Tag: data-breach
-
Repeated Firmware Key-Management Failures Undermine Intel Boot Guard and UEFI Secure Boot
The security of fundamental technologies like Intel Boot Guard and UEFI Secure Boot has been seriously questioned due to persistent cryptographic key management issues within the UEFI firmware ecosystem, which have been exposed in a number of concerning exposes. These mechanisms, designed to ensure platform integrity by verifying firmware and bootloader signatures, are being critically…
-
The Persistence Problem: Why Exposed Credentials Remain Unfixed”, and How to Change That
Detecting leaked credentials is only half the battle. The real challenge”, and often the neglected half of the equation”, is what happens after detection. New research from GitGuardian’s State of Secrets Sprawl 2025 report reveals a disturbing trend: the vast majority of exposed company secrets discovered in public repositories remain valid for years after detection,…
-
Cyber-Zwischenfall bei einer Stadtverwaltung in New York, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4a685670-536d-4c8d-a8d5-06408fac3385.html
-
Cyberangriff auf eine Rechtsanwaltskammer in Pennsylvania, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/067aadcc-da34-4008-b989-5424e745174e.html
-
Unbefugter Zugriff bei einer County-Verwaltung in Texas, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/64475513-559c-44f5-a943-058230794136.html
-
Security Affairs newsletter Round 523 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Ascension reveals personal data of 437,329 patients exposed in cyberattack Operation Moonlander dismantled the botnet behind Anyproxy and…
-
Feel Relieved with Efficient Secrets Rotation
Is Your Organization Optimally Protecting Its Non-Human Identities? I bring this pertinent issue to light. Non-Human Identities (NHIs) and Secrets Security Management are essential components in maintaining cybersecurity integrity. But without an effective strategy in place, your organization could be vulnerably exposed to breaches and data leaks. In particular, inadequate Secrets Rotation is a common……
-
Ascension reveals personal data of 437,329 patients exposed in cyberattack
A data breach at Ascension, caused by a former partner’s compromise, exposed the health information of over 430,000 patients. Ascension is one of the largest private healthcare systems in the United States, ranking second in the United States by the number of hospitals as of 2019. At the end of April, the company notified patients that their personal and health information…
-
FBI warns that end of life devices are being actively targeted by threat actors
Tags: access, antivirus, attack, authentication, botnet, china, cisco, control, credentials, cve, data-breach, exploit, firewall, firmware, Hardware, identity, infection, intelligence, Internet, malware, network, password, router, sans, service, software, technology, threat, tool, update, vulnerabilityLinksys E1200, E2500, E1000, E4200, E1500, E300, E3200, E1550, WRT320N, WRT310N, WRT610NCradlepoint E100Cisco M10Threat actors, notably Chinese state-sponsored actors, are successfully exploiting known vulnerabilities in routers exposed to the web through pre-installed remote management software, according to the FBI. They then install malware, set up a botnet, and sell proxy services or launch coordinated attacks.”The…
-
Why You Should Segment RDP SSH
Securing remote access pathways often feels like an endless battle against evolving threats. Attackers continually search for exposed protocols, especially those that provide direct or near-direct access to critical systems. Remote Desktop Protocol (RDP) and Secure Shell (SSH) stand out… Read More First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/why-you-should-segment-rdp-ssh/
-
Data breach confirmed by Insight Partners
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-confirmed-by-insight-partners
-
LockBit Ransomware Gang Hacked, Operations Data Leaked
Exposed data from LockBit’s affiliate panel includes Bitcoin addresses, private chats with victim organizations, and user information such as credentials. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/lockbit-ransomware-gang-hacked-data-leaked
-
Ascension says recent data breach affects over 430,000 patients
Ascension, one of the largest private healthcare systems in the United States, has revealed that a data breach disclosed last month affects the personal and healthcare information of over 430,000 patients. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ascension-says-recent-data-breach-affects-over-430-000-patients/
-
Insight Partners Data Breach: Bigger Impact Than Anticipated
The investigation is ongoing, but the VC giant intends to inform affected customers on a rolling basis as more of the breach details come to light. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/insight-partners-data-breach-bigger-impact
-
Datenleck bei Pearson: Cyberangriff trifft großen Medienkonzern
Die Angreifer haben wohl auf von Pearson genutzte Clouddienste zugegriffen und allerhand Daten ausgeleitet. Millionen von Menschen sollen betroffen sein. First seen on golem.de Jump to article: www.golem.de/news/daten-abgeflossen-cyberangriff-trifft-medienkonzern-pearson-2505-196050.html
-
FreeDrain Phishing Attack Targets Users to Steal Financial Login Credentials
PIVOTcon, joint research by Validin and SentinelLABS has exposed FreeDrain, an industrial-scale cryptocurrency phishing operation that has been stealthily siphoning digital assets for years. This sophisticated campaign leverages search engine optimization (SEO) manipulation, free-tier web services, and intricate redirection techniques to target unsuspecting users of cryptocurrency wallets such as Trezor, MetaMask, and Ledger. Sophisticated Cryptocurrency…
-
LockBit ransomware gang breached, secrets exposed
Oh dear, what a shame, never mind. First seen on tripwire.com Jump to article: www.tripwire.com/state-of-security/lockbit-ransomware-gang-breached-secrets-exposed
-
LockBit hacked: What does the leaked data show?
