How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data
How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data
Law Firm Data Breaches (12803 indexed)
Berkadia
305,216 records exposed — Email addresses, Employers, Names, Phone numbers and 1 more
View incident → Indexed 2 months, 3 weeks ago
Infinite Campus
137,123 records exposed — Email addresses, Employers, Job titles, Names and 4 more
View incident → Indexed 2 months, 3 weeks ago
Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability — Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a
LiteSpeed cPanel Plugin
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability — LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access
Oracle PeopleSoft Enterprise PeopleTools
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability — Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which c
Extortion-only attacks are increasing as data theft drives most ransomware claims, with
Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed
Ivanti Sentry
Ivanti Sentry OS Command Injection Vulnerability — Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level
University of Nottingham
454,635 records exposed — Academic records, Citizenship statuses, Dates of birth, Disabilities and 11 more
View incident → Indexed 2 months, 3 weeks ago
Arista Extensible Operating System
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability — Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch
Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability — Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerab
Google Chromium V8
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability — Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HT
BerriAI LiteLLM
BerriAI LiteLLM Command Injection Vulnerability — BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrar
Check Point Security Gateway
Check Point Security Gateway Improper Authentication Vulnerability — Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacke
Baker Distributing
102,935 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
View incident → Indexed 2 months, 4 weeks ago
BCD Travel
396,313 records exposed — Email addresses, Employers, Job titles, Names and 3 more
View incident → Indexed 3 months ago
SolarWinds Serv-U
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability — SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: de
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability —
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability — Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to a
DentaQuest
2,553,599 records exposed — Dates of birth, Email addresses, Genders, Government issued IDs and 4 more
Android Framework
Android Framework Integer Overflow Vulnerability — Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
Linux Kernel
Linux Kernel Improper Authentication Vulnerability — Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.
Fortinet (FortiBleed Campaign)
Credential exposure campaign compromised verified admin credentials for 73,000+ FortiGate devices
Thousands of NHS patient records stolen in ransomware attack
Thousands of NHS patient records stolen in ransomware attack
135,000 contact records leaked on dark web; police and government contact details exposed
135,000 contact records leaked on dark web; police and government contact details exposed