"'123456' password exposed info for 64 million McDonald's job applicants."
Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents. Accessed on 11 July 2025, 2045 UTC.
Content and Source: "BleepingComputer.com."
URL-- https://www.bleepingcomputer.com/
Please check URL or scroll down to read your selections. Thanks for joining us today.
Russ Roberts (https://www.hawaiicybersecurityjournal.net).
'123456' password exposed info for 64 million McDonald’s job applicants
Cybersecurity researchers discovered a vulnerability in McHire, McDonald's chatbot job application platform, that exposed the personal information of more than 64 million job applicants across the United States.
- July 11, 2025
- 04:26 PM
0
Exploits for pre-auth Fortinet FortiWeb RCE flaw released, patch now
Proof-of-concept exploits have been released for a critical SQLi vulnerability in Fortinet FortiWeb that can be used to achieve pre-authenticated remote code execution on vulnerable servers.
- July 11, 2025
- 03:41 PM
- 0
How Black Rifle Coffee slashed offboarding from weeks to minutes
Manual IAM processes slow down IT and introduce risk.
In this webinar, see how Black Rifle Coffee leverages automation to reduce offboarding time from weeks to minutes, save 120 hours of analyst time, and strengthen their security posture - all without adding headcount.
WordPress Gravity Forms developer hacked to push backdoored plugins
The popular WordPress plugin Gravity Forms has been compromised in what seems a supply-chain attack where manual installers from the official website were infected with a backdoor.
- July 11, 2025
- 03:30 PM
- 0
NVIDIA shares guidance to defend GDDR6 GPUs against Rowhammer attacks
NVIDIA is warning users to activate System Level Error-Correcting Code mitigation to protect against Rowhammer attacks on graphical processors with GDDR6 memory.
- July 11, 2025
- 11:39 AM
- 0
The zero-day that could've compromised every Cursor and Windsurf user
Learn how one overlooked flaw in OpenVSX discovered by Koi Secureity could've let attackers hijack millions of dev machines via an extension supply chain attack. The zero-day threat's been patched—but the wake-up call is clear: extensions are a new, massive supply chain risk.
- July 11, 2025
- 11:03 AM
- 0
CISA tags Citrix Bleed 2 as exploited, gives agencies a day to patch
The U.S. Cybersecurity & Infrastructure Security Agency has confirmed active exploitation of the CitrixBleed 2 vulnerability (CVE-2025-5777) in Citrix NetScaler ADC and Gateway and is giving federal agencies one day to apply fixes.
- July 11, 2025
- 10:45 AM
- 0
Combine tablet and laptop with this refurbished Lenovo Chromebook deal
As our work needs and leisure time become more complex, we find ourselves needing more machines. This refurbished 2-in-1 Lenovo 300e Chromebook helps you cut the clutter in your travel bag while giving you both a lightweight laptop and handy tablet.
- July 11, 2025
- 07:12 AM
- 0
Windows 11 now uses JScript9Legacy engine for improved security
Microsoft announced that it has replaced the default scripting engine JScript with the newer and more secure JScript9Legacy on Windows 11 version 24H2 and later.
- July 10, 2025
- 04:46 PM
- 0
Secure 2TB of FileJump cloud storage forever — just $69.97 in this deal
FileJump is a secure, no-subscription cloud storage platform offering 2TB of lifetime space for a one-time payment of $69.97 (reg. $467). That's it. No monthly bills. No creeping price hikes. Just a reliable digital space forever.
- July 10, 2025
- 02:10 PM
- 0
Russian pro basketball player arrested for alleged role in ransomware attacks
Russian professional basketball player Daniil Kasatkin was arrested in France at the request of the United States for allegedly acting as a negotiator for a ransomware gang.
- July 10, 2025
- 12:26 PM
- 1
PerfektBlue Bluetooth flaws impact Mercedes, Volkswagen, Skoda cars
Four vulnerabilities dubbed PerfektBlue and affecting the BlueSDK Bluetooth stack from OpenSynergy can be exploited to achieve remote code execution and potentially allow access to critical elements in vehicles from multiple vendors, including Mercedes-Benz AG, Volkswagen, and Skoda.
- July 10, 2025
- 12:01 PM
- 0
FBI's CJIS demystified: Best practices for passwords, MFA & access control
FBI's Criminal Justice Information Services (CJIS) compliance isn't optional when handling law enforcement data. From MFA to password hygiene, see how Specops Software helps meet FBI standards while also securing your Windows Active Directory.
- July 10, 2025
- 10:02 AM
- 0
Four arrested in UK over M&S, Co-op, Harrods cyberattacks
The UK's National Crime Agency (NCA) arrested four people suspected of being involved in cyberattacks on major retailers in the country, including Marks & Spencer, Co-op, and Harrods.
- July 10, 2025
- 09:46 AM
- 0
This PDF editor for Mac is just $80 for life in this deal
PDF Expert is a fast PDF editor made just for macOS. And right now, you can grab a lifetime subscription to the Premium Plan for just $79.97 (reg. $139.99) — no subscriptions, no strings, and no recurring fees.
- July 10, 2025
- 07:12 AM
- 0
Microsoft Authenticator on iOS moves backups fully to iCloud
Microsoft is rolling out a new backup system in September for its Authenticator app on iOS, removing the requirement to use a Microsoft personal account to back up TOTP secrets and account names.
- July 09, 2025
- 06:37 PM
- 0
Microsoft confirms Windows Server Update Services (WSUS) sync is broken
Microsoft has confirmed a widespread issue in Windows Server Update Services (WSUS) that prevents organizations from syncing with Microsoft Update and deploying the latest Windows updates.
- July 09, 2025
- 04:58 PM
- 0
Qantas confirms data breach impacts 5.7 million customers
Australian airline Qantas has confirmed that 5.7 million people have been impacted by a recent data breach, in which threat actors stole customers' data.
- July 09, 2025
- 04:14 PM
- 0
Google reveals details on Android’s Advanced Protection for Chrome
Google is sharing more information on how Chrome operates when Android mobile users enable Advanced Protection, highlighting strong security improvements.
- July 09, 2025
- 03:31 PM
- 3
Get protection suite for all your gear with Mcafee AV deal
If you're online, then you're in need of tools to keep the worst away while surfing and using the web. This McAfee Total Protection one-year subscription deal gives you all the tools you need for up to five of your devices.
- July 09, 2025
- 02:10 PM
- 0
Bitcoin Depot breach exposes data of nearly 27,000 crypto users
Bitcoin Depot, an operator of Bitcoin ATMs, is notifying customers of a data breach incident that has exposed their sensitive information.
- July 09, 2025
- 01:33 PM
- 0
Comments
Post a Comment
Please leave a comment about our recent post.