Tag: breach
-
Data breach compromises STIIIZY customers’ data
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-compromises-stiiizy-customers-data
-
Infostealer Infections Lead to Telefonica Ticketing System Breach
Infostealer malware allowed threat actors to compromise Telefonica employees’ credentials and access the company’s internal ticketing system. The post Infostealer Infections Lead to Telefonica Ticketing System Breach appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/infostealer-infections-lead-to-telefonica-internal-ticketing-system-breach/
-
EU law enforcement training agency data breach: Data of 97,000 individuals compromised
Personal data of nearly 100,000 individuals that have participated in trainings organized by CEPOL, the European Union (EU) Agency for Law Enforcement Training, has … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/13/eu-law-enforcement-training-agency-data-breach-cepol/
-
HHS Proposes Major Overhaul of HIPAA Security Rule in the Wake of Change Healthcare Breach
The new rules come in the wake of the Change Healthcare breach, which exposed the electronic personal health information of about 100 million Americans. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/hhs-proposes-major-overhaul-of-hipaa-security-rule-in-the-wake-of-change-healthcare-breach/
-
Open Bullet 2: The Preferred Credential Stuffing Tool for Bots
Open Bullet 2 is an open-source software, specialized in credential stuffing attacks, i.e. attacks that use bots to automatically steal user accounts at scale by automatically testing stolen credentials found in data breaches. It can target both websites and mobile applications. When it comes to credential-stuffing attacks, Open Bullet First seen on securityboulevard.com Jump to…
-
OneBlood confirms personal data stolen in July ransomware attack
Blood-donation not-for-profit OneBlood confirms that donors’ personal information was stolen in a ransomware attack last summer. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/oneblood-confirms-personal-data-stolen-in-july-ransomware-attack/
-
Stolen Path of Exile 2 admin account used to hack player accounts
Path of Exile 2 developers confirmed that a hacked admin account allowed a threat actor to change the password and access at least 66 accounts, finally explaining how PoE 2 accounts have been breached since November. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/stolen-path-of-exile-2-admin-account-used-to-hack-player-accounts/
-
UK domain registry Nominet confirms breach via Ivanti zero-day
Nominet, the official .UK domain registry and one of the largest country code registries, has confirmed that its network was breached two weeks ago using an Ivanti VPN zero-day vulnerability. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-domain-registry-nominet-confirms-breach-via-ivanti-zero-day-vulnerability/
-
A breach of a data broker’s trove of location data threatens the privacy of millions
The company confirmed the breach after a hacker posted millions of location data records online. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/13/gravy-analytics-data-broker-breach-trove-of-location-data-threatens-privacy-millions/
-
Hackers Breach Telefonica Network, Leak 2.3 GB of Data Online
Telefónica faces a data breach impacting its internal systems, linked to hackers using compromised credentials. Learn more about this alarming cyber threat. First seen on hackread.com Jump to article: hackread.com/hackers-breach-telefonica-network-leak-data-online/
-
Telefonica Breach Hits 20,000 Employees and Exposes Jira Details
Telefonica has confirmed a breach of its internal ticketing system exposing more than 236,000 lines of customer data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/telefonica-breach-20000-employees/
-
Stay on top of tech: five ways to take back control, from emails to AI
Is tech calling the shots in your life? From making AI work smarter to tracking stolen phones, our expert explains how to get aheadAsking ChatGPT to write your emails is so two years ago. Generative AI tools are now going beyond the basic text-prompt phase. Take Google’s <a href=”https://notebooklm.google/”>NotebookLM, an experimental “AI research assistant” that…
-
Microsoft took legal action against crooks who developed a tool to abuse its AI-based services
In December, Microsoft sued a group for creating tools to bypass safety measures in its cloud AI products. Microsoft filed a complaint with the Eastern District Court of Virginia against ten individuals for using stolen credentials and custom software to breach computers running Microsoft’s Azure OpenAI services to generate content for harmful purposes. >>Defendants used…
-
Furry Hacker Breaches Scholastic Exposes Data of 8 Million People
The education and publishing giant Scholastic has fallen victim to a significant data breach affecting approximately 8 million people. The breach, which has been attributed to a self-proclaimed >>furry
-
Security Affairs newsletter Round 506 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. DoJ charged three Russian citizens with operating crypto-mixing services U.S. cannabis dispensary STIIIZY disclosed a data breach A…
