Bill Toulas

Articles by Bill Toulas

Critical jsPDF flaw lets hackers steal secrets via generated PDFs - BleepingComputer

Technology January 9, 2026

The jsPDF library for generating PDF documents in JavaScript applications is vulnerable to a critical vulnerability that allows an attacker to steal sensitive data from the local filesystem by includοΏ½...

New GoBruteforcer attack wave targets crypto, blockchain projects

Crypto January 8, 2026

A new wave of GoBruteforcer botnet malware attacks is targetingΒ databases of cryptocurrency and blockchain projectsΒ on exposed servers believed to be configured using AI-generated examples. GoBrutf...

Cloud file-sharing sites targeted for corporate data theft attacks

Crypto January 6, 2026

A threat actor known as Zestix hasΒ been offering to sell corporate data stolen from dozens of companies likely after breaching their ShareFile, Nextcloud, and OwnCloud instances. According to cyberc...

ClickFix attack uses fake Windows BSOD screens to push malware

Crypto January 6, 2026

A new ClickFix social engineering campaign is targeting the hospitality sector in Europe, using fake Windows Blue Screen of Death (BSOD) screens to trick users into manually compiling and executing mοΏ½...

Ledger customers impacted by third-party Global-e data breach

Crypto January 6, 2026

Ledger is informing some customers that their personal data has been exposed after hackers breached the systems of third-party payment processorΒ Global-e. In a statement for BleepingComputer, theΒ b...

New GlassWorm malware wave targets Macs with trojanized crypto wallets

Crypto January 2, 2026

A fourth wave of theΒ "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver trojanized versions of crypto wallet applications. Extensions in the Ope...

Hackers drain $3.9M from Unleash Protocol after multisig hijack

Crypto January 1, 2026

The decentralized intellectual property platform Unleash Protocol has lost around $3.9 millionΒ worth of cryptocurrency after someone executed an unauthorized contract upgrade that allowed asset withd...

Hacker arrested for KMSAuto malware campaign with 2.8 million downloads

Crypto December 30, 2025

A Lithuanian national has been arrested for his alleged involvement in infecting 2.8 million systems with clipboard-stealing malware disguised as the KMSAuto tool for illegally activating Windows andοΏ½...

Microsoft rolls out hardware-accelerated BitLocker in Windows 11

Crypto December 24, 2025

Microsoft is rolling out hardware-accelerated BitLocker in Windows 11 to address growing performance and security concerns by leveraging the capabilities of system-on-a-chip and CPU. BitLocker is thοΏ½...

WebRAT malware spread via fake vulnerability exploits on GitHub

Crypto December 24, 2025

The WebRAT malware is now being distributed through GitHub repositories that claim to host proof-of-conceptΒ exploits for recently disclosed vulnerabilities. Previously spread through pirated softwar...