title: " h1 class_ entry-title " url: https://krebsonsecurity.com/2026/02/starkiller-phishing-service-proxies-real-login-pages-mfa/ source: Krebs on Security date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived Most phishing websites are little more than static copies of login pages for popular online destinations, and they are often quickly taken down by anti-abuse activists and security firms. But a stealthy new phishing-as-a-service offering lets customers sidestep both of these pitfalls: It uses cleverly disguised links to load the target brand’s real website, and then acts as a relay between the vic
Title -Year-Old Bug In Activemq Lets Hackers Remotely Exe--
title: " title 13-year-old bug in ActiveMQ lets hackers remotely exe" url: https://www.bleepingcomputer.com/news/security/13-year-old-bug-in-activemq-lets-hackers-remotely-exe source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived Security researchers discovered a remote code execution (RCE) vulnerability in Apache ActiveMQ Classic that has gone undetected for 13 years and could be exploited to execute arbitrary commands.
The flaw was uncovered using the Claude AI assistant, which identified an exploit path by analyzing how independently developed components interact.
Title -Year-Old Bug In Activemq Lets Hackers Remotely Exe--
title: " title 13-year-old bug in ActiveMQ lets hackers remotely exe" url: https://www.bleepingcomputer.com/news/security/13-year-old-bug-in-activemq-lets-hackers-remotely-exe source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived Security researchers discovered a remote code execution (RCE) vulnerability in Apache ActiveMQ Classic that has gone undetected for 13 years and could be exploited to execute arbitrary commands.
The flaw was uncovered using the Claude AI assistant, which identified an exploit path by analyzing how independently developed components interact.
Title -Year-Old Bug In Activemq Lets Hackers Remotely Exe--
title: " title 13-year-old bug in ActiveMQ lets hackers remotely exe" url: https://www.bleepingcomputer.com/news/security/13-year-old-bug-in-activemq-lets-hackers-remotely-exe source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived Security researchers discovered a remote code execution (RCE) vulnerability in Apache ActiveMQ Classic that has gone undetected for 13 years and could be exploited to execute arbitrary commands.
The flaw was uncovered using the Claude AI assistant, which identified an exploit path by analyzing how independently developed components interact.
Title Chatgpt Rolls Out New Pro Subscription To Challe--
title: " title ChatGPT rolls out new _100 Pro subscription to challe" url: https://www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-rolls-out-new-100-pro-subscrip source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived OpenAI has rolled out a new Pro subscription that costs $100 and is in line with Claude’s pricing, which also has a $100 subscription, in addition to the $200 Max monthly plan.
Until now, OpenAI has offered three subscription tiers.
First is Go, which costs approx $8, second is Plus for $20, and then the final tier is at $200, a jump of $180.
Title Chatgpt Rolls Out New Pro Subscription To Challe--
title: " title ChatGPT rolls out new _100 Pro subscription to challe" url: https://www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-rolls-out-new-100-pro-subscrip source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived OpenAI has rolled out a new Pro subscription that costs $100 and is in line with Claude’s pricing, which also has a $100 subscription, in addition to the $200 Max monthly plan.
Until now, OpenAI has offered three subscription tiers.
First is Go, which costs approx $8, second is Plus for $20, and then the final tier is at $200, a jump of $180.
Title Chatgpt Rolls Out New Pro Subscription To Challe--
title: " title ChatGPT rolls out new _100 Pro subscription to challe" url: https://www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-rolls-out-new-100-pro-subscrip source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived OpenAI has rolled out a new Pro subscription that costs $100 and is in line with Claude’s pricing, which also has a $100 subscription, in addition to the $200 Max monthly plan.
Until now, OpenAI has offered three subscription tiers.
First is Go, which costs approx $8, second is Plus for $20, and then the final tier is at $200, a jump of $180.
Title Hackers Use Pixel-Large Svg Trick To Hide Credit Card--
title: " title Hackers use pixel-large SVG trick to hide credit card" url: https://www.bleepingcomputer.com/news/security/hackers-use-pixel-large-svg-trick-to-hide-credit-card source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived A massive campaign impacting nearly 100 online stores using the Magento e-commerce platform hides credit card-stealing code in a pixel-sized Scalable Vector Graphics (SVG) image.
When clicking the checkout button, the victim is shown a convincing overlay that can validate card details and billing data.
Title Hackers Use Pixel-Large Svg Trick To Hide Credit Card--
title: " title Hackers use pixel-large SVG trick to hide credit card" url: https://www.bleepingcomputer.com/news/security/hackers-use-pixel-large-svg-trick-to-hide-credit-card source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived A massive campaign impacting nearly 100 online stores using the Magento e-commerce platform hides credit card-stealing code in a pixel-sized Scalable Vector Graphics (SVG) image.
