Tag: credentials
-
Zeabur shutting down after second security breach in two months
Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/zeabur-shutting-down-after-second-security-breach-in-two-months/
-
Nikkei data breach affected over 1.8 million records
Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclosed a data breach affecting more than 1.8 million records. The company, known for its financial news publications, including The Nikkei and the Financial Times, said attackers…
-
Nikkei data breach affected over 1.8 million records
Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclosed a data breach affecting more than 1.8 million records. The company, known for its financial news publications, including The Nikkei and the Financial Times, said attackers…
-
ConnectWise customers hit by supply-chain attack linked to compromised API secret
Hundreds of customers are confirmed impacted, as attackers use a sensitive credential to break into connected Microsoft 365 applications unimpeded. First seen on cyberscoop.com Jump to article: cyberscoop.com/connectwise-cloud-backup-supply-chain-attack/
-
Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials
Ocean Security found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF links… First seen on hackread.com Jump to article: hackread.com/scammers-frame-io-steal-microsoft-365-credentials/
-
Scammers Turn Legitimate Fintech Platforms Into Phishing Tools to Steal Banking Details
Scammers have weaponized a legitimate spend-management platform to send phishing messages and validate stolen financial credentials, turning trusted payment infrastructure into an operational part of fraud instead of attacking it directly. Group-IB documented the activity within a client environment after the platform reported suspicious payment notifications in late April 2026. According to the supplied research,…
-
Rank Math PRO WordPress Plugin Compromised to Spread Malware and Steal Credentials
Rank Math has reported a security incident involving malware distributed through Rank Math PRO version 3.0.123. They warn that WordPress websites using this compromised plugin are at risk if administrators activated it. The company has removed the affected files and released a clean version, 3.0.124. Rank Math PRO Compromised The incident impacts a limited number…
-
GhostAction Hackers Inject Malicious Security Workflows Into 790 GitHub Repositories
GhostAction has returned with an expanded credential-theft operation, injecting malicious GitHub Actions workflows into 790 repositories by October 9, 2026. GitGuardian first documented GhostAction in 2025, when it reported 817 affected repositories and 3,325 stolen secrets. The latest wave builds on the same account-takeover approach: attackers enumerate repositories a compromised maintainer can write to, then…
-
OpenCode Data Breach Exposes API Keys Linked to Third-Party Services
OpenCode has reported a security breach affecting 1.4% of its Console users, which it attributes to a “large-scale distillation attack.” The company said the affected accounts belong to a subset of users who had connected external providers. However, the public disclosure did not clarify if API keys were extracted or identify which specific credentials were…
-
Your frontline workers have a workaround for that MFA prompt
Frontline workers in healthcare and manufacturing are getting around slow, unreliable logins by staying signed in, sharing credentials and trying to bypass multifactor … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/20/frontline-worker-authentication-passwordless/
-
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users
Managed service providers said an attacker used compromised credentials to gain access to tenants. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/connecwise-suspends-cloud-backup-hacker-microsoft-365/833345/
-
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file.The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps First…
-
Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft
More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new… First seen on hackread.com Jump to article: hackread.com/fake-calendar-invites-firms-microsoft-credential-theft/
-
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers. First seen on therecord.media Jump to article: therecord.media/russia-cyberattack-firstvds-cloud
-
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers. First seen on therecord.media Jump to article: therecord.media/russia-cyberattack-firstvds-cloud
-
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers. First seen on therecord.media Jump to article: therecord.media/russia-cyberattack-firstvds-cloud
-
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers. First seen on therecord.media Jump to article: therecord.media/russia-cyberattack-firstvds-cloud
-
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers. First seen on therecord.media Jump to article: therecord.media/russia-cyberattack-firstvds-cloud
-
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers. First seen on therecord.media Jump to article: therecord.media/russia-cyberattack-firstvds-cloud
-
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers. First seen on therecord.media Jump to article: therecord.media/russia-cyberattack-firstvds-cloud
-
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises malicious JavaScript as a font file and targets developer workstations through Visual Studio Code tasks. Jenn Gile identified 94 compromised repositories belonging to 66 owners, confirming the payload in all 79 repositories available for analysis. The remaining 15 were inaccessible.…
-
AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials
Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a campaign observed between October 2025 and April 2026. The cluster remains unattributed. Under Unit 42’s attribution framework, “UNK” indicates that researchers have not determined whether the activity is state-sponsored or financially motivated. Its intelligence-gathering behavior does not…
-
AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials
Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a campaign observed between October 2025 and April 2026. The cluster remains unattributed. Under Unit 42’s attribution framework, “UNK” indicates that researchers have not determined whether the activity is state-sponsored or financially motivated. Its intelligence-gathering behavior does not…
-
Claude Code Desktop Flaw Let Malicious HTML Steal Developer Credentials
Noma Labs found a high-severity Claude Code Desktop flaw that let malicious HTML files steal local credentials and… First seen on hackread.com Jump to article: hackread.com/claude-code-desktop-flaw-html-steal-credentials/
-
China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign
Researchers say the hacker is harvesting credentials and stealing sensitive information. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/china-espionage-beyondtrust-zero-day-hacker/833240/