Tag: breach
-
Unbefugter Zugriff bei einem Glücksspielunternehmen in Irland
Up to 800,000 Betfair and Paddy Power customers hit by data breach First seen on irishtimes.com Jump to article: www.irishtimes.com/business/2025/07/09/up-to-800000-betfair-and-paddy-power-customers-hit-by-data-breach/
-
McDonald’s AI Hiring Bot Exposed with ‘123456’ Password, Millions of Job”‘Seekers’ Data at Risk
A shocking security vulnerability in McDonald’s AI-powered hiring system has exposed the personal information of millions of job applicants, after security researchers discovered they could access the entire database using the laughably weak password >>123456.
-
Qantas confirms data breach impacts 5.7 million customers
Australian airline Qantas has confirmed that 5.7 million people have been impacted by a recent data breach, in which threat actors stole customers’ data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qantas-confirms-data-breach-impacts-57-million-customers/
-
Driver’s license numbers, addresses leaked in 2024 bitcoin ATM company breach
Bitcoin Depot, which operates cryptocurrency ATMs across North America, says information belonging to more than 26,000 people was breached in an incident last year. First seen on therecord.media Jump to article: therecord.media/bitcoin-depot-cryptocurrency-atm-company-data-breach
-
Nippon Steel Solutions suffered a data breach following a zero-day attack
Tags: attack, breach, cloud, cybersecurity, data, data-breach, exploit, hacker, network, vulnerability, zero-dayNippon Steel Solutions reported a data breach caused by hackers exploiting a zero-day vulnerability in their network equipment. Nippon Steel Solutions, a subsidiary of Japan’s Nippon Steel, disclosed a data breach, attackers exploited a zero-day vulnerability. The company provides cloud and cybersecurity services. On March 7, 2025, Nippon Steel Solutions detected suspicious server activity and…
-
Bitcoin Depot breach exposes data of nearly 27,000 crypto users
Bitcoin Depot, an operator of Bitcoin ATMs, is notifying customers of a data breach incident that has exposed their sensitive information. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/bitcoin-depot-breach-exposes-data-of-nearly-27-000-crypto-users/
-
More than $40 million stolen from GMX crypto platform
Decentralized exchange GMX disabled trading after it “experienced an exploit.” The heist involved more than $40 million in user funds. First seen on therecord.media Jump to article: therecord.media/gmx-exchange-cryptocurrency-stolen
-
South Korean Government Imposes Penalties on SK Telecom for Breach
Following a breach at the country’s top mobile provider that exposed 27 million records, the South Korean government imposed a small monetary penalty but stiff regulatory requirements. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/south-korea-imposes-penalties-sk-telecom-breach
-
SatanLock Next in Line for Ransomware Group Shutdowns
Though the victims list on its site has since been taken down, the group plans on leaking the rest of the files stolen from its victims. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/satanlock-ransomware-group-shutdowns
-
The 2025 Verizon Data Breach Report: A Wake-Up Call for MSPs
The data paints a clear picture:”¯A full 20%”¯of breaches this year stemmed from exploitation of known vulnerabilities, a”¯34%”¯increase from last year. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/07/the-2025-verizon-data-breach-report-a-wake-up-call-for-msps/
-
Qantas details impact of data breach on 5.7 million customers
Australian flag carrier begins notifying millions of individuals after a cyber attack on a call centre, confirming that while financial and passport details are safe, a significant volume of other personal information was compromised First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627295/Qantas-details-impact-of-data-breach-on-57-million-customers
-
Qantas details impact of data breach on 5.7 million customers
Australian flag carrier begins notifying millions of individuals after a cyber attack on a call centre, confirming that while financial and passport details are safe, a significant volume of other personal information was compromised First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627295/Qantas-details-impact-of-data-breach-on-57-million-customers
-
XMRig Malware Disables Windows Updates and Scheduled Tasks to Maintain Persistence
Monero (XMR), a cryptocurrency, saw a spectacular surge in early 2025, rising 45% from $196 to $285 by May, with a notable peak in April. This surge coincided with a high-profile Bitcoin theft in the US, where the stolen assets were reportedly converted into Monero by a single individual, drawing attention to the privacy-focused coin.…
-
SEC and SolarWinds to settle lawsuit over 2020 breach
The US SEC and SolarWinds have reached a settlement in principle to resolve litigation over alleged security failings that led to the 2020 compromise of the supplier’s Orion platform by Russian cyber spies First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627272/SEC-and-SolarWinds-to-settle-lawsuit-over-2020-breach
-
Marks Spencer chair refuses to say if retailer paid hackers after ransomware attack
The retail giant’s chair confirmed the breach was caused by ransomware. First seen on techcrunch.com Jump to article: techcrunch.com/2025/07/08/marks-spencer-chair-refuses-to-say-if-retailer-paid-hackers-after-ransomware-attack/
-
The trust crisis in the cloud”¦and why blockchain deserves a seat at the table
