Tag: data-breach
-
Interlock and the Kettering Ransomware Attack: ClickFix’s Persistence
Tags: access, attack, breach, captcha, ciso, computer, control, credentials, cyberattack, data, data-breach, detection, endpoint, exploit, group, healthcare, HIPAA, incident response, injection, malicious, mobile, network, phishing, powershell, ransom, ransomware, risk, saas, service, technology, threat, tool, vulnerabilityIn healthcare, every minute of downtime isn’t just a technical problem”Š”, “Šit’s a patient safety risk. CNN recently reported that Kettering Health, a major hospital network in Ohio, was hit by a ransomware attack. According to CNN, the Interlock ransomware group claimed responsibility, sending a chilling reminder that healthcare remains a prime target for this particular…
-
Cartier-Datenleck: Was Betroffene jetzt tun können
Ein Hackerangriff hat persönliche Kundendaten der Luxusmarke Cartier offengelegt. Betroffene können unter Umständen Anspruch auf Schadensersatz geltend machen auch ohne konkreten Missbrauch ihrer Daten. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/cartier-datenleck
-
Bevor es ‘knallt”: Wie Data Breach Containment Angriffe stoppt, bevor sie eskalieren
Ransomware-Angriffe verdoppeln sich, Erkennungszeiten bleiben erschreckend lang und trotzdem setzen viele Unternehmen noch immer auf reaktive Sicherheit. Dabei liegt der Schlüssel zur Cyber-Resilienz längst in der proaktiven Eindämmung. Wie Data Breach Containment zur tragenden Säule moderner IT-Sicherheitsarchitekturen wird durch Mikrosegmentierung, automatische Isolierung und eine kompromisslose Zero-Trust-Strategie. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/security-management/bevor-es-knallt-wie-data-breach-containment-angriffe-stoppt-bevor-sie-eskalieren/
-
Hackers Abuse AI Tool Misconfigurations to Execute Malicious AI-Generated Payloads
A malicious threat actor has exploited a misconfigured instance of Open WebUI, a widely-used self-hosted AI interface with over 95,000 stars on GitHub, designed to enhance large language models (LLMs). This incident underscores the growing risks associated with internet-exposed AI tools, as attackers leveraged administrative access on a vulnerable system to inject malicious AI-generated Python…
-
Cryptojacking campaign relies on DevOps tools
A cryptojacking campaign is targeting exposed DevOps servers like Docker and Gitea to secretly mine cryptocurrency. Wiz researchers uncovered a cryptojacking campaign, tracked as JINX-0132, targeting exposed DevOps applications like Nomad, Consul, Docker, Gitea to secretly mine cryptocurrency. Threat actors behind the campaign are exploiting a wide range of known misconfigurations and vulnerabilities to deliver the miner.…
-
Unbefugter Zugriff bei einer Luxusmodemarke aus Frankreich
Cartier discloses data breach amid fashion brand cyberattacks First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cartier-discloses-data-breach-amid-fashion-brand-cyberattacks/
-
Cartier discloses data breach amid fashion brand cyberattacks
Luxury fashion brand Cartier is warning customers it suffered a data breach that exposed customers’ personal information after its systems were compromised. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cartier-discloses-data-breach-amid-fashion-brand-cyberattacks/
-
MainStreet Bank reports vendor cyber incident that leaked customer info
In regulatory filings with the Securities and Exchange Commission, MainStreet Bank’s holding company said a cyber incident connected to a third-party vendor had exposed information. First seen on therecord.media Jump to article: therecord.media/Main-street-cyber-incident-bank
-
Trickbot, Conti Ransomware Operator Unmasked Amid Huge Ops Leak
An anonymous whistleblower has leaked large amounts of data tied to the alleged operator behind Trickbot and Conti ransomware. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/trickbot-conti-ransomware-operator-unmasked
-
Vanta bug exposed customers’ data to other customers
The compliance company said the customer data exposure was caused by a product change. First seen on techcrunch.com Jump to article: techcrunch.com/2025/06/02/vanta-bug-exposed-customers-data-to-other-customers/
-
New Tools and Initiatives in Data Breach Monitoring and Healthcare AI
Latest updates on cyber security, AI health initiatives, and pandemic preparedness. Stay informed and take action today! First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/new-tools-and-initiatives-in-data-breach-monitoring-and-healthcare-ai/
-
Unimed in Brasilien: Cybernews warnt vor großem Datenleck
Tags: data-breachFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/unimed-brasilien-cybernews-warnung-datenleck
-
Chaos Computer Club legt Corplife-Datenleck offen
Bei Corplife, einem Dienstleister für “Mitarbeiterbindung” gab es ein Datenleck in Form von öffentlich abrufbaren Dateien. Der Entdecker wandte sich an den Chaos Computer Club (CCC), der dann den Betreiber informierte. Die Dateien wurden im Februar 2025 offline genommen. Ob … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/31/chaos-computer-club-legt-corplife-schwachstelle-offen/
