Tag: data-breach
-
Verizon’s Data Breach Report Findings ‘Underscore the Importance of a Multi-Layered Defense Strategy’
Verizon surveyed about 22,000 security incidents and 12,000 data breaches. Ransomware incidents increased, while the median ransom payment dropped. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-verizon-data-breach-investigations-report-2025/
-
VeriSource now says February data breach impacts 4 million people
Employee benefits administration firm VeriSource Services is warning that a data breach exposed the personal information of four million people. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/verisource-now-says-february-data-breach-impacts-4-million-people/
-
Over 1,200 SAP NetWeaver servers vulnerable to actively exploited flaw
Over 1,200 internet-exposed SAP NetWeaver instances are vulnerable to an actively exploited maximum severity unauthenticated file upload vulnerability that allows attackers to hijack servers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-1-200-sap-netweaver-servers-vulnerable-to-actively-exploited-flaw/
-
Rack Ruby Framework Vulnerabilities Let Attackers Inject and Manipulate Log Content
Researchers Thai Do and Minh Pham have exposed multiple critical vulnerabilities in the Rack Ruby framework, a cornerstone of Ruby-based web applications with over a billion global downloads. Identified as CVE-2025-25184, CVE-2025-27111, and CVE-2025-27610, these flaws pose significant risks to applications built on frameworks like Ruby on Rails and Sinatra. Rack, acting as a modular…
-
Exposure Management Works When the CIO and CSO Are in Sync
Tags: access, ai, attack, business, cio, ciso, cloud, control, cyber, cybersecurity, data, data-breach, endpoint, finance, infrastructure, jobs, office, risk, strategy, technology, threat, tool, update, vulnerability, vulnerability-management, zero-dayEach Monday, the Tenable Exposure Management Academy provides the practical, real-world guidance you need to shift from vulnerability management to exposure management. In this post, Tenable CIO Patricia Grant looks at how the CIO/CSO relationship is key to a successful exposure management program. You can read the entire Exposure Management Academy series here. When I…
-
Blue Shield of California Data Breach Exposes 4.7M Members’ Info
Discover the Blue Shield of California data breach affecting 4.7M members. Learn about the risks and essential security measures to protect your data. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/blue-shield-of-california-data-breach-exposes-4-7m-members-info/
-
Threat actors are scanning your environment, even if you’re not
In a world where organizations’ digital footprint is constantly changing and attackers regularly capitalize on security failings in exposed IT assets, making the effort to … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/28/outpost24-easm-sweepatic/
-
Datenleck bei einem Finanzdienstleister in Brasilien
Tags: data-breachXP Investimentos sofre acesso não-autorizado e alerta clientes que estão seguros First seen on tecmundo.com.br Jump to article: www.tecmundo.com.br/seguranca/404138-xp-investimentos-sofre-ataque-cibernetico-e-alerta-clientes.htm
-
4chan is back online, says it’s been ‘starved of money’
4chan is partly back online after a hack took the infamous image-sharing site down for nearly two weeks. The site first went down on April 14, with the person responsible for the hack apparently leaking data including a list of moderators and “janitors” (one janitor told TechCrunch they were “confident” that the leaked data was…
-
GDPR Data Breach Notification Template With Examples [Download]
The GDPR is a law developed by the European Union (EU) to protect individuals’ personal data. Although it originated in the EU, several countries and organisations outside Europe have to date also adopted this regulation, which shows how detailed and well-thought-out it is. Among many of the GDPR’s guidelines, the data breach notification letter is……
-
Security Affairs newsletter Round 521 by Pierluigi Paganini INTERNATIONAL EDITION
Tags: breach, ceo, cybersecurity, data, data-breach, email, group, international, malware, WeeklyReviewA new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. African multinational telco giant MTN Group disclosed a data breach CEO of cybersecurity firm charged with installing malware…
-
African multinational telco giant MTN Group disclosed a data breach
African multinational telecommunications company MTN Group disclosed a data breach that exposed subscribers’ personal information. MTN Group Limited is a South African multinational telecommunications company headquartered in Johannesburg. Founded in 1994, it has grown to become Africa’s largest mobile network operator, serving over 290 million subscribers across 18 countries in Africa and the Middle East.…
-
ISMG Editors: Top 2025 Breach Trends From Verizon
Also: Supply Chain Security in Wake of US Tariffs, AI’s Role in the SOC. In this week’s update, ISMG editors discussed takeaways from Verizon’s annual Data Breach Investigations Report, the cybersecurity ripple effects of the disruptive U.S. tariff policy, and why artificial intelligence tools still aren’t ready to take over the security operations center. First…
-
