Collecting Cyber-News from over 60 sources

Tag: breach

EncryptHub’s dual life: Cybercriminal vs Windows bug-bounty researcher

Apr 8, 2025 12:42 AM

Tags: breach, bug-bounty, cybercrime, microsoft, threat, vulnerability, windows, zero-day

EncryptHub, a notorious threat actor linked to breaches at 618 organizations, is believed to have reported two Windows zero-day vulnerabilities to Microsoft, revealing a conflicted figure straddling the line between cybercrime and security research. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/encrypthubs-dual-life-cybercriminal-vs-windows-bug-bounty-researcher/
Dental Practice Support Firm Notifying 173,400 of Email Hack

Apr 7, 2025 11:42 PM

Tags: breach, email, finance, hacking, service

Breach Affects Pediatric, Orthodontic and Dental Surgery Practices in 6 States. A Nashville, Tennessee firm that provides HR and finance services to dozens of specialty dental practices across six states is notifying more than 173,400 people of a 2024 email hacking incident affecting children and other patients. The company already faces several lawsuits related to…
That massive GitHub supply chain attack? It all started with a stolen SpotBugs token

Apr 7, 2025 10:42 PM

Tags: attack, breach, github, supply-chain

But this mystery isn’t over yet, Unit 42 opines First seen on theregister.com Jump to article: www.theregister.com/2025/04/07/github_supply_chain_attack/
Europcar GitLab Breach Exposes Customer Data

Apr 7, 2025 10:42 PM

Tags: breach, data, gitlab

First seen on scworld.com Jump to article: www.scworld.com/brief/europcar-gitlab-breach-exposes-customer-data
Up to 200K purportedly impacted by Europcar GitLab breach

Apr 7, 2025 10:42 PM

Tags: breach, gitlab

First seen on scworld.com Jump to article: www.scworld.com/brief/up-to-200k-purportedly-impacted-by-europcar-gitlab-breach
23andMe Data Breach: A Wake-Up Call for Consumer Privacy and Corporate Accountability

Apr 7, 2025 9:42 PM

Tags: breach, corporate, data, data-breach, privacy

In recent months, the fallout from the 23andMe data breach has offered a sobering reminder of the real-world implications of poor data security”, and the profound responsibility companies bear when entrusted with sensitive consumer information. In October 2023, 23andMe, one of the most well-known consumer genetic testing companies, disclosed a significant breach that affected nearly…
Food giant WK Kellogg discloses data breach linked to Clop ransomware

Apr 7, 2025 6:42 PM

Tags: breach, data, data-breach, ransomware, theft

US food giant WK Kellogg Co is warning employees and vendors that company data was stolen during the 2024 Cleo data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/food-giant-wk-kellogg-discloses-data-breach-linked-to-clop-ransomware/
Brothers Behind Rydox Dark Web Market Extradited to US

Apr 7, 2025 6:42 PM

Tags: breach, dark-web, data, hacking, usa

USA secures extradition of criminals from 9 countries, including two brothers behind Rydox, a dark web market for stolen data and hacking tools. First seen on hackread.com Jump to article: hackread.com/brothers-rydox-dark-web-market-extradited-to-us/
Five Steps to Move to Exposure Management

Apr 7, 2025 6:42 PM

Tags: access, attack, breach, business, cloud, compliance, cve, cyber, data, exploit, group, identity, infrastructure, Internet, iot, monitoring, network, password, risk, service, software, strategy, technology, threat, tool, vulnerability, vulnerability-management

Each Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, we explore the five steps to take on your journey to exposure management. You can read the entire Exposure Management Academy series here. Chances are, you’re buried in vulnerabilities and…
âš¡ Weekly Recap: VPN Exploits, Oracle’s Silent Breach, ClickFix Surge and More

Apr 7, 2025 4:42 PM

Tags: breach, cloud, credentials, data-breach, exploit, Hardware, jobs, malware, oracle, password, service, social-engineering, supply-chain, vpn

Today, every unpatched system, leaked password, and overlooked plugin is a doorway for attackers. Supply chains stretch deep into the code we trust, and malware hides not just in shady apps, but in job offers, hardware, and cloud services we rely on every day.Hackers don’t need sophisticated exploits anymore. Sometimes, your credentials and a little…
âš¡ Weekly Recap: VPN Exploits, Oracle’s Silent Breach, ClickFix Comeback and More

