Tag: data-breach
-
Hertz disclosed a data breach following 2024 Cleo zero-day attack
Hertz Corporation disclosed a data breach after customer data was stolen via Cleo zero-day exploits in late 2024, affecting Hertz, Thrifty, and Dollar brands. Car rental giant Hertz Corporation disclosed a data breach that impacted its Hertz, Thrifty, and Dollar brands. Threat actors gained access to customer data via Cleo zero-day exploits in late 2024.…
-
Over 100,000 WordPress Plugin VUlnerability Exploited Just 4 Hours After Disclosure
Over 100,000 WordPress websites have been exposed to a critical security vulnerability, following the public disclosure of a flaw in the popular SureTriggers plugin (version 1.0.78 and below) on April 10, 2025. Exploitation attempts were observed within just four hours after the vulnerability was published”, a stark reminder of the speed with which cybercriminals act.…
-
Sicherheitslücke im App Store – Studie deckt massive Datenlecks in iOS-Apps auf
First seen on security-insider.de Jump to article: www.security-insider.de/ios-app-sicherheitsrisiko-sensible-daten-a-a39556a52d5af27ede8981ea20e3516c/
-
Unbefugter Zugriff auf Email-Konten einer County-Verwaltung in Ohio, USA
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6e878661-6faf-4782-80a2-f3cbafabe029.html
-
Mietwagenfirma aus den USA von Cyberangriff auf IT-Dienstleister betroffen
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/342d0134-8941-4641-aa87-75b468bc6415.html
-
Stadtverwaltung in Texas, USA von Cyberangriff auf IT-Dienstleister betroffen
Data Breach Notification First seen on maine.gov Jump to article: www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cc1d47ba-bb83-4699-ace0-e4e228322862.html
-
Hertz confirms customer info, drivers’ licenses stolen in data breach
Car rental giant Hertz Corporation warns it suffered a data breach after customer data for its Hertz, Thrifty, and Dollar brands was stolen in the Cleo zero-day data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hertz-confirms-customer-info-drivers-licenses-stolen-in-data-breach/
-
Hertz confirms customer info and drivers’ licenses stolen in data breach
Car rental giant Hertz Corporation warns it suffered a data breach after customer data for its Hertz, Thrifty, and Dollar brands was stolen in the Cleo zero-day data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hertz-confirms-customer-info-and-drivers-licenses-stolen-in-data-breach/
-
Insurance firm Lemonade says breach exposed driver’s license numbers
A vulnerability within the online application platform for insurance policies likely resulted in the breach of customer details. First seen on therecord.media Jump to article: therecord.media/lemonade-insrance-breach-numbers-license
-
Data breach purportedly hits Wolters Kluwer
First seen on scworld.com Jump to article: www.scworld.com/brief/data-breach-purportedly-hits-wolters-kluwer
-
Hertz says customers’ personal data and driver’s licenses stolen in data breach
The car rental giant attributed the breach to Cleo, whose customers had data stolen by a ransomware gang in 2024. First seen on techcrunch.com Jump to article: techcrunch.com/2025/04/14/hertz-says-customers-personal-data-and-drivers-licenses-stolen-in-data-breach/
-
Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed
Trend Micro researchers flagging problems with Nvidia’s patch for a critical, code execution vulnerability in the Nvidia Container Toolkit. The post Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/trend-micro-flags-incomplete-nvidia-patch-that-leaves-ai-containers-exposed/
-
Morocco Investigation Major Data Breach Allegedly Claimed by Algerian Hackers
The National Social Security Fund (CNSS) of Morocco has confirmed that initial checks on leaked documents circulating on social media have revealed that much of the information is false, inaccurate, or incomplete. Officials state these documents originated from a cyber attack targeting the organization’s computer systems. The CNSS has activated security protocols, launched an internal…
-
Chinese APT Group Targets Ivanti VPN Vulnerabilities to Breach Networks
Tags: apt, attack, breach, china, cyber, cybersecurity, data-breach, group, ivanti, network, threat, vpn, vulnerabilityIn a concerning report from cybersecurity firm TeamT5, it has been revealed that a Chinese Advanced Persistent Threat (APT) group leveraged critical vulnerabilities in Ivanti Connect Secure VPN appliances to launch a global cyberattack. The breach affected nearly 20 industries across 12 countries, leaving networks exposed and under persistent threat. Global Victimology The widespread attack…
-
After 20 Years, Google Patches Major Web Privacy Vulnerability
After two decades of persistent concern among privacy advocates and web security researchers, Google is finally rolling out a fix for a long-standing vulnerability in Chrome that has silently exposed users’ browsing history. The issue stems from how browsers have… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/chrome-136-ends-20-year-privacy-leak/
-
Datenleck: Kundendaten von Samsung jetzt bei HaveIBeenPwned
Über 216.000 Datensätze von Samsung Deutschland sind in die Hände eines Angreifers gelangt. Anwender können jetzt prüfen, ob sie betroffen sind. First seen on golem.de Jump to article: www.golem.de/news/datenleck-kundendaten-von-samsung-jetzt-bei-haveibeenpwned-2504-195334.html
-
Data Breach at Planned Parenthood Lab Partner Exposes Info of 1.6M
Data breach at Laboratory Services Cooperative (LSC) exposed the sensitive health and personal information of 1.6 million individuals… First seen on hackread.com Jump to article: hackread.com/lab-breach-tied-planned-parenthood-compromises-records/
-
