Jeff Whitehead (@Whitehead4Jeff) header
Jeff Whitehead (@Whitehead4Jeff) profile picture

Jeff Whitehead

@Whitehead4Jeff

Head Gardener

 Newbury, UK
Joined April 2016
  • Tweets35.8K
  • Following129
  • Followers191
40Media
Photo by Jeff Whitehead (@Whitehead4Jeff)Photo by Jeff Whitehead (@Whitehead4Jeff)Photo by Jeff Whitehead (@Whitehead4Jeff)Photo by Jeff Whitehead (@Whitehead4Jeff)Photo by Jeff Whitehead (@Whitehead4Jeff)Photo by Jeff Whitehead (@Whitehead4Jeff)Photo by Jeff Whitehead (@Whitehead4Jeff)Photo by Jeff Whitehead (@Whitehead4Jeff)Photo by Jeff Whitehead (@Whitehead4Jeff)Photo by Jeff Whitehead (@Whitehead4Jeff)
ShinyHunters Extorted Boeing Spin-off Prior to Arrests krebsonsecurity.com/2026/10/…
1
9
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away securityaffairs.com/200558/c…
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away

FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away

FBI and Secret Service warn FortiBleed, a credential-harvesting campaign against Fortinet firewalls, has compromised 86,644 devices.

securityaffairs.com
6
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes malwarebytes.com/blog/threat… via @Malwarebytes
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes

AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes

BlueKit puts account-hijacking tools in more criminals’ hands, making it easier to target you with convincing fake login pages and scam messages.

malwarebytes.com
8
Jeff Whitehead retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputerOct 7
PoeLLM malware infects exposed AI servers in cryptomining attacks bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
PoeLLM malware infects exposed AI servers in cryptomining attacks

PoeLLM malware infects exposed AI servers in cryptomining attacks

A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads.

bleepingcomputer.com
4
18
2
35
8,551
FBI Drops Accenture Contractor After Sensitive Data Breach - securityaffairs.com/200468/d…
FBI Drops Accenture Contractor After Sensitive Data Breach

FBI Drops Accenture Contractor After Sensitive Data Breach

Accenture lost an FBI contract after a missed security patch exposed sensitive employee data, raising serious concerns over op security.

securityaffairs.com
16
Jeff Whitehead retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputerOct 6
Nikkei discloses breaches of employees’ Microsoft, Google email accounts bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails.

bleepingcomputer.com
3
8
20
8,739
Microsoft is toughening up Outlook security by blocking .msix and .msixbundle attachments betanews.com/article/microso…
Microsoft is toughening up Outlook security by blocking .msix and .msixbundle attachments - BetaNews

Microsoft is toughening up Outlook security by blocking .msix and .msixbundle attachments - BetaNews

There are various file types which can be abused by threat actors if sent as email attachment. Because of these risks, there are blocks on sending such files

betanews.com
6
Jeff Whitehead retweeted
SecurityWeek (@SecurityWeek) profile picture
SecurityWeek
@SecurityWeekOct 6
Long-Running NPM Malware Campaign Accumulates 40,000 Downloads securityweek.com/long-runnin…
Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign.

securityweek.com
1
10
12
3,342
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan thehackernews.com/2026/10/li… via @TheHackersNews

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting South Korea and Taiwan disguise processes and traffic as trusted email services to evade detection.

thehackernews.com
6
Facebook Marketplace scam uses your name and number malwarebytes.com/blog/threat… via @Malwarebytes
Facebook Marketplace scam uses your name and number

Facebook Marketplace scam uses your name and number

A fabricated screenshot of a Facebook Marketplace listing sent as a text message asking "is this still available" is a conversation lure

malwarebytes.com
1
26
Jeff Whitehead retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputerOct 5
Alleged dev of Ploutus ATM malware appears in US court after arrest bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
Alleged dev of Ploutus ATM malware appears in US court after arrest

Alleged dev of Ploutus ATM malware appears in US court after arrest

The U.S. Department of Justice has announced the arrest of the alleged developer of Ploutus malware, used to steal millions of dollars in ATM jackpotting attacks across the United States.

bleepingcomputer.com
3
11
1
26
8,687
Jeff Whitehead retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputerOct 5
Rejetto HFS servers now actively scanned for critical RCE flaw bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
Rejetto HFS servers now actively scanned for critical RCE flaw

Rejetto HFS servers now actively scanned for critical RCE flaw

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE).

bleepingcomputer.com
6
12
26
8,637
Jeff Whitehead retweeted
SecurityWeek (@SecurityWeek) profile picture
SecurityWeek
@SecurityWeekOct 5
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws securityweek.com/linux-backd…
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation.

securityweek.com
3
1
1
5
4,198
Iranian hacker accused of draining 31TB from university inboxes extradited to the US - securityaffairs.com/200387/s…
Iranian hacker accused of draining 31TB from university inboxes extradited to the US

Iranian hacker accused of draining 31TB from university inboxes extradited to the US

Iranian hacker Amir Barati faces extradition to the US over an alleged Iranian campaign that stole 31TB of data from universities.

securityaffairs.com
3
Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers cybersecuritynews.com/malici… via @The_Cyber_News
Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers

Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers

A malicious HEIC image can exploit libheif through WordPress uploads, enabling remote code execution on vulnerable servers.

cybersecuritynews.com
7
darkreading.com/cyberattacks…
Chinese Hackers Impersonate US Officials for AI Cyber Espionage

Chinese Hackers Impersonate US Officials for AI Cyber Espionage

An emerging threat group known as TA419 built seemingly legitimate professional relationships with AI policy experts working for US organizations.

darkreading.com
8
Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It. - securityaffairs.com/200444/a…
Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It. - Security Affairs

Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It. - Security Affairs

AI-assisted research uncovered a critical Rejetto HFS flaw that enables auth bypass and remote code execution, now exploited in the wild.

securityaffairs.com
5
Jeff Whitehead retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputerOct 5
New Dell System Update flaw lets hackers gain root privileges bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
New Dell System Update flaw lets hackers gain root privileges

New Dell System Update flaw lets hackers gain root privileges

Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible.

bleepingcomputer.com
8
55
7
142
24,607
Jeff Whitehead retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputerOct 5
Denmark population registry data breach affects 8.8 million people bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…
Denmark population registry data breach affects 8.8 million people

Denmark population registry data breach affects 8.8 million people

Denmark's Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals.

bleepingcomputer.com
10
26
4
61
8,751
ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure fortinet.com/blog/threat-res…
5
Load more