Apr 7, 2025 3:42 PM

Tags: breach, cloud, credentials, data-breach, exploit, Hardware, jobs, malware, oracle, password, service, social-engineering, supply-chain, vpn

Today, every unpatched system, leaked password, and overlooked plugin is a doorway for attackers. Supply chains stretch deep into the code we trust, and malware hides not just in shady apps, but in job offers, hardware, and cloud services we rely on every day.Hackers don’t need sophisticated exploits anymore. Sometimes, your credentials and a little…
Port of Seattle Says 90,000 People Impacted by Ransomware Attack

Apr 7, 2025 1:42 PM

Tags: attack, breach, ransomware

The Port of Seattle says the personal information of 90,000 individuals was stolen in an August 2024 ransomware attack. The post Port of Seattle Says 90,000 People Impacted by Ransomware Attack appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/port-of-seattle-says-90000-people-impacted-by-ransomware-attack/
PoisonSeed Campaign uses stolen email credentials to spread crypto seed scams and and empty wallets

Apr 7, 2025 1:42 PM

Tags: breach, credentials, crypto, email, malicious, scam

A campaign named PoisonSeed uses stolen CRM and bulk email credentials to send crypto seed scams, aiming to empty victims’ digital wallets. Silent Push researchers warn of a malicious PoisonSeed campaign that uses stolen CRM and bulk email provider credentials to send crypto seed phrase spam. Victims are tricked into importing compromised seed phrases into…
DeepSeek Breach Yet Again Sheds Light on Dangers of AI

Apr 7, 2025 12:42 PM

Tags: ai, breach, data-breach, encryption, vulnerability

AI isn’t waiting for security teams to catch up. It’s running full steam ahead, without any regard for what may stand in its way. The recent security debacle surrounding DeepSeek, where Wiz researchers uncovered extensive vulnerabilities, including exposed databases, weak encryption and susceptibility to AI-model jailbreaking, serves as a stark warning for organizations.. First seen…
Unbefugter Zugriff bei einem Gesundheitssystem in Neuseeland

Apr 7, 2025 6:42 AM

Tags: access, breach

Te Whatu Ora reveals IT breach in Central region First seen on healthcareitnews.com Jump to article: www.healthcareitnews.com/news/anz/te-whatu-ora-reveals-it-breach-central-region
Oracle privately notifies Cloud data breach to customers

Apr 6, 2025 11:42 PM

Tags: breach, cloud, data, data-breach, oracle, threat

Oracle confirms a cloud data breach, quietly informing customers while downplaying the impact of the security breach. Oracle confirms a data breach and started informing customers while downplaying the impact of the incident. A threat actor using the moniker ‘rose87168’ claimed to possess millions of data lines tied to over 140,000 Oracle Cloud tenants, including…
Hacker Claims Twilio’s SendGrid Data Breach, Selling 848,000 Records (UPDATED)

Apr 6, 2025 4:42 PM

Tags: breach, data, data-breach, hacker

This article has been updated with a statement from a Twilio spokesperson in response to Hackread.com’s request. A statement from the hacker has also been added claiming that the data is authentic. First seen on hackread.com Jump to article: hackread.com/hacker-twilio-sendgrid-data-breach-customer-data/
Oracle quietly confirms to customers that breach was of ‘legacy’ environment

Apr 5, 2025 11:42 PM

Tags: breach, oracle

First seen on scworld.com Jump to article: www.scworld.com/news/oracle-cloud-breach-reports-continue-to-pile-up
Separate breaches reported by Texas city’s utility payment site, state bar

Apr 5, 2025 11:42 PM

Tags: breach

First seen on scworld.com Jump to article: www.scworld.com/brief/separate-breaches-reported-by-texas-citys-utility-payment-site-state-bar
Alleged massive SendGrid breach repudiated

Apr 5, 2025 11:42 PM

Tags: breach

First seen on scworld.com Jump to article: www.scworld.com/brief/alleged-massive-sendgrid-breach-repudiated
Oracle breach reportedly acknowledged in private

Apr 5, 2025 11:42 PM

Tags: breach, oracle

First seen on scworld.com Jump to article: www.scworld.com/brief/oracle-breach-reportedly-acknowledged-in-private
Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

