Tag: breach
-
Hacker steals 1 million Cock.li user records in webmail data breach
Email hosting provider Cock.li has confirmed it suffered a data breach after threat actors exploited flaws in its now-retired Roundcube webmail platform to steal over a million user records. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hacker-steals-1-million-cockli-user-records-in-webmail-data-breach/
-
DNA testing firm 23andMe fined £2.3m by UK regulator for 2023 data hack
Information stolen from US company included details of 150,000 British residents including family treesThe genetic testing company 23andMe has been fined more than £2.3m for failing to protect the personal information of more than 150,000 UK residents after a large-scale cyberattack in 2023.Family trees, health reports, names and postcodes were among the sensitive data hacked…
-
Pro-Israel hackers claim breach of Iranian bank amid military escalation
A group tracked as Predatory Sparrow said it was responsible for hacking Bank Sepah as the conflict between Israel and Iran intensified. First seen on therecord.media Jump to article: therecord.media/pro-israel-hackers-claim-attack-on-iranian-bank
-
Zoomcar Data Breach Exposes Personal Info of 8.4 Million Users
Zoomcar confirms 2025 breach affecting 8.4M users, echoing its 2018 data leak. Personal info exposed, financial data safe, investigation ongoing. First seen on hackread.com Jump to article: hackread.com/zoomcar-data-breach-exposes-8-million-users-data/
-
Operation 999: Ransomware tabletop tests cyber execs’ response
Tags: access, attack, blueteam, breach, computer, conference, cyber, cyberattack, cybersecurity, data, data-breach, extortion, group, hacker, incident, incident response, infrastructure, leak, military, network, ransom, ransomware, RedTeam, resilience, risk, service, threat, tool, trainingExtortion attempts rebuffed: As the exercise moved on, the blue team refuse to pay a ransom after consulting with the authorities, legal teams, and crisis management experts. Instead of upping the ante by threatening to sabotage the water treatment algorithms or chemical pumps, potentially tainting the supply, the attackers decide to leak customer records online…
-
India-based car-sharing company Zoomcar suffered a data breach impacting 8.4M users
Zoomcar disclosed a data breach impacting 8.4M users after attackers compromised its systems and contacted the company staff. Zoomcar is an India-based car-sharing and self-drive car rental company. Zoomcar discovered a data breach impacting 8.4M users after threat actors contacted the internal personnel claiming the compromise of internal systems. The company is investigating the security…
-
GCHQ Intern Sentenced to 7 Years for Illegally Copying Secret Files to Smartphone
A former intern at the UK’s intelligence agency GCHQ has been sentenced to seven and a half years in prison after admitting to smuggling top secret data out of a secure facility using his mobile phone, in a breach described by prosecutors as a “flagrant violation” of national security protocols. Hasaan Arshad, 25, a computer…
-
Purportedly stolen VirtualMacOSX data exposed
First seen on scworld.com Jump to article: www.scworld.com/brief/purportedly-stolen-virtualmacosx-data-exposed
-
Remorseless extortionists claim to have stolen thousands of files from Freedman HealthCare
The group has previously threatened to SWAT cancer patients and leaked pre-op plastic surgery photos First seen on theregister.com Jump to article: www.theregister.com/2025/06/16/extortionists_claim_freedman_healthcare_hack/
-
Washington Post Staffer Emails Targeted in Cyber Breach
Journalists’ Microsoft accounts were breached, which would have given attackers access to emails of staff reporters covering national security, economic policy, and China. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/washington-post-staffer-emails-targeted-cyber-breach
-
Washington Post Hacked Multiple Journalists’ Email Accounts Compromised
The Washington Post confirmed late last week that its email systems were targeted in a cyberattack, resulting in the compromise of several journalists’ email accounts. >>The Wall Street Journal, which first reported the breach, said it was potentially the work of a foreign government.
