Threatline

Cyber Security News From Around The World

Latest news as of 7/29/2025, 5:27:00 AM

Have I Been Pwned

2 months ago

Fédération Francaise de Rugby - 281,977 breached accounts

In June 2023, . The breach exposed 282k unique email addresses along with names, dates of birth and phone numbers. and stated that the attack primarily affected email servers. The data was provided to HIBP by a source who requested it be attributed to "atix". the Fédération Francaise de Rugby (French Rugby Federation) suffered a data breach and attempted ransom The Federation subsequently published a disclosure notice

Have I Been Pwned

2 months ago

Operation Endgame 2.0 - 15,436,844 breached accounts

In May 2025, in a new phase of "Operation Endgame". This followed , with the latest action resulting in 15.3M victim email addresses being provided to HIBP by law enforcement. A further 43.8M victim passwords were also provided for . a coalition of law enforcement agencies took down the criminal infrastructure behind the malware used to launch ransomware attacks the first Operation Endgame exercise a year earlier HIBP's Pwned Passwords service

Bleeping Computer

2 months ago

ChatGPT Deep Research can now pull data from Dropbox and Box

You can now connect your Box and Dropbox accounts to Deep Research on ChatGPT and pull data, which will be used by the AI to conduct research. [...]

Bleeping Computer

2 months ago

Researchers claim ChatGPT o3 bypassed shutdown in controlled test

A new report claims that OpenAI's o3 model altered a shutdown script to avoid being turned off, even when explicitly instructed to allow shutdown [...]

Bleeping Computer

2 months ago

Fake Zenmap. WinMRT sites target IT staff with Bumblebee malware

The Bumblebee malware SEO poisoning campaign uncovered earlier this week aimpersonating RVTools is using more typosquatting domainsi mimicking other popular open-source projects to infect devices used by IT staff. [...]

Bleeping Computer

2 months ago

Glitch to end app hosting and user profiles on July 8

Glitch has announced it is ending app hosting and user profiles on July 8, 2025, responding to changing market dynamics and extensive abuse problems that have raised operational costs. [...]

The Hacker News

2 months ago

Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware

Cybersecurity researchers have disclosed a malware campaign that uses fake software installers masquerading as popular tools like LetsVPN and QQ Browser to deliver the Winos 4.0 framework. The campaign, first detected by Rapid7 in February 2025, involves the use of a multi-stage, memory-resident loader called Catena. "Catena uses embedded shellcode and configuration switching logic to stage

The Register

2 months ago

Cybercrime is 'orders of magnitude' larger than state-backed ops, says ex-White House advisor

Michael Daniel also thinks Uncle Sam should increase help to orgs hit by ransomware Uncle Sam's cybersecurity apparatus can't only focus on China and other nation-state actors, but also has to fight the much bigger damage from plain old cybercrime, says former White House advisor Michael Daniel. And the Trump administration's steep cuts to federal government staff are making that a lot harder.… INTERVIEW

The Register

2 months ago

Remembering John Young, co-founder of web archive Cryptome

The original leak site that never sold out, never surrendered John Young, the co-founder of the legendary internet archive Cryptome, died at the age of 89 on March 28. talked to friends and peers who gave tribute to a bright, pugnacious man who was devoted to the public's right to know.… Obituary The Register

Bleeping Computer

2 months ago

OpenAI confirms Operator Agent is now more accurate with o3

OpenAI says Operator Agent now uses the o3 model, which means it's now significantly better at reasoning capabilities. [...]