Cyber threat actors are infecting victims with the Vidar stealer and the XMRig
Cyber threat actors are infecting victims with the Vidar stealer and the XMRig cryptocurrency miner in a new malicious campaign
Retail & E-Commerce Data Breaches (12535 indexed)
HSIN security network
HSIN security network breached, data exfiltrated
View incident → Indexed 1 month, 3 weeks ago
Nissan North America
Employee SSNs and bank data stolen via PeopleSoft
View incident → Indexed 1 month, 3 weeks ago
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk, ran them through automated tools, and waited for matches. Credential stuffing was cheap, scalable, and for def
One Medical Seniors
Clinical and demographic records of 830K patients exposed
View incident → Indexed 1 month, 3 weeks ago
NYC Health and Hospitals
1.8M records with biometrics and SSNs breached
View incident → Indexed 1 month, 3 weeks ago
Chemco Calgary
Ransomware attack by Qilin group ongoing
View incident → Indexed 1 month, 3 weeks ago
HSIN security platform
HSIN security platform breached by unauthorized party
View incident → Indexed 1 month, 3 weeks ago
The professional services giant
The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact. The post Accenture Confirms Data Breach After Hacker Claims Source Code Th
KDDI Corporation
14.2M email credentials exposed across 6 ISPs
View incident → Indexed 1 month, 3 weeks ago
Telco giant KDDI
Japanese telecommunications giant KDDI says that millions of people had their email addresses and passwords exposed after attackers breached an email platform used by five internet service providers (ISPs) in the country
GitHub continues to be a scintillating target for attackers because it sits in the
GitHub continues to be a scintillating target for attackers because it sits in the middle of the software supply chain and gives threat actors three things they crave: source code, secrets, and automated pipelines to run
A financially motivated operation uses lures of cracked or pirated software to deliver a
A financially motivated operation uses lures of cracked or pirated software to deliver a malware two-for-one combo for data theft and cryptomining.
Tchap French Gov Messenger
73K government accounts and 643K messages stolen
View incident → Indexed 1 month, 3 weeks ago
Aesthetic Surgical Images
Patient records stolen by INC_RANSOM
View incident → Indexed 1 month, 3 weeks ago
Chisholm Persson Ball PC
US law firm hit by Akira ransomware
View incident → Indexed 1 month, 3 weeks ago
Accenture
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company. [...]
Adobe ColdFusion
Adobe ColdFusion Path Traversal Vulnerability — Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.