Tags: access, blockchain, breach, cloud, compliance, control, credentials, crypto, data, data-breach, framework, gartner, iam, identity, infrastructure, jobs, risk, threat, tool, zero-trustLimited visibility and tamperable logs. Cloud providers manage logs and telemetry internally. As tenants, we often depend on them to provide logs after an incident without a guarantee of tamper-proof integrity. This lack of transparency hampers forensic investigations and incident response.Privilege concentration and insider risk. CSP administrators often hold elevated access privileges, making them single…
-
The trust crisis in the cloud”¦and why blockchain deserves a seat at the table
Tags: access, blockchain, breach, cloud, compliance, control, credentials, crypto, data, data-breach, framework, gartner, iam, identity, infrastructure, jobs, risk, threat, tool, zero-trustLimited visibility and tamperable logs. Cloud providers manage logs and telemetry internally. As tenants, we often depend on them to provide logs after an incident without a guarantee of tamper-proof integrity. This lack of transparency hampers forensic investigations and incident response.Privilege concentration and insider risk. CSP administrators often hold elevated access privileges, making them single…
-
5 Ways Identity-based Attacks Are Breaching Retail
From overprivileged admin roles to long-forgotten vendor tokens, these attackers are slipping through the cracks of trust and access. Here’s how five retail breaches unfolded, and what they reveal about…In recent months, major retailers like Adidas, The North Face, Dior, Victoria’s Secret, Cartier, Marks”¯&”¯Spencer, and Co”‘op have all been breached. These attacks weren’t sophisticated First…
-
5 Ways Identity-based Attacks Are Breaching Retail
From overprivileged admin roles to long-forgotten vendor tokens, these attackers are slipping through the cracks of trust and access. Here’s how five retail breaches unfolded, and what they reveal about…In recent months, major retailers like Adidas, The North Face, Dior, Victoria’s Secret, Cartier, Marks”¯&”¯Spencer, and Co”‘op have all been breached. These attacks weren’t sophisticated First…
-
Cyberattacks are changing the game for major sports events
Sports fans and cybercriminals both look forward to major sporting events, but for very different reasons. Fake ticket sites, stolen login details, and DDoS attacks are common … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/08/sport-events-cybercrime/
-
Hacks Lead Health Data Breach Trends So Far in 2025
345 Major HIPAA Breaches Reported to Feds So Far This Year, Affecting 29.9 Million. Midway through 2025, the federal website listing major health data breaches in the U.S. shows a familiar scene: Many hacking incidents including ransomware, dozens of third-party vendor incidents, and millions of individuals affected by compromised personal data. First seen on govinfosecurity.com…
-
ATT Reaches $177M Deal Over 2019 and 2024 Data Breaches
ATT’s $177M data breach settlement. Check eligibility for payouts from 2019 and 2024 incidents. Get claim details here. First seen on hackread.com Jump to article: hackread.com/att-reaches-deal-over-2019-2024-data-breaches/
-
BladedFeline Exploits Whisper and PrimeCache to Breach IIS and Microsoft Exchange Servers
ESET researchers have uncovered a series of malicious tools deployed by BladedFeline, an Iran-aligned advanced persistent threat (APT) group, targeting Kurdish and Iraqi government officials. Active since at least 2017, BladedFeline has been linked with medium confidence to the notorious OilRig APT group, known for cyberespionage across the Middle East. Sophisticated Cyberespionage Campaign The group’s…
-
VenusTech and Salt Typhoon Breach Sheds Light on China’s Covert Cyber Mercenary Networks
The dark web forum DarkForums, which has been a site for data breaches and leaks since BreachForums was shut down in mid-April, was the scene of two major leaks in late May involving Chinese cybersecurity organizations: VenusTech, a well-known IT security vendor, and Salt Typhoon, a state-sponsored advanced persistent threat (APT) organization affiliated with the…
-
SatanLock Ransomware Ends Operations, Says Stolen Data Will Be Leaked
SatanLock ransomware gang shuts down after weeks of attacks and plans to leak stolen victim data. Group linked to Babuk-Bjorka and GD Lockersec families. First seen on hackread.com Jump to article: hackread.com/satanlock-ransomware-ends-operations-stolen-data-leak/
-
16 Billion Exposed Records Offer Blueprint for Mass Exploitation
If the analysis by researchers at CyberNews is on point, then a massive breach, involving 16 billion records previously slipped under the radar and represents the largest of its kind so far. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/07/16-billion-exposed-records-offer-blueprint-for-mass-exploitation/
-
Ingram Micro confirms ransomware attack after days of downtime
Tags: attack, breach, control, incident response, monitoring, msp, programming, ransomware, resilience, risk, software, supply-chain, threatWeak links: tech supply chain targeted: This attack on Ingram Micro reflects a broader shift in threat actors focusing on increasingly targeting beyond software development firms to broader tech supply chain nodes to maximize disruption.Jain added that entities like distributors, MSPs, and logistics providers offer high leverage with relatively lower security maturity compared to large…
-
Qantas Contacted by Potential Cybercriminal Following Data Breach
Qantas said it is currently validating the contact, and has informed law enforcement First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/qantas-contacted-cybercriminal/
-
IT Giant Ingram Micro Reveals Ransomware Breach
Distributor Ingram Micro says it has found ransomware on its internal systems First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/it-giant-ingram-micro-reveals/