Tag: breach
-
Hacker Claims WooCommerce Data Breach, Selling 4m User Records
A hacker using the alias “Satanic” claims a WooCommerce data breach via a third party, selling data on… First seen on hackread.com Jump to article: hackread.com/hacker-claims-woocommerce-data-breach-selling-records/
-
Why traditional bot detection techniques are not enough, and what you can do about it
Bots are often used to conduct attacks at scale. They can be used to automatically test stolen credit cards, steal user accounts (account takeover), and create thousands of fake accounts. Detecting bot activity has traditionally relied on techniques like Web Application Firewalls (WAFs), CAPTCHAs, and static fingerprinting. However, with the First seen on securityboulevard.com Jump…
-
Sensitive financial files feared stolen from US bank watchdog
OCC mum on who broke into email, but Treasury fingered China in similar hack months ago First seen on theregister.com Jump to article: www.theregister.com/2025/04/09/occ_bank_email_hack/
-
Over 150K Treasury OCC emails compromised in almost two-year breach
First seen on scworld.com Jump to article: www.scworld.com/brief/over-150k-treasury-occ-emails-compromised-in-almost-two-year-breach
-
Senate Intel Vice Chair Prods Trump Over TikTok Plans
Sen. Mark Warner Says Talk of Oracle’s Involvement Worrisome Due to Recent Breaches. Speculation about software giant Oracle being a top contender to take over social media platform TikTok from China-based ByteDance is especially concerning considering Oracle’s two recent data breaches, said the co-chair of the Senate Intelligence Committee in a letter to the Trump…
-
Oracle Appears to Admit Breach of 2 ‘Obsolete’ Servers
The database company said its Oracle Cloud Infrastructure (OCI) was not involved in the breach. And at least one law firm seeking damages is already on the case. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/oracle-breach-2-obsolete-servers
-
Oracle says “obsolete servers” hacked, denies cloud breach
Oracle finally confirmed in email notifications sent to customers that a hacker stole and leaked credentials that were stolen from what it described as “two obsolete servers.” First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oracle-says-obsolete-servers-hacked-denies-cloud-breach/
-
Cybercriminals Attacked National Social Security Fund of Morocco – Millions of Digital Identities at Risk of Data Breach
First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/cybercriminals-attacked-national-social-security-fund-of-morocco-millions-of-digital-identities-at-risk-of-data-breach
-
National Social Security Fund of Morocco Suffers Data Breach
Threat actor ‘Jabaroot’ claims breach of National Social Security Fund of Morocco, aiming to steal large volumes of sensitive citizen data. Resecurity has identified a threat actor targeting government systems in Morocco with the goal of exfiltrating large volumes of sensitive data relating to citizens. The actor using the alias ‘Jabaroot’ released claims about the…
-
Is HR running your employee security training? Here’s why that’s not always the best idea
Tags: attack, awareness, best-practice, breach, business, ciso, communications, compliance, cyber, cybersecurity, data, finance, guide, healthcare, privacy, resilience, risk, security-incident, service, threat, training, vulnerabilityHR doesn’t have specialized security knowledge: Another limitation is that an organization’s security training can be a component in maintaining certain certifications, compliance, contractual agreements, and customer expectations, according to Hughes.”If that’s important to your organization, then security, IT, and compliance teams will know the subjects to cover and help guide in the importance of…
-
Hackers Claim Magento Breach via Third-Party, Leak CRM Data of 700K Users
Another day, another data breach claim involving a high-profile company! First seen on hackread.com Jump to article: hackread.com/hackers-magento-breach-3rd-party-crm-data-leak/
-
US banking regulator reports on ‘major’ cyber incident involving senior officials’ emails
The U.S. Office of the Comptroller of the Currency told Congress that a breach of its email systems reported in February involved “highly sensitive information” in the accounts of high-ranking officials. First seen on therecord.media Jump to article: therecord.media/office-comptroller-currency-email-hack-report
-
Germany links cyberattack on research group to Russian state-backed hackers
The German Association for Eastern European Studies (DGO) said the attack at the end of March targeted email systems, bypassing security measures put in place after another recent breach with suspected Russian links. First seen on therecord.media Jump to article: therecord.media/germany-links-cyberattack-russian-hackers
-
CentreStack RCE exploited as zero-day to breach file sharing servers