-
8.4 million people affected by data breach at Indian car share company Zoomcar
The Bengaluru-based company told investors that it initially became aware of the breach on June 9. First seen on therecord.media Jump to article: therecord.media/8-million-affected-zoomcar-data-breach
-
Zoomcar discloses security breach impacting 8.4 million users
Zoomcar Holdings (Zoomcar) has disclosed via an 8-K form filing with the U.S. Securities and Exchange Commission (SEC) a data breach incident impacting 8.4 million users. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/zoomcar-discloses-security-breach-impacting-84-million-users/
-
Hackers Target and Hijack Washington Post Journalists’ Email Accounts
A targeted cyberattack has struck The Washington Post, compromising the email accounts of several of its journalists and raising new concerns about the digital security of newsrooms worldwide. The breach, discovered late last week, prompted an immediate and sweeping response from the newspaper’s leadership, including a reset of all employee login credentials and the launch…
-
Zoomcar Data Breach Exposes Sensitive Details of 8.4 Million Users
Zoomcar Holdings, Inc., the prominent car-sharing platform, has confirmed a significant data breach that has compromised the personal information of approximately 8.4 million users. The incident, which was first detected on June 9, 2025, was disclosed in a recent filing with the U.S. Securities and Exchange Commission (SEC), raising concerns about data security and privacy…
-
How to prevent data breaches in enterprise organizations
Tags: access, breach, compliance, cyber, cybersecurity, data, framework, identity, strategy, threat, zero-trustIn an era of growing cyber threats, enterprises must move beyond basic cybersecurity to prevent data breaches. This article explores the importance of a layered security approach, with a focus on automated certificate lifecycle management (CLM), zero trust frameworks, and real-time monitoring. These strategies enhance visibility, enforce identity-based access, ensure compliance, and reduce human error,…
-
Canadian Airline WestJet Suffers Cyberattack, Halts App and Web Services
Calgary-based WestJet Airlines, Canada’s second-largest carrier, is grappling with the fallout from a significant cybersecurity incident that has disrupted access to its mobile app and internal systems. The breach, first detected on June 13, has led to intermittent outages and errors for guests attempting to use WestJet’s digital platforms, including the WestJet app and website.…
-
Hackers Leak Data of 10,000 VirtualMacOSX Customers in Alleged Breach
Hackers leak data of 10,000 VirtualMacOSX customers in alleged breach, exposing names, emails, passwords, and financial details on a hacking forum. First seen on hackread.com Jump to article: hackread.com/hackers-leak-virtualmacosx-customers-data-breach/
-
2 Software Firms Report Major Health Data Theft Hacks
Ocuco and Episource Breaches Affect Health Sector Clients, Patients. An Ireland-based provider of eye care practice software and a California-based medical coding services firm have reported separate hacking incidents to U.S. and state regulators that have likely affected dozens of their clients and hundreds of thousands of people. First seen on govinfosecurity.com Jump to article:…
-
Data breach purportedly pilfers over 64M T-Mobile records
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-purportedly-pilfers-over-64m-t-mobile-records
-
Paraguay Suffered Data Breach: 7.4 Million Citizen Records Leaked on Dark Web
Resecurity researchers found 7.4 million records containing personally identifiable information (PII) of Paraguay citizens on the dark web. Resecurity has identified 7.4 million records containing personally identifiable information (PII) of Paraguayan citizens leaked on the dark web today. Last week, cybercriminals have offered information about all citizens of Paraguay for sale, demanding $7.4 million in…
-
Ransomware Group Threatens to Dump Paraguayan Citizens’ Data
7.2 Million Individuals’ Personal Data Being Held to Ransom by Threat Actor. A data-leak group extortion is shaking down the government of Paraguay for a ransom payment worth $7.4 million, or $1 for every one of the country’s citizens. The group, calling itself Brigada Cyber PMC, claims the stolen data includes people’s personally identifiable information.…
-
Unpatched IT Tool Opens Door Hackers Breach Billing Software Firm via SimpleHelp RMM
Tags: advisory, breach, business, cyber, cybersecurity, hacker, infrastructure, monitoring, ransomware, software, tool, vulnerabilityCybersecurity professionals and business leaders are on high alert following a confirmed breach of a utility billing software provider, traced to unpatched vulnerabilities in the widely used SimpleHelp Remote Monitoring and Management (RMM) platform. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory warning that ransomware actors have leveraged these security gaps…
-
Fog Ransomware Uses Pentesting Tools to Steal Data and Launch Attacks
Tags: attack, breach, cyber, cybercrime, cybersecurity, data, data-breach, finance, hacker, monitoring, network, open-source, penetration-testing, ransomware, software, tactics, toolFog ransomware incidents in recent years have exposed a dangerous new trend in cybercrime: hackers are using open-source penetration testing tools and genuine staff monitoring software to breach networks, steal confidential data, and initiate ransomware attacks. This unprecedented blend of tactics has targeted major financial institutions, raising alarms among cybersecurity professionals. Unprecedented Toolset in a…
-
Don’t Click >>Unsubscribe<< links blindly It May Leads to Loss of Credentials
Imagine your inbox is overflowing with promotional emails”, some from familiar companies, others less so. The temptation is real: click “unsubscribe” to stop the relentless stream. But what if that single click could lead to stolen credentials, malware on your device, or simply signal attackers that you’re an active and vulnerable target? Recent warnings from…
-
Breach Readiness In A Legacy World: The Risk, The Challenge, And The Way Forward
The Legacy Security Dilemma: Essential, Irreplaceable, and Exposed Despite the momentum of digital transformation, legacy systems remain integral to many operational environments, and not without reason. These systems often support mission-critical processes, are tightly woven into production workflows, and represent significant investments in both infrastructure and training. Replacing them can be costly, time-consuming,… First seen…
-
Breach Roundup: Critical RCE Flaw in Roundcube Servers
Also, M&S Back Online, Mexican Education Platform Breached, Patch Tuesday. This week, a Roundcube flaw, Mexican student data hacked and Dutch cops scare straight Cracked users. Man imprisoned for hacking tax preparers. M&S update. UNFI ships on a limited basis. U.K. financial regulator staffers used personal emails. Weak web panel security on GPS devices. Patch…
-
Forgotten patches: The silent killer
Tags: attack, automation, backup, breach, business, cloud, compliance, control, data, defense, detection, endpoint, exploit, infrastructure, tool, update, vulnerabilityAccuracy over convenience: It’s tempting to prioritize speed or ease. But making patching easier cannot come at the expense of accuracy. Light enforcement, delays in applying updates, or gaps between tools and policy all introduce risk.Patch management must detect when systems drift out of compliance, whether due to misconfiguration, agent failure, or an unexpected event,…