Snowflake Breach Guilty Plea
165 orgs compromised, billions of records stolen
View incident → Indexed 2 weeks, 4 days ago
Latest Disclosures
The Rust-based macOS infostealer harvests users’ passwords, keychain information,
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared fir
AmnesiaStealer contains novel functions, including the attackers gaining remote control
AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data
Over 95% of the affected companies were exposed before the malicious LiteLLM packages
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published. The post Trivy, Not LiteLLM Behind the 2,500 Org Compromise appeared first on SecurityWeek.
LiteLLM AI Supply Chain
2500 orgs and 434K CI/CD pipelines exposed
View incident → Indexed 2 weeks, 4 days ago
Brightspeed Telecom
1M+ customer records stolen in ransomware
View incident → Indexed 2 weeks, 4 days ago
100K+ police officer records leaked
100K+ police officer records leaked
View incident → Indexed 2 weeks, 4 days ago
Records held in Salesforce and ServiceNow systems are under attack leaving user data
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those perpetrated by the extortion group ShinyHunters, Reco
Exposed Credential Database
24B stolen credentials in 8.3TB public exposure
View incident → Indexed 2 weeks, 4 days ago
7.3 million Chess.com profiles leaked online: the data is genuine, but evidence points
7.3 million Chess.com profiles leaked online: the data is genuine, but evidence points to large-scale scraping, not a server breach. Free is a strange price for stolen data, and that’s exactly what makes this listi
Canadian Inv Regulatory Org
750K investors' SINs and financials stolen
View incident → Indexed 2 weeks, 4 days ago
Exposed Credential Elasticsearch DB
24B stolen credentials exposed publicly
View incident → Indexed 2 weeks, 4 days ago
AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords,
AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords, cookies and data while giving attackers live control of the browser. Jamf Threat Labs researchers disclosed AmnesiaStealer, a new multi-st
100K+ officer contact records leaked
100K+ officer contact records leaked
View incident → Indexed 2 weeks, 4 days ago
Cambria Law Firm
INC_RANSOM exfiltrated confidential client data
View incident → Indexed 2 weeks, 4 days ago
Portable Intelligence Canada
BlackNevas breach confirmed Aug 14
View incident → Indexed 2 weeks, 4 days ago
US Homeland Security
HSIN government network confirmed breached
View incident → Indexed 2 weeks, 4 days ago
Researchers
The exfiltrated data may be related to misconfiguration of Microsoft Power Page portals, according to a new report.
American Addiction Centers
SSNs and health data stolen from Salesforce
View incident → Indexed 2 weeks, 4 days ago
Abbott Laboratories
30M+ customer rows stolen by ShinyHunters
View incident → Indexed 2 weeks, 4 days ago