Hackers exploited a vulnerability in Gladinet CentreStack’s secure file-sharing software as a zero-day since March to breach storage servers First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/centrestack-rce-exploited-as-zero-day-to-breach-file-sharing-servers/
-
Medusa Ransomware Claims NASCAR Breach in Latest Attack
Medusa ransomware hits NASCAR, demands $4M ransom, leaks internal files. Group also claims Bridgebank, McFarland, and Pulse Urgent Care. First seen on hackread.com Jump to article: hackread.com/medusa-ransomware-claims-nascar-breach-latest-attack/
-
WK Kellogg confirms Cleo attack-related breach
First seen on scworld.com Jump to article: www.scworld.com/brief/wk-kellogg-confirms-cleo-attack-related-breach
-
Hackers lurked in Treasury OCC’s systems since June 2023 breach
Unknown attackers who breached the Treasury’s Office of the Comptroller of the Currency (OCC) in June 2023 gained access to over 150,000 emails. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-lurked-in-treasury-occs-systems-since-june-2023-breach/
-
WK Kellogg confirms employee data breach tied to Cleo file-transfer flaw
The Michigan-based breakfast cereal company confirmed it used Cleo as a vendor for human resources data. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/wk-kellogg-employee-data-breach-cleo/744739/
-
HellCat Ransomware Hits 4 Firms using Infostealer-Stolen Jira Credentials
HellCat ransomware hits 4 companies by exploiting Jira credentials stolen through infostealer malware, continuing their global attack spree. First seen on hackread.com Jump to article: hackread.com/hellcat-ransomware-firms-infostealer-stolen-jira-credentials/
-
Over £18m stolen from Santander UK customers in first three months of year
Bank’s latest quarterly report on scams said over £18m was stolen from its UK customers by scammers First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622214/Over-18m-stolen-from-Santander-UK-customers-in-first-three-months-of-year
-
Oracle Confirms Breach: Hackers Stole Client Login Credentials
Oracle Corporation has officially confirmed a cybersecurity breach in which hackers infiltrated its systems and stole client login credentials. This marks the second security incident disclosed by the software giant in less than a month, raising alarm among customers and cybersecurity professionals worldwide. According to sources familiar with the matter, Oracle informed certain clients earlier…
-
Threat Actor Leaks Data from Major Bulletproof Hosting Provider Medialand
Tags: breach, control, cyber, cybercrime, data, data-breach, infrastructure, leak, malware, phishing, ransomware, threatA threat actor disclosed internal data from Medialand, a prominent bulletproof hosting (BPH) provider long associated with Yalishanda, a cybercriminal organization tracked as LARVA-34. The breach has exposed the backend systems and operational infrastructure of Medialand, which has historically facilitated a wide array of illicit cyber activities, including ransomware operations, malware control-and-command systems, phishing campaigns,…
-
Kellogg’s Servers Breached, Hackers Steal Sensitive Data
WK Kellogg Co., one of the world’s leading cereal and snack manufacturers, has fallen victim to a significant data breach, exposing the sensitive information of an undisclosed number of individuals. The breach, which occurred on December 7, 2024, was only discovered nearly three months later on February 27, 2025, according to a notification submitted by…
-
10 things you should include in your AI policy
Tags: access, ai, best-practice, breach, business, ceo, ciso, compliance, cybersecurity, data, data-breach, finance, framework, gartner, GDPR, governance, incident response, insurance, law, monitoring, privacy, regulation, risk, software, strategy, switch, technology, tool, training, updateInput from all stakeholders: At Aflac, the security team took the initial lead on developing the company’s AI policy. But AI is not just a security concern. “And it’s not just a legal concern,” Ladner says. “It’s not just a privacy concern. It’s not just a compliance concern. You need to bring all the stakeholders…
-
5 Non-Human Identity Breaches That Workload IAM Could Have Prevented
5 min readEach breach exploited a gap in how workloads authenticate and access resources. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/5-non-human-identity-breaches-that-workload-iam-could-have-prevented/
-
Top Australian Pension Funds Breached in Coordinated Hacks
Hackers Use Credential Stuffing to Steal AU$500,000, Breach 20,000 Member Accounts. Australia’s largest pension funds faced coordinated credential attacks last week that compromised thousands of user accounts and led to the theft of at least AU$500,000 from four superannuation accounts. The affected funds included AustralianSuper, Rest and Australian Retirement Trust. First seen on govinfosecurity.com Jump…