South African telecom provider Cell C disclosed a data breach following a cyberattack
Cell C, one of the biggest telecom providers in South Africa confirms a data breach following a 2024 cyberattack. Cell C is the fourth-largest mobile network operator in South Africa, ,after Vodacom, MTN, and Telkom. The company founded in 2001 offers prepaid and postpaid mobile plans, data bundles and internet services, fiber broadband, roaming and…
-
The quiet data breach hiding in AI workflows
As AI becomes embedded in daily business workflows, the risk of data exposure increases. Prompt leaks are not rare exceptions. They are a natural outcome of how employees use … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/14/quiet-data-breach-ai-workflows/
-
Oracle admits breach of ‘obsolete servers,’ denies main cloud platform affected
Doubts emerge: So far so good regarding Oracle’s denials, except that the hacker subsequently shared data showing their access to login.us2.oraclecloud.com, a service that is part of the Oracle Access Manager, the company’s IAM system used to control access to Oracle-hosted systems.It also emerged that some of the leaked data appeared to be from 2024…
-
Extensive WooCommerce data breach claimed
First seen on scworld.com Jump to article: www.scworld.com/brief/extensive-woocommerce-data-breach-claimed
-
Rogue Account”‘Creation Flaw Leaves 100″¯K WordPress Sites Exposed
A severe vulnerability has been uncovered in the SureTriggers WordPress plugin, which could leave over 100,000 websites at risk. The issue, discovered by security researcher mikemyers, allows attackers to create rogue administrative users on sites where the plugin is not properly configured. Vulnerability Details This critical flaw, registered as CVE-2025-3102, is rooted in the plugin’s…
-
A Seven”‘Year”‘Old Cisco Flaw Now Lets Hackers Execute Code Remotely on Network Gear
Tags: cisco, credentials, cyber, data-breach, exploit, firmware, flaw, hacker, infrastructure, network, router, service, theft, threatA Cisco’s Smart Install protocol (CVE-2018-0171), first patched in 2018, remains a pervasive threat to global network infrastructure due to widespread misconfigurations and exploitation by state-sponsored threat actors. The flaw allows unauthenticated attackers to execute arbitrary code on Cisco switches and routers via exposed Smart Install Client services, enabling configuration theft, credential harvesting, and firmware…
-
South African telecom provider serving 7.7 million confirms data leak following cyberattack
South Africa’s fourth-largest mobile network operator, Cell C, has confirmed that its data was leaked on the dark web following a cyberattack last year. First seen on therecord.media Jump to article: therecord.media/south-african-telecom-provider-discloses-data-breach-ransomware
-
Targeted phishing gets a new hook with real-time email validation
Tags: api, authentication, awareness, ciso, credentials, data-breach, defense, email, infosec, mail, password, phishing, sans, service, spam, spear-phishing, threat, training‘A little bit of hype’: David Shipley, head of Canadian-based security awareness training firm Beauceron Security, said “there’s a little bit of hype” in giving the tactic a fancy name for what is in fact spear phishing, although, he admitted, it’s “rapid-fire spear phishing.”The reason, he said, is that “spray-and-pray” mass phishing campaigns today are…
-
Hackers Claim WooCommerce Breach Exposing 4.4 Million Customer Records
A hacker operating under the alias “Satanic” has claimed responsibility for a massive data breach involving WooCommerce, a leading e-commerce platform used globally to power online stores. The breach, allegedly carried out on April 6, 2025, has reportedly compromised sensitive data of over 4.4 million users. The claim surfaced on Breach Forums, a notorious hub…
-
Tausend gute Gründe, warum Sie Ihre Identität schützen sollten
Datenlecks in Unternehmen sind der häufigste Grund für Identitätsbetrug, aber lange nicht der Einzige. In diesem Blogpost erklären wir, wie Hacker an persönliche Daten gelangen und wie Nutzer dies verhindern können. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/scams/1-milliarde-grunde-um-ihre-identitat-online-zu-schutzen/
-
Oracle confirms the hack of two obsolete servers hacked. No Oracle Cloud systems or customer data were affected
Oracle confirmed a hacker stole credentials from two obsolete servers but said no Oracle Cloud systems or customer data were affected. Oracle confirmed a hacker stole and leaked credentials from two obsolete servers, but said no Oracle Cloud systems or customer data were affected. The threat actor accessed usernames from two outdated, non-Oracle Cloud Infrastructure…
-
Precision-validated phishing: The rise of sophisticated credential theft
Tags: api, authentication, awareness, ciso, credentials, data-breach, defense, email, infosec, mail, password, phishing, sans, service, spam, spear-phishing, theft, threat, training‘A little bit of hype’: David Shipley, head of Canadian-based security awareness training firm Beauceron Security, said “there’s a little bit of hype” in giving the tactic a fancy name for what is in fact spear phishing, although, he admitted, it’s “rapid-fire spear phishing.”The reason, he said, is that “spray-and-pray” mass phishing campaigns today are…
-
Smashing Security podcast #412: Signalgate sucks, and the quandary of quishing
QR codes are being weaponised by scammers, so maybe think twice before scanning that parking meter. And in a blunder so dumb it makes autocorrect look smart, the White House explains how it leaked war plans on Signal because an iPhone mistook a journalist for a government insider. First seen on grahamcluley.com Jump to article:…