BleepingComputer

Sextortion scammers are using email addresses from ShinyHunters data leaks to craft threatening emails demanding $2,000 in Bitcoin, falsely claiming to have recorded victims via webcam. The scammers impersonate ShinyHunters, but the group denies involvement, and no evidence supports the claims. Data breaches from companies like Amtrak, Hallmark, and ADT are being exploited in the campaign.

A security researcher reported a critical Azure vulnerability to Microsoft, but the company rejected the report and did not issue a CVE. The researcher claims that Microsoft quietly fixed the vulnerability despite rejecting the report. Microsoft disputes this claim, stating that the behavior was expected and no product changes were made.

NVIDIA has confirmed a data breach affecting GeForce NOW users, specifically those in Armenia, resulting in exposed user information. The breach was reported to BleepingComputer. NVIDIA issued a statement acknowledging the incident.

BleepingComputer retracted an article about a new data breach at Instructure after determining the information was incorrect and based on outdated details from a prior incident. The publication apologized for the error.

BleepingComputer will host a webinar on April 30 at 2:00 PM ET with Flare and Tammy Harper to discuss identifying early warning signs of cyberattacks before they escalate. The session aims to help security teams proactively detect threats.

Microsoft released critical security patches addressing 167 vulnerabilities, including zero-day flaws in SharePoint Server and Windows Defender. Other vendors like Google and Adobe also issued updates for active exploits, with experts highlighting the significance of these vulnerabilities and the surge in reported bugs.