The affiliate panel of the infamous LockBit Ransomware-as-a-Service (RaaS) group has been hacked and defaced, showing a link to a MySQL database dump ostensibly containing … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/09/lockbit-hacked-data-leaked/
-
Zugangsdaten: Passwörter von Doge-Mitarbeiter per Malware erbeutet
Eine private Mail-Adresse eines Doge-Mitarbeiters soll in 51 bekannten Datenlecks enthalten sein. Zudem sind seine Zugangsdaten in mehreren Stealer-Logs aufgetaucht. First seen on golem.de Jump to article: www.golem.de/news/zugangsdaten-infostealer-malware-erbeutet-passwoerter-von-doge-mitarbeiter-2505-196043.html
-
Azure Storage Utility Vulnerability Allows Privilege Escalation to Root Access
A critical vulnerability discovered by Varonis Threat Labs has exposed users of Microsoft Azure’s AI and High-Performance Computing (HPC) workloads to a potential privilege escalation attack. The flaw, found in a utility pre-installed on select Azure Linux virtual machines, made it possible for an unprivileged local user to gain root access-a severe breach of the…
-
A timeline of South Korean telco giant SKT’s data breach
In April, South Korea’s telco giant SK Telecom (SKT) was hit by a cyberattack that led to the theft of personal data on approximately 23 million customers, equivalent to almost half of the country’s 52 million residents. At a National Assembly hearing in Seoul on Thursday, SKT chief executive Young-sang Ryu said about 250,000 users…
-
LockBit Ransomware Hacked: Database and Victim Chats Leaked
LockBit ransomware website hacked! Sensitive data leaked, including Bitcoin keys. Learn about the breach and how to secure your organization. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/lockbit-ransomware-hacked-database-and-victim-chats-leaked/
-
Data breach exposes LockBit ransomware gang
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-exposes-lockbit-ransomware-gang
-
DOGE software engineer’s computer infected by info-stealing malware
The presence of credentials in leaked “stealer logs” indicates his device was infected. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/05/doge-software-engineers-computer-infected-by-info-stealing-malware/
-
The LockBit ransomware site was breached, database dump was leaked online
Lockbit ransomware group has been compromised, attackers stole and leaked data contained in the backend infrastructure of their dark web site. Hackers compromised the dark web leak site of the LockBit ransomware gang and defaced it, posting a message and a link to the dump of the MySQL database of its backend affiliate panel. >>Don’t…
-
LockBit’s Dark Web Domains Hacked, Internal Data and Wallets Leaked
LockBit’s dark web domains were hacked, exposing internal data, affiliate tools, and over 60,000 Bitcoin wallets in a… First seen on hackread.com Jump to article: hackread.com/lockbits-dark-web-domains-hacked/
-
Silence is Golden for Breach Prevention, Not Reporting
Not Just Ransomware But Verbal Disclosure of Personal Data Common, Watchdog Finds Two decades after California Senate Bill 1386 introduced the world to data breach notifications, organizations have collectively battened down their cybersecurity hatches and fixed the problem once and for all. Of course, I’m joking, with the results of recent data breach root cause…
-
IXON VPN Client Vulnerability Allows Privilege Escalation for Attackers
A critical security vulnerability in IXON’s widely used VPN client has exposed Windows, Linux, and macOS systems to local privilege escalation attacks, enabling non-privileged users to gain root or SYSTEM-level access. Designated as CVE-2025-26168 and CVE-2025-26169, these flaws affect versions 1.4.3 and earlier of the software, posing severe risks to industrial, enterprise, and managed service…