Tag: breach
-
Ukrainian sentenced to 5 years in prison for facilitating North Korean remote worker scheme
Oleksandr Didenko ran laptop farms and provided forged or stolen identities to North Korean operatives who gained remote employment at 40 U.S. businesses. First seen on cyberscoop.com Jump to article: cyberscoop.com/doj-ukrainian-north-korea-remote-worker-scheme-facilitator-sentenced/
-
FBI says ATM ‘jackpotting’ attacks are on the rise, and netting hackers millions in stolen cash
The FBI says hacks that trick ATMs into spitting out cash on demand are rising, with hundreds of attacks in the past year alone netting hackers millions in stolen bills. First seen on techcrunch.com Jump to article: techcrunch.com/2026/02/19/fbi-says-atm-jackpotting-attacks-are-on-the-rise-and-netting-hackers-millions-in-stolen-cash/
-
Researchers warn Volt Typhoon still embedded in US utilities and some breaches may never be found
Dragos’s Rob Lee said Volt Typhoon is “still very active, and they’re still absolutely mapping out and getting into embedding in U.S. infrastructure, as well as across our allies.” First seen on therecord.media Jump to article: therecord.media/researchers-warn-volt-typhoon-still-active-critical-infrastructure
-
Breach Roundup: Cambodia Scam Center Crackdown
Also: EU Bans AI Tools, Notepad++ Secures Updater, Apple Patches iOS Zero-Day. This week, Cambodia shuttered 200 scam centers. EU Parliament banned AI tools. Canada Goose disputed a ShinyHunters leak. Notepad++ patched an updater flaw. Apple fixed a decades-old iOS zero-day. BeyondTrust and Dell patched critical flaws under active exploitation. First seen on govinfosecurity.com Jump…
-
Threat groups use AI to speed up and scale cyberattacks
A report from Palo Alto Networks finds hackers are increasingly using stolen identities and exploiting critical vulnerabilities within minutes of disclosure. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/threat-groups-ai-speed-scale-cyberattacks/812439/
-
Attackers breach France’s national bank account database
A spokesperson for the French government said potentially 1.2 million accounts were impacted by the incident. First seen on therecord.media Jump to article: therecord.media/attackers-breach-france-national-bank-account-database
-
How infostealers turn stolen credentials into real identities
Infostealer dumps increasingly tie stolen credentials to real identities, linking usernames, cookies, and behavior across personal and enterprise accounts. Specops explains how analyzing 90,000 dumps shows reuse fuels enterprise risk and how continuous AD scanning disrupts that cycle. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/how-infostealers-turn-stolen-credentials-into-real-identities/
-
Data on 1.2 million French bank accounts accessed in registry breach
In late January 2026, a malicious intruder accessed France’s national bank account registry, FICOBA, enabling them to view information tied to 1.2 million accounts, the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/19/ficoba-data-breach-bank-accounts/
-
Adidas investigates alleged data breach affecting 815,000 records
Adidas confirmed it is investigating a possible data breach involving one of its third-party customer service providers. The company stated that there is no indication its IT … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/19/adidas-third-party-data-breach-investigation/
-
Adidas investigates third-party data breach after criminals claim they pwned the sportswear giant
‘Potential data protection incident’ at an ‘independent licensing partner,’ we’re told First seen on theregister.com Jump to article: www.theregister.com/2026/02/18/adidas_investigates_thirdparty_data_breach/
-
What techniques in NHI management offer maximum reassurance?