-
U.S. cannabis dispensary STIIIZY disclosed a data breach
US marijuana dispensary STIIIZY warns customers of leaked IDs and passports following a November data breach. US marijuana dispensary STIIIZY disclosed a data breach after a vendor’s point-of-sale system was compromised by cybercriminals. The security breach exposed customer data and IDs between October 10 and November 10, 2024. After discovering the security breach, the company…
-
Marijuana dispensary STIIIZY warns of leaked IDs after November data breach
A data breach in November exposed the IDs and passports of people who bought products from STIIIZY, a large marijuana dispensary in California. ]]> First seen on therecord.media Jump to article: therecord.media/marijuana-dispensary-warns-of-data-breach
-
New York sues to recover $2 million in crypto stolen in remote job scams
The funds are linked to a widespread scheme in which fraudsters promised to pay victims if they opened a cryptocurrency account, deposited funds and reviewed products on fictitious websites mimicking legitimate brands.]]> First seen on therecord.media Jump to article: therecord.media/new-york-sues-recover-millions
-
Chinese hackers breach office that reviews foreign investments in US
First seen on scworld.com Jump to article: www.scworld.com/news/chinese-hackers-breach-office-that-reviews-foreign-investments-in-us
-
Data breach disclosed by BayMark Health Services
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-disclosed-by-baymark-health-services
-
The Cost of Complacency in Credential Hygiene
The PowerSchool breach highlights the risks of poor credential hygiene. This article covers proactive steps to protect your SaaS environment. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/the-cost-of-complacency-in-credential-hygiene/
-
Telefónica confirms internal ticketing system breach after data leak
Spanish telecommunications company Telefónica confirms its internal ticketing system was breached after stolen data was leaked on a hacking forum. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/telefonica-confirms-internal-ticketing-system-breach-after-data-leak/
-
US charges operators of cryptomixers linked to ransomware gangs
The U.S. Department of Justice indicted three operators of sanctioned Blender.io and Sinbad.io crypto mixer services used by ransomware gangs and North Korean hackers to launder ransoms and stolen cryptocurrency. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-charges-operators-of-cryptomixers-linked-to-ransomware-gangs/
-
Cannabis company Stiiizy says hackers accessed customers’ ID documents
A ransomware gang took credit for the breach, claiming to have stolen over 400,000 government-issued identity documents from customers. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/10/cannabis-company-stiiizy-says-hackers-accessed-customers-id-documents/
-
In Other News: Bank of America Warns of Data Breach, Trucking Cybersecurity, Treasury Hack Linked to Silk Typhoon
Noteworthy stories that might have slipped under the radar: 2025 trucking cybersecurity report, Bank of America discloses data breach, Silk Typhoon behind US Treasury hack. The post In Other News: Bank of America Warns of Data Breach, Trucking Cybersecurity, Treasury Hack Linked to Silk Typhoon appeared first on SecurityWeek. First seen on securityweek.com Jump to…
-
Vulnerability Remediation vs Mitigation: Which Strategy Wins in Cybersecurity?
Cybersecurity vulnerabilities pose significant risks to organizations in today’s digital landscape. Left unaddressed, these vulnerabilities can lead to data breaches, financial losses, and reputational damage. Organizations must decide how to tackle vulnerabilities”, through remediation, mitigation, or a combination of both. But which strategy is more effective? This blog explores the nuances of vulnerability remediation vs…
-
Major Addiction Treatment Firm BayMark Confirms Ransomware Attack Caused Data Breach
Substance abuse treatment provider BayMark Health Services says patient personal information was compromised in a data breach. The post Major Addiction Treatment Firm BayMark Confirms Ransomware Attack Caused Data Breach appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/major-addiction-treatment-firm-baymark-confirms-ransomware-attack-caused-data-breach/
-
Malware targets Mac users by using Apple’s security tool
A variant of the Banshee macOS infostealer was seen duping detection systems with new string encryption copied from Apple’s in-house algorithm.A Check Point research, which caught the variant after two months of successful evasion, said threat actors distributed Banshee using phishing websites and fake GitHub repositories, often impersonating popular software like Google Chrome, Telegram, and…
-
Medusind Breach Exposes Sensitive Patient Data
The US medical billing firm is notifying over 360,000 customers that their personal, financial and medical data may have been exposed First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/medusind-breach-patient-data/