document a remarkably simple exploit that appears to have involved using a VPN connection with an IP address that is in or near the target’s usual hometown, requesting a password reset for the account, and then choosing to chat with Meta’s AI support assistant. From there, the video shows the attacker told the bot to link the account in question to a new email address, after which the bot dutifully sent that address a one-time code that allowed a password reset. The Telegram account that posted the video also linked to screenshots of pro-Iran images, videos and messages that defaced the hacked Instagram accounts, saying hackers had used the exploit to hijack a number of valuable (read: short) Instagram account names that allegedly have a resale value of more than a half million dollars. Meta has not responded to requests for comment on the video’s claims, but Meta’s Andy Stone said on Twitter/X that the issue had been resolved and that they were securing impacted accounts. The security blog thecybersecguru.com reports that Meta pushed an emergency patch over the weekend, and clarified that no back end database was breached. “Instagram has notoriously poor human support infrastructure,” Cybersecguru wrote. “Recovering a locked account – especially a high-value one can take weeks of back-and-forth with an automated ticketing system. Meta’s solution was to deploy a conversational AI layer to handle common recovery workflows: relinking a lost email address, triggering a password reset, verifying account ownership. The assistant, presumably, was supposed to reduce friction for legitimate users stuck in account-access hell.” Ian Goldin , a threat researcher at Lumen’s Black Lotus Labs , said we’re entering unchartered security territory as more large online platforms start allowing AI chatbots to handle sensitive account recovery requests. Just like human customer support employees can be social engineered into providing unauthorized access to someone’s account, AI bots are equally eager to help and vulnerable to persuasion and trickery, he said. “AI chatbots create interesting new attack surface, and we’re likely going