Is Your Organization Ready for Maximum Security with Non-Human Identities? Where security breaches are a common news headline, managing Non-Human Identities (NHIs) is more crucial than ever. These machine identities, which are akin to digital passports used by software agents, have become a staple for organizations operating in cloud environments. You understand the importance of……
-
Figure Breach Enters New Phase After Data Leak Claims
The data breach disclosed by fintech lender Figure Technology Solutions is moving beyond a contained security incident, as reports that stolen customer information is circulating online coincide with early legal investigations. The developments mark the point where an internal breach begins to create broader consumer risk and potential liability. Latest Developments Data associated with the……
-
French Ministry confirms data access to 1.2 Million bank accounts
A hacker accessed data from 1.2 million French bank accounts using stolen official credentials, the Economy Ministry said. A hacker gained access to data from 1.2 million French bank accounts using stolen credentials belonging to a government official, according to the French Economy Ministry. French authorities said affected account holders will be notified in the…
-
Betterment data breach might be worse than we thought
This breach now appears far more serious. The leaked data includes rich personal and financial details that phishers could use. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/betterment-data-breach-might-be-worse-than-we-thought/
-
Data breach at fintech giant Figure affects close to a million customers
The Figure data breach allowed hackers to steal customer names, dates of birth, physical addresses, phone numbers, and email addresses. First seen on techcrunch.com Jump to article: techcrunch.com/2026/02/18/data-breach-at-fintech-giant-figure-affects-close-to-a-million-customers/
-
Substack Breach May Have Leaked Nearly 700,000 User Details Online
Substack says hackers accessed user emails, phone numbers, and internal metadata in October 2025, with a database of 697,313 records later posted online. The post Substack Breach May Have Leaked Nearly 700,000 User Details Online appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-substack-data-breach-user-accounts-leaked/
-
Identity and supply chain need more attention, risk intelligence firm says
Roughly a third of attacks now use stolen credentials, according to the company’s latest report. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/identity-supply-chain-dataminr-report/812447/
-
Threat groups using AI to speed up and scale cyberattacks
A report from Palo Alto Networks finds hackers are increasingly using stolen identities and exploiting critical vulnerabilities within minutes of disclosure. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/threat-groups-ai-speed-scale-cyberattacks/812439/
-
Telegram channels expose rapid weaponization of SmarterMail flaws
Underground Telegram channels shared SmarterMail exploit PoCs and stolen admin credentials within days of disclosure. Flare explains how monitoring these communities reveals rapid weaponization of CVE-2026-24423 and CVE-2026-23760 tied to ransomware activity. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/telegram-channels-expose-rapid-weaponization-of-smartermail-flaws/
-
Data breach at fintech firm Figure affects nearly 1 million accounts
Hackers have stolen the personal and contact information of nearly 1 million accounts after breaching the systems of Figure Technology Solutions, a self-described blockchain-native financial technology company. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/data-breach-at-fintech-firm-figure-affects-nearly-1-million-accounts/
-
One stolen credential is all it takes to compromise everything
Attackers often gain access through routine workflows like email logins, browser sessions, and SaaS integrations. A single stolen credential can give them a quick path to move … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/18/identity-based-cyberattacks-compromise/
-
Security Metrics That Actually Predict a Breach
Identity drift, stale access paths, alert fatigue, and risky change patterns are the security metrics most likely to predict a breach. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/security-metrics-that-actually-predict-a-breach/
-
Kettering Health Notifying Patients of Interlock Breach
Cybercrime Group First Listed Ohio Health System as a Data Theft Victim Last June. Ohio-based Kettering Health is notifying current and former patients and affiliates that their personal, health and financial information was potentially compromised in a May 2025 ransomware attack and data theft incident claimed by cybercriminal gang Interlock. First seen on govinfosecurity.com Jump…
-
Canada Goose says leaked customer transaction data did not come from company systems
On Saturday afternoon, the ShinyHunters cybercriminal organization claimed to have stolen more than 600,000 records from the company containing personal information. First seen on therecord.media Jump to article: therecord.media/canada-goose-says-leaked-customer-data-was-not-from-company
-
Elon Musk’s AI Bot Snared in New Irish, European Probes
GrokAI Non-Consensual Sexual Imagery Raises Official Hackles. European regulatory pressure on Elon Musk’s X social media network intensified this week with new probes into potential breaches of privacy roles by Grok AI chatbot. X claims to have stopped Grok from outputting the offending images, but apparently the chatbot still generates them. First seen on govinfosecurity.com…
-
Data Minimization Is Still an Underrated Security Control
Why Reducing Data Volume Matters More Than Ever for SOCs and CISOs Data minimization is often perceived as a constraint on innovation. In reality, it is the ultimate enabler of resilience. It reduces the impact of breaches, weakens ransomware leverage, improves SOC efficiency and secures the AI frontier. First seen on govinfosecurity.com Jump to article:…
-
Top 5 Learnings from the 2026 Identity Breach Report
The 2026 Identity Breach Report marks a definitive shift in the cyber threat landscape, transitioning from simple data collection to what can only be described as the Industrialization of Identity. As adversaries adopt machine-scale automation, they are no longer just “leaking” data”, they are running high-velocity pipelines designed to weaponize human identities at an unprecedented scale.…
-
Previously Compromised Data: Why Credential Exposure Never Expires
For years, organizations have framed breach risk as something finite. A breach occurs, notifications are sent, passwords are reset, and the incident is eventually considered closed. On paper, that model suggests progress. In reality, it creates a dangerous false sense of closure. Recent breach analysis shows fewer massive breach notifications reaching consumers, yet credential-based attacks,……