Tag: breach
-
Salesforce Confirms It Won’t ‘Engage, Negotiate With, Or Pay’ Threat Actors
Salesforce won’t negotiate with the Scattered Lapsus$ Hunters hacker group over millions of records stolen from users through a breach of Salesloft Drift, a third-party app. First seen on crn.com Jump to article: www.crn.com/news/security/salesforce-confirms-it-won-t-engage-negotiate-with-or-pay-threat-actors
-
Salesforce data breach: what you need to know
The Scattered LAPSUS$ Hunters hacking group claims to have accessed data from around 40 customers of Salesforce, the cloud-based customer relationship management service, stealing almost one billion records. First seen on fortra.com Jump to article: www.fortra.com/blog/salesforce-data-breach-what-need-know
-
DraftKings thwarts credential stuffing attack, but urges password reset and MFA
DraftKings warns of credential stuffing using stolen logins; No evidence of data loss, but users must reset passwords and enable MFA. A credential stuffing campaign is targeting the American sports gambling company DraftKings. Credential stuffing is a type of cyberattack where hackers use stolen usernames and passwords, usually obtained from previous data breaches, to try…
-
London police arrests suspects linked to nursery breach, child doxing
The UK Metropolitan Police has arrested two suspects following an investigation into the doxing of children online after a ransomware attack on a chain of London-based nurseries. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/london-police-arrests-suspects-linked-to-nursery-breach-child-doxing/
-
Defend the Target, Not Just the Door: A Modern Plan for Google Workspace
The Salesloft Drift breach shows attackers don’t need to “hack Google”, they just need to breach a trusted integration. Learn from Material Security how to secure OAuth, detect risky behavior, and protect data in Google Workspace. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/defend-the-target-not-just-the-door-a-modern-plan-for-google-workspace/
-
Defend the Target, Not Just the Door: A Modern Plan for Google Workspace
The Salesloft Drift breach shows attackers don’t need to “hack Google”, they just need to breach a trusted integration. Learn from Material Security how to secure OAuth, detect risky behavior, and protect data in Google Workspace. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/defend-the-target-not-just-the-door-a-modern-plan-for-google-workspace/
-
Defend the Target, Not Just the Door: A Modern Plan for Google Workspace
The Salesloft Drift breach shows attackers don’t need to “hack Google”, they just need to breach a trusted integration. Learn from Material Security how to secure OAuth, detect risky behavior, and protect data in Google Workspace. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/defend-the-target-not-just-the-door-a-modern-plan-for-google-workspace/
-
Avnet Confirms Data Breach Involving Internal Sales Tool Information
Attackers breached an externally hosted cloud environment supporting a sales tool to steal data from Avnet’s EMEA territory and threatened to release it unless a ransom was paid. First seen on crn.com Jump to article: www.crn.com/news/security/2025/avnet-confirms-data-breach-involving-internal-sales-tool-information
-
Trinity of Chaos Leaks Data from 39 Companies, Google, Cisco Among Targets
A newly formed ransomware collective calling itself the Trinity of Chaos has published a data leak site (DLS) on the TOR network exposing the stolen records of 39 prominent corporations, including Google Adsense, CISCO, Toyota, FedEx and Disney/Hulu. The alliance comprises threat actors from Lapsus$, Scattered Spider and ShinyHunters, signaling a shift toward traditional ransomware…
-
North Korean hackers stole over $2 billion in cryptocurrency this year
North Korean hackers have stolen more than $2 billion in cryptocurrency in 2025, according to blockchain analytics firm Elliptic, and the year isn’t over yet. Though … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/10/08/north-korean-hackers-cryptocurrency-theft/
-
Step Into the Password Graveyard”¦ If You Dare (and Join the Live Session)
Every year, weak passwords lead to millions in losses, and many of those breaches could have been stopped.Attackers don’t need advanced tools; they just need one careless login.For IT teams, that means endless resets, compliance struggles, and sleepless nights worrying about the next credential leak.This Halloween, The Hacker News and Specops Software invite you to…
-
Bybit Theft Drives Record-Breaking $2bn Haul for North Korea
