Arctic Wolf Labs says attackers ran the open-source AntiFox AI pentesting platform from Alibaba Cloud to hack IIS servers and read a production AWS secret.
Vates warns attackers are exploiting a critical Xen Orchestra authentication bypass that grants Admin access and can lead to root takeover of XCP-ng hosts.
Maersk confirmed attackers extracted data from a legacy system inherited through an acquisition, as the new WhiteArmor ransomware gang claims the hack and demands $5...
Claroc found 35,578 Grok-built apps that anyone could open, including 24 SpaceXSI and X staff apps, patient records, staff rosters and plain text passwords.
A threat actor alleges a Medina Regional Hospital database leak involving patient identities, Social Security numbers and clinical records. The claim remains unverified.
A password hardcoded in Wyndham's Android app opened an internal database holding customer names, emails, rewards numbers and login tokens before the hotel giant revoked...
Japanese furniture retailer Nitori says an intruder who may have been inside since mid-October could have accessed up to 37.62 million member, buyer and order...
The BYOD ransomware gang claims it stole Medicaid, SNAP, TANF and banking data on 2 million Texans from Texas HHSC. The agency has not commented.
NEAR AI says an attacker exploited an SGLang flaw to reach its servers, taking account details for about 100 users and data from 18 AI...
Fireworks AI says its October breaches exposed customer billing data, secrets, datasets and incomplete model weights, and Notion says some Notion AI chat transcripts were...
Vanderbilt told its campus to shut down devices and leave Wi-Fi during an active cyberattack as the BYOD ransomware gang claimed to hold student and...
SPH Media says attacks on 5 systems between November 4 and 8 exposed about 9% of its database, mostly emails, plus some names, addresses and...
An attacker used credentials tied to Qubole's AWS account to enter multiple customer AWS environments in October, stealing secrets and copying S3 data, Wiz says.
Tools and intelligence from BreachNews.
