The FBI says North Korean hackers used a FaceStealer social engineering scheme to steal more than $400 million in cryptocurrency and target open-source software maintainers.
Brazilian insurer Caixa Vida e Previdência says attackers copied names and CPF numbers of all 7.6 million active customers, plus some addresses, phones and emails.
Expedia Group says attackers reached its systems through a compromised third-party data platform provider, as the N0n extortion group claims over 1 TB of stolen...
Bookeasy says names, addresses, emails, phone numbers and booking details of national park customers in 3 states may have been accessed.
Hong Kong's privacy regulator says the Sogo membership breach may affect about 820,000 people, as Chow Sang Sang discloses a separate attack on customer and...
Police in 9 countries took down 235 servers and 257 domains behind CastleRAT, Gootloader and StealC, and found 6.4 million stolen credentials.
An attacker using 4,837 hijacked GitHub accounts probed 61,764 repositories and ran the wfx CI secret stealer in at least 1,806, stealing Actions secrets and...
Landmark Group confirms unauthorised access to Shukran members' names, contact details and dates of birth as the N0n extortion group lists the retailer on its...
AllUnited confirms an attacker copied names, addresses, birth dates, IBANs and passwords from its sports club platform, hitting clubs and federations across the Netherlands.
Arctic Wolf Labs says attackers ran the open-source AntiFox AI pentesting platform from Alibaba Cloud to hack IIS servers and read a production AWS secret.
Vates warns attackers are exploiting a critical Xen Orchestra authentication bypass that grants Admin access and can lead to root takeover of XCP-ng hosts.
Maersk confirmed attackers extracted data from a legacy system inherited through an acquisition, as the new WhiteArmor ransomware gang claims the hack and demands $5...
Claroc found 35,578 Grok-built apps that anyone could open, including 24 SpaceXSI and X staff apps, patient records, staff rosters and plain text passwords.
Tools and intelligence from BreachNews.