When clicking the checkout button, the victim is shown a convincing overlay that can validate card details and billing data.
Title Hackers Use Pixel-Large Svg Trick To Hide Credit Card--
title: " title Hackers use pixel-large SVG trick to hide credit card" url: https://www.bleepingcomputer.com/news/security/hackers-use-pixel-large-svg-trick-to-hide-credit-card source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived A massive campaign impacting nearly 100 online stores using the Magento e-commerce platform hides credit card-stealing code in a pixel-sized Scalable Vector Graphics (SVG) image.
When clicking the checkout button, the victim is shown a convincing overlay that can validate card details and billing data.
Title Microsoft Rolls Out Fix For Broken Windows Start Menu--
title: " title Microsoft rolls out fix for broken Windows Start Menu" url: https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-fix-for-broken-windows-start-men source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived Microsoft has pushed a server-side fix for a known issue that broke the Windows Start Menu search feature on some Windows 11 23H2 devices.
In a Windows release health update (WI1273488) seen by BleepingComputer, Microsoft said these problems have affected only a small number of users since April 6 and are caused by a server-side Bing update aimed at improving search performance.
Title Microsoft Rolls Out Fix For Broken Windows Start Menu--
title: " title Microsoft rolls out fix for broken Windows Start Menu" url: https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-fix-for-broken-windows-start-men source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived Microsoft has pushed a server-side fix for a known issue that broke the Windows Start Menu search feature on some Windows 11 23H2 devices.
In a Windows release health update (WI1273488) seen by BleepingComputer, Microsoft said these problems have affected only a small number of users since April 6 and are caused by a server-side Bing update aimed at improving search performance.
Title Microsoft Rolls Out Fix For Broken Windows Start Menu--
title: " title Microsoft rolls out fix for broken Windows Start Menu" url: https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-fix-for-broken-windows-start-men source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived Microsoft has pushed a server-side fix for a known issue that broke the Windows Start Menu search feature on some Windows 11 23H2 devices.
In a Windows release health update (WI1273488) seen by BleepingComputer, Microsoft said these problems have affected only a small number of users since April 6 and are caused by a server-side Bing update aimed at improving search performance.
Title Nearly Us Industrial Devices Exposed To Iranian--
title: " title Nearly 4_000 US industrial devices exposed to Iranian" url: https://www.bleepingcomputer.com/news/security/nearly-4-000-us-industrial-devices-exposed-to-iranian source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived The attack surface targeted by Iranian-linked hackers in cyberattacks against U.S. critical infrastructure networks includes thousands of Internet-exposed programmable logic controllers (PLCs) manufactured by Rockwell Automation.
According to a joint advisory issued by multiple U.S. federal agencies on Tuesday, Iranian state-backed hacking groups have been targeting Rockwell Automation/Allen-Bradley PLC devices since March 2026, causing operational disruptions and financial losses.
Title Nearly Us Industrial Devices Exposed To Iranian--
title: " title Nearly 4_000 US industrial devices exposed to Iranian" url: https://www.bleepingcomputer.com/news/security/nearly-4-000-us-industrial-devices-exposed-to-iranian source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived The attack surface targeted by Iranian-linked hackers in cyberattacks against U.S. critical infrastructure networks includes thousands of Internet-exposed programmable logic controllers (PLCs) manufactured by Rockwell Automation.
According to a joint advisory issued by multiple U.S. federal agencies on Tuesday, Iranian state-backed hacking groups have been targeting Rockwell Automation/Allen-Bradley PLC devices since March 2026, causing operational disruptions and financial losses.
Title Nearly Us Industrial Devices Exposed To Iranian--
title: " title Nearly 4_000 US industrial devices exposed to Iranian" url: https://www.bleepingcomputer.com/news/security/nearly-4-000-us-industrial-devices-exposed-to-iranian source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived The attack surface targeted by Iranian-linked hackers in cyberattacks against U.S. critical infrastructure networks includes thousands of Internet-exposed programmable logic controllers (PLCs) manufactured by Rockwell Automation.
According to a joint advisory issued by multiple U.S. federal agencies on Tuesday, Iranian state-backed hacking groups have been targeting Rockwell Automation/Allen-Bradley PLC devices since March 2026, causing operational disruptions and financial losses.
Title New Macos Stealer Campaign Uses Script Editor In Clic--
title: " title New macOS stealer campaign uses Script Editor in Clic" url: https://www.bleepingcomputer.com/news/security/new-macos-stealer-campaign-uses-script-editor-in-clic source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived A new campaign delivering the Atomic Stealer malware to macOS users abuses the Script Editor in a variation of the ClickFix attack that tricked users into executing commands in Terminal.
