Bill Toulas

Articles by Bill Toulas

Hackers exploit file upload bug in Breeze Cache WordPress plugin - BleepingComputer

Technology April 25, 2026

Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without authentication. The security issue is tr�...

ZeroDayRAT malware grants full access to Android, iOS devices

Crypto February 11, 2026

A new commercial mobile spyware platform dubbed ZeroDayRAT is being advertised to cybercriminals on Telegram as a tool that provides full remote control over compromised Android and iOS devices. The�...

Step Finance says compromised execs' devices led to $40M crypto theft

Crypto February 5, 2026

Step Finance announced that it lost $40 million worth of digital assets after hackers compromised devices belonging to the company's team of executives. The platform detected the breach on January 3�...

New GlassWorm attack targets macOS via compromised OpenVSX extensions

Crypto February 4, 2026

A new GlassWorm malware attack through compromised OpenVSX extensions focuses on stealing passwords, crypto-wallet data, and developer credentials and configurations from macOS systems. The threat a...

Russian hackers exploit recently patched Microsoft Office bug in attacks - BleepingComputer

Technology February 4, 2026

Ukraine’s Computer Emergency Response Team (CERT) says that Russian hackers are exploiting CVE-2026-21509, a recently patched vulnerability in multiple versions of Microsoft Office. On January 26,...

Malicious MoltBot skills used to push password-stealing malware

Crypto February 3, 2026

More than 230 malicious packages for the personal AI assistant OpenClaw (formerly known as Moltbot and ClawdBot) have been published in less than a week on the tool’s official registry and on GitHu...

Exposed MongoDB instances still targeted in data extortion attacks

Crypto February 2, 2026

A threat actor is targeting exposed MongoDB instances in automated data extortion attacks demanding low ransoms from owners to restore the data. The attacker focuses on the low-hanging fruit, databa�...

Operation Switch Off dismantles major pirate TV streaming services

Crypto January 31, 2026

The latest phase of the global law enforcement action resulted in seizing three industrial-scale illegal IPTV services. The operation, coordinated by Europol, Eurojust, and Interpol, was led by Ital�...

Crypto wallets received a record $158 billion in illicit funds last year

Crypto January 31, 2026

Illegal cryptocurrency flows reached a record $158 billion in 2025, reversing a three-year trend of declining amounts from $86B in 2021 to $64B in 2024. This sharp 145% increase is being reported by...

Match Group breach exposes data from Hinge, Tinder, OkCupid, and Match

Crypto January 31, 2026

Match Group, the owner of multiple popular online dating services, Tinder, Match.com, Meetic, OkCupid, and Hinge, confirmed a cybersecurity incident that compromised user data. The company stated th�...