North Korean hackers have stolen over $2bn in cryptocurrency already this year, says Elliptic First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/bybit-recordbreaking-2bn-north/
-
Bybit Theft Drives Record-Breaking $2bn Haul for North Korea
North Korean hackers have stolen over $2bn in cryptocurrency already this year, says Elliptic First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/bybit-recordbreaking-2bn-north/
-
Millions in UK at risk of cyber-attacks as Windows 10 ends updates, Which? finds
Survey shows one in four users intend to keep using system as it is phased out, despite increased virus and malware riskAbout 5 million British computer users risk becoming vulnerable to cyber-attacks and scams after Microsoft next week stops updating its decade-old Windows 10 system, consumer campaigners have warned.One in four of an estimated 21…
-
Qantas among nearly 40 companies facing ransom demand from hacker group
Hacker collective Scattered Lapsus$ Hunters reportedly threatening to leak stolen personal data from dozens of firms in major extortion attempt<ul><li><a href=”https://www.theguardian.com/australia-news/live/2025/oct/08/australia-politics-live-gaza-rally-parliament-anthony-albanese-sussan-ley-question-time-andrew-hastie-ntwnfb”>Follow our Australia news live blog for latest updates</li><li>Get our <a href=”https://www.theguardian.com/email-newsletters?CMP=cvau_sfl”>breaking news email, <a href=”https://app.adjust.com/w4u7jx3″>free app or <a href=”https://www.theguardian.com/australia-news/series/full-story?CMP=cvau_sfl”>daily news podcast</li></ul>Qantas is one of almost 40 global companies that have until Friday to begin…
-
Cyberangriff auf Consulting-Umgebung – Red Hat meldet Data Breach in GitLab-Umgebung
First seen on security-insider.de Jump to article: www.security-insider.de/cyberangriff-auf-red-hat-datenklau-von-repositories-a-3bb31f7be84f05ee988d2567b3f15ca3/
-
Data Breach at Doctors Imaging Group Exposes Sensitive Patient Information
A breach at Doctors Imaging Group exposed sensitive data from 171,000 patients. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/data-breach-at-doctors-imaging-group-exposes-sensitive-patient-information/
-
Data Breach at Doctors Imaging Group Exposes Sensitive Patient Information
A breach at Doctors Imaging Group exposed sensitive data from 171,000 patients. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/data-breach-at-doctors-imaging-group-exposes-sensitive-patient-information/
-
Discord Data Breach Exposes User IDs, Billing Info, and Photo IDs
A third-party breach at Discord exposed user data, billing details, and even photo IDs, highlighting the risks of vendor security gaps. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/discord-data-breach-exposes-user-ids-billing-info-and-photo-ids/
-
Hospital Insider Breach Lasted 10 Years, Led to FBI Inquiry
Texas-Based Harris Health Says FBI Just Gave Green Light to Notify 5,000 Patients. Harris Health is contacting 5,000 patients about a breach involving a former employee who improperly accessed electronic health records for over a decade. The Texas health entity said it discovered and reported the incident four years ago to the FBI, which just…
-
DraftKings warns of account breaches in credential stuffing attacks
Sports betting giant DraftKings has notified an undisclosed number of customers that their accounts had been hacked in a recent wave of credential stuffing attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/draftkings-warns-of-account-breaches-in-credential-stuffing-attacks/
-
A Breach Ready Software-defined Vehicle Program is the Next New Normal for the Automotive Industry
The Tata Motors share price is beginning to go up after its UK subsidiary, Jaguar Land Rover (JLR), announced progress in restoring digital systems that were hit by a cyberattack earlier this month. In the gleaming assembly halls of Solihull and Halewood, where Jaguar Land Rover (JLR) crafts its sleek predators of the road, a……
-
North Korean hackers stole over $2 billion in crypto this year
North Korean hackers have stolen an estimated $2 billion worth of cryptocurrency assets in 2025, marking the largest annual total on record. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/cryptocurrency/north-korean-hackers-stole-over-2-billion-in-crypto-this-year/
-
Qilin Ransomware Gang Claims Asahi Cyber-Attack
The Qilin group claims to have stolen sensitive personal and proprietary data from the Brewer First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/qilin-ransomware-asahi-cyber-attack/