Baltimore City Public Schools data breach affects over 31,000 people
Baltimore City Public Schools notified tens of thousands of employees and students of a data breach following an incident in February when unknown attackers hacked into its network. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/baltimore-city-public-schools-data-breach-affects-over-31-000-people/
-
Data breach at Connecticut’s Yale New Haven Health affects over 5 million
Yale New Haven Health is Connecticut’s largest healthcare provider. First seen on techcrunch.com Jump to article: techcrunch.com/2025/04/25/data-breach-at-connecticut-yale-new-haven-health-affects-over-5-million/
-
Three-Year Go Module Mirror Backdoor Exposed: Supply Chain Attack
Discover how a backdoored Go package exploited the module mirror for 3+ years. Learn vital security practices to safeguard your code. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/three-year-go-module-mirror-backdoor-exposed-supply-chain-attack/
-
US Data Breach Lawsuits Total $155M Amid Cybersecurity Failures
Panaseer’s latest cybersecurity study revealed that US companies have paid $155M in data breach lawsuit settlements over just six months First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/lawsuits-total-155m-cybersecurity/
-
Vor diesen Ransomware-Banden sollten Sie sich hüten
Tags: ai, cyber, cyberattack, data, data-breach, exploit, extortion, germany, group, hacker, intelligence, leak, lockbit, malware, moveIT, ransomware, service, software, strategy, threat, tool, usa, vulnerability, zero-dayRansomware-Attacken werden immer mehr. Höchste Zeit, die Schutzmaßnahmen hochzufahren.In den ersten drei Monaten des laufenden Jahres gab es einen neuen Höchststand bei den weltweit gemeldeten Ransomware-Vorfällen. Laut dem aktuellen Bericht State of Ransomware von Check Point Research (CPR) haben Hacker im ersten Quartal 2025 insgesamt 2.289 Unternehmen erpresst 126 Prozent mehr als im Vorjahreszeitraum (1.011…
-
Microsoft Defender XDR False Positive Leaked Massive 1,700+ Sensitive Documents to Publish
An alarming data leak involving Microsoft Defender XDR has exposed more than 1,700 sensitive documents from hundreds of organizations, following a chain reaction triggered by a critical false positive error. Security researchers at ANY.RUN first identified and reported the incident, highlighting major weaknesses in automated threat detection systems and the risks posed by user behaviors…
-
Interlock ransomware gang started leaking data allegedly stolen from leading kidney dialysis firm DaVita
The Interlock ransomware gang claimed responsibility for the attack on the leading kidney dialysis company DaVita and leaked alleged stolen data. DaVita Inc. provides kidney dialysis services through a network of 2,675 outpatient centers in the United States, serving 200,800 patients, and 367 outpatient centers in 11 other countries, serving 49,400 patients. DaVita specializes in treating end-stage renal…
-
Spring Security Vulnerability Exposes Valid Usernames to Attackers
A newly identified security vulnerability, CVE-2025-22234, has exposed a critical weakness in the widely-used Spring Security framework. According to the HeroDevs report, affecting several versions of the spring-security-crypto package, this flaw makes it possible for attackers to discern valid usernames through observable differences in login response times”, an avenue for so-called “timing attacks.” Spring Security…
-
Über 216.000 Daten von Samsung-Kunden geleakt: So überprüfst du, ob du betroffen bist
Tags: data-breachFirst seen on t3n.de Jump to article: t3n.de/news/ueber-216000-daten-von-samsung-kunden-geleakt-1683273/
-
Für Ransomware ausgenutzt – Über 1200 AWS-Schlüssel geleakt
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsforscher-finden-aws-schluesseldatensaetze-auf-server-a-8047fc322715b240bd4186e0318e5dbb/
-
Lesson from huge Blue Shield California data breach: Read the manual
read the documentation of any third party service you sign up for, to understand the security and privacy controls;know what data is being collected from your organization, and what you don’t want shared.”It’s important to understand these giant platforms make it easy for you to share your data across their various services,” he said. “So…
-
MerkurBets, CrazyBuzzer und SlotMagie: Datenleck soll über eine Million Kunden betroffen haben
Tags: data-breachFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/merkurbets-crazybuzzer-slotmagie-datenleck-eine-million-kunden-betroffen
-
Data breach victimization in the US escalates
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-victimization-in-the-us-escalates
-
US Data Breach Impact Grows in 2025
First seen on scworld.com Jump to article: www.scworld.com/brief/us-data-breach-impact-grows-in-2025
-
Client-Side Security Breach Alert: Blue Shield of California Exposes 4.7 Million Members’ Health Data Through Web Analytics Configuration
by Source Defense A recent incident at Blue Shield of California highlights the critical importance of client-side security controls when implementing third-party scripts on healthcare websites. The nonprofit health plan has disclosed a significant data breach affecting 4.7 million members, stemming from a misconfiguration of Google Analytics on their web properties between April 2021 and…