Tag: data-breach
-
AI Image Site GenNomis Exposed 47GB of Underage Deepfakes
Cybersecurity researcher Jeremiah Fowler uncovers a massive 47.8GB database with disturbing AI-generated content belonging to GenNomis. First seen on hackread.com Jump to article: hackread.com/ai-image-site-gennomis-exposed-underage-deepfakes/
-
39 Million Secrets Leaked on GitHub in 2024
GitHub has announced new capabilities to help organizations and developers keep secrets in their code protected. The post 39 Million Secrets Leaked on GitHub in 2024 appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/39-million-secrets-leaked-on-github-in-2024/
-
Massive GitHub Leak: 39M API Keys Credentials Exposed How to Strengthen Security
Over 39 million API keys, credentials, and other sensitive secrets were exposed on GitHub in 2024, raising considerable alarm within the developer community and enterprises globally. The scale and impact of this leak have underscored the growing risks tied to improperly handled credentials and highlighted the urgent need for robust security practices. GitHub, the world’s