Apr 5, 2025 6:42 PM

Tags: breach, cybersecurity, flaw, hacker, microsoft, windows

A likely lone wolf actor behind the EncryptHub persona was acknowledged by Microsoft for discovering and reporting two security flaws in Windows last month, painting a picture of a “conflicted” individual straddling a legitimate career in cybersecurity and pursuing cybercrime.In a new extensive analysis published by Outpost24 KrakenLabs, the Swedish security company unmasked the up-and-coming…
Port of Seattle ‘s August data breach impacted 90,000 people

Apr 5, 2025 12:42 PM

Tags: attack, breach, cyber, data, data-breach, international, phone, ransomware

Port of Seattle is notifying 90,000 people of a data breach after personal data was stolen in a ransomware attack in August 2024. In August 2024, a cyber attack hit the Port of Seattle, which also operates the Seattle-Tacoma International Airport. The attack impacted websites and phone systems. According to The Seattle Times, the cyber…
Are You Certain Your Secrets Are Safe?

Apr 5, 2025 5:45 AM

Tags: access, breach, cloud, data, unauthorized

Is Your Organization Fully Protected Against Security Breaches? Non-Human Identities (NHIs) have emerged as key players in fortifying the security of cloud environments. When an amalgamation of encrypted keys, these machine identities function as formidable barriers against unauthorized access, ensuring your sensitive data remains uncompromised. Unmasking the Role of Non-Human Identities (NHIs) NHIs are essentially……
When AI Agents Start Whispering: The Double-Edged Sword of Autonomous Agent Communication

Apr 5, 2025 1:42 AM

Tags: ai, breach, compliance, framework, monitoring

AI agents develop their own communication channels beyond our monitoring frameworks, we face a pivotal challenge: harnessing their collaborative problem-solving potential while preventing security breaches and compliance violations that could arise when systems start “whispering” among themselves. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/when-ai-agents-start-whispering-the-double-edged-sword-of-autonomous-agent-communication/
Port of Seattle says 90,000 people impacted in 2024 ransomware attack

Apr 4, 2025 9:42 PM

Tags: attack, breach, container, international, ransomware

The organization that runs Seattle-Tacoma International Airport and several container terminals said it is sending breach notification letters to those affected by a ransomware attack, including about 71,000 people in Washington state. First seen on therecord.media Jump to article: therecord.media/port-of-seattle-says-90000-impacted-in-2024-ransomware-attack
Port of Seattle says ransomware breach impacts 90,000 people

Apr 4, 2025 8:42 PM

Tags: breach, data, data-breach, government, ransomware

Port of Seattle, the U.S. government agency overseeing Seattle’s seaport and airport, is notifying roughly 90,000 individuals of a data breach after their personal information was stolen in an August 2024 ransomware attack. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/port-of-seattle-says-ransomware-breach-impacts-90-000-people/
State Bar of Texas Confirms Data Breach, Begins Notifying Affected Consumers

Apr 4, 2025 8:42 PM

Tags: access, breach, cyber, data, data-breach, detection, network, unauthorized

The State Bar of Texas has confirmed a data breach following the detection of unauthorized activity on its network earlier this year. According to an official notice, the breach occurred between January 28, 2025, and February 9, 2025, during which an unauthorized actor gained access to sensitive information stored on the organization’s systems. The intrusion…
Why is Cloud Security Audit Important for Businesses?

Apr 4, 2025 7:42 PM

Tags: access, breach, cloud, data, finance, unauthorized

Cloud security audit is essential to protect cloud-hosted applications and data from unauthorized access and theft. While cloud providers offer businesses the advantage of hosting apps and data with ease, this flexibility comes with security risks. A breach in cloud security can lead to significant financial and reputational damage, requiring substantial resources to address and……
Oracle Confirms The Data Breach- Starts Initiating Client Notifications

Apr 4, 2025 6:42 PM

Tags: breach, cyber, cybersecurity, data, data-breach, oracle, vulnerability

Oracle Corporation has confirmed a data breach involving its older Gen 1 servers, marking its second cybersecurity incident disclosed in recent weeks. This breach underscores vulnerabilities in legacy systems and raises concerns about the company’s ability to safeguard sensitive client data. Details of the Breach According to a Cyber Security News report, the breach was…