Script Editor is a built-in macOS application for writing and running scripts, primarily AppleScript and JXA, that can execute local scripts and shell commands. It is a trusted application pre-installed on macOS systems.
Title New Macos Stealer Campaign Uses Script Editor In Clic--
title: " title New macOS stealer campaign uses Script Editor in Clic" url: https://www.bleepingcomputer.com/news/security/new-macos-stealer-campaign-uses-script-editor-in-clic source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived A new campaign delivering the Atomic Stealer malware to macOS users abuses the Script Editor in a variation of the ClickFix attack that tricked users into executing commands in Terminal.
Script Editor is a built-in macOS application for writing and running scripts, primarily AppleScript and JXA, that can execute local scripts and shell commands. It is a trusted application pre-installed on macOS systems.
Title New Macos Stealer Campaign Uses Script Editor In Clic--
title: " title New macOS stealer campaign uses Script Editor in Clic" url: https://www.bleepingcomputer.com/news/security/new-macos-stealer-campaign-uses-script-editor-in-clic source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived A new campaign delivering the Atomic Stealer malware to macOS users abuses the Script Editor in a variation of the ClickFix attack that tricked users into executing commands in Terminal.
Script Editor is a built-in macOS application for writing and running scripts, primarily AppleScript and JXA, that can execute local scripts and shell commands. It is a trusted application pre-installed on macOS systems.
title: " title News in the CryptoCurrency category " url: https://www.bleepingcomputer.com/news/cryptocurrency/ source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived 13-year-old bug in ActiveMQ lets hackers remotely execute commands
New macOS stealer campaign uses Script Editor in ClickFix attack
Microsoft rolls out fix for broken Windows Start Menu search
Hackers use pixel-large SVG trick to hide credit card stealer
Over 20,000 crypto fraud victims identified in international crackdown
title: " title News in the Security category " url: https://www.bleepingcomputer.com/news/security/ source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived 13-year-old bug in ActiveMQ lets hackers remotely execute commands
New macOS stealer campaign uses Script Editor in ClickFix attack
Microsoft rolls out fix for broken Windows Start Menu search
Hackers use pixel-large SVG trick to hide credit card stealer
Over 20,000 crypto fraud victims identified in international crackdown
Title Over Crypto Fraud Victims Identified In Intern--
title: " title Over 20_000 crypto fraud victims identified in intern" url: https://www.bleepingcomputer.com/news/security/police-identifies-20-000-victims-in-international-cry source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived An international law enforcement action led by the U.K.’s National Crime Agency (NCA) has identified over 20,000 victims of cryptocurrency fraud across Canada, the United Kingdom, and the United States.
Dubbed “Operation Atlantic,” this joint action took place last month, and it involved the NCA, the U.S. Secret Service, the Ontario Provincial Police, the Ontario Securities Commission, and multiple private industry partners.
Title Over Crypto Fraud Victims Identified In Intern--
title: " title Over 20_000 crypto fraud victims identified in intern" url: https://www.bleepingcomputer.com/news/security/police-identifies-20-000-victims-in-international-cry source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived An international law enforcement action led by the U.K.’s National Crime Agency (NCA) has identified over 20,000 victims of cryptocurrency fraud across Canada, the United Kingdom, and the United States.
Dubbed “Operation Atlantic,” this joint action took place last month, and it involved the NCA, the U.S. Secret Service, the Ontario Provincial Police, the Ontario Securities Commission, and multiple private industry partners.
Title Over Crypto Fraud Victims Identified In Intern--
title: " title Over 20_000 crypto fraud victims identified in intern" url: https://www.bleepingcomputer.com/news/security/police-identifies-20-000-victims-in-international-cry source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived An international law enforcement action led by the U.K.’s National Crime Agency (NCA) has identified over 20,000 victims of cryptocurrency fraud across Canada, the United Kingdom, and the United States.
Dubbed “Operation Atlantic,” this joint action took place last month, and it involved the NCA, the U.S. Secret Service, the Ontario Provincial Police, the Ontario Securities Commission, and multiple private industry partners.
Title Over Crypto Fraud Victims Identified In Intern--
title: " title Over 20_000 crypto fraud victims identified in intern" url: https://www.bleepingcomputer.com/news/security/police-identifies-20-000-victims-in-international-cry source: BleepingComputer date: 2026-04-11 tags: ["#cybersecurity", “#investigative-reporting”]
ingested: 2026-04-11 15:23 status: archived An international law enforcement action led by the U.K.’s National Crime Agency (NCA) has identified over 20,000 victims of cryptocurrency fraud across Canada, the United Kingdom, and the United States.
Dubbed “Operation Atlantic,” this joint action took place last month, and it involved the NCA, the U.S. Secret Service, the Ontario Provincial Police, the Ontario Securities Commission, and multiple private industry partners.