Hackers arrested over €30M bank fraud exploiting service provider flaw

BleepingComputer security feed reporting active exploitation of critical vulnerabilities, ransomware and data theft, cloud and identity attacks, spyware targeting, financial fraud, and major third-party data breaches. Notable items include exploitation of VMware vCenter Syslog Server CVE-2026-59310 for reverse SSH persistence, a maximum-severity SAP Commerce Cloud RCE under attack, exploitation of a macOS Screen Sharing authentication bypass to deploy Monero miners, Akira affiliates disabling EDR via Safe Mode, and Windows LegacyHive zero-day patching. The feed also documents Clop and ShinyHun