-
‘Earth Lamia’ Exploits Known SQL, RCE Bugs Across Asia
A highly active Chinese threat group is taking proverbial candy from babies, exploiting known bugs in exposed servers to steal data from organizations in sensitive sectors. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/earth-lamia-exploits-sql-rce-bugs-asia
-
A Hacker May Have Deepfaked Trump’s Chief of Staff in a Phishing Campaign
Plus: An Iranian man pleads guilty to a Baltimore ransomware attack, Russia’s nuclear blueprints get leaked, a Texas sheriff uses license plate readers to track a woman who got an abortion, and more. First seen on wired.com Jump to article: www.wired.com/story/trump-chief-staff-susie-wiles-hacker-phishing-impersonation/
-
US military IT specialist arrested for allegedly trying to leak secrets to foreign government
A 28-year-old civilian IT worker at the Defense Intelligence Agency has been arrested in Northern Virginia on suspicion that he leaked secrets to a foreign government. First seen on therecord.media Jump to article: therecord.media/defense-intelligence-agency-it-specialist-suspected-leak-foreign-government
-
Microsoft Reveals Techniques for Defending Against Evolving AiTM Attacks
Tags: attack, authentication, cloud, credentials, cyber, data-breach, email, microsoft, phishing, threatMicrosoft has exposed the escalating sophistication of phishing attacks, particularly focusing on Adversary-in-the-Middle (AiTM) techniques that are becoming a cornerstone of modern cyber threats. As organizations increasingly adopt multifactor authentication (MFA), passwordless solutions, and robust email protections, threat actors are adapting with advanced methods to steal credentials, especially targeting enterprise cloud environments. AiTM attacks, often…
-
MICI NetFax Server Flaws Allow Attackers to Execute Remote Code
Tags: access, advisory, attack, credentials, cve, cyber, data-breach, flaw, network, risk, vulnerabilityIn a recent security advisory, Rapid7 has disclosed three severe vulnerabilities in MICI Network Co., Ltd’s NetFax Server, affecting all versions before 3.0.1.0. These flaws”, CVE-2025-48045, CVE-2025-48046, and CVE-2025-48047″, allow attackers to gain root-level access through a chain of authenticated attacks, with default credentials and sensitive information exposed in cleartext. Despite the risks, the vendor…
-
Nach Datenleck – Auf Adidas-Kunden kommen Spam und Phishing zu
First seen on security-insider.de Jump to article: www.security-insider.de/datenleck-adidas-informationen-betroffene-kunden-a-7c65a098de97739d8a87b195ea9f6858/
-
Weaponized PyPI Package Executes Supply Chain Attack to Steal Solana Private Keys
A chilling discovery by Socket’s Threat Research Team has exposed a meticulously crafted supply chain attack on the Python Package Index (PyPI), orchestrated by a threat actor using the alias >>cappership.
-
North Korean IT Workers Exploit Legitimate Software and Network Tactics to Evade EDR
A North Korean IT worker, operating under a false identity, was uncovered infiltrating a Western organization with a sophisticated remote-control system. This incident, exposed during a U.S. federal raid on a suspected laptop farm, showcases a chilling trend where adversaries leverage legitimate software and low-level network protocols to evade traditional Endpoint Detection and Response (EDR)…
-
19 Billion Passwords Leaked: Protect Yourself from Cyber Threats
Discover the implications of the 19 billion passwords leaked in the RockYou2024 breach. Learn essential actions to secure your accounts now! First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/19-billion-passwords-leaked-protect-yourself-from-cyber-threats/
-
Most LLMs don’t pass the security sniff test
Advice to CSOs: Lee said that CSOs should consider the following before approving any LLM:Training data: figure out where the model got its info. Random web grabs expose your secrets;Prompt history: if your questions stick around on their servers, they’ll turn up in the next breach bulletin;Credentials: stolen API keys and weak passwords keep attackers…
-
New PumaBot Hijacks IoT Devices via SSH Brute-Force for Persistent Access
Tags: access, botnet, cyber, cybersecurity, data-breach, exploit, Internet, iot, malicious, malware, software, threat, vulnerabilityA sophisticated new malware, dubbed PumaBot, has emerged as a significant threat to Internet of Things (IoT) devices worldwide. Cybersecurity researchers have identified this malicious software as a highly advanced botnet that exploits weak security configurations in IoT ecosystems, particularly targeting devices with exposed SSH (Secure Shell) ports. Emerging Threat Targets Vulnerable IoT Ecosystems By…
-
Data broker LexisNexis discloses data breach affecting 364,000 people
Data broker giant LexisNexis Risk Solutions has revealed that unknown attackers stole the personal information of over 364,000 individuals in a December breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/data-broker-lexisnexis-discloses-data-breach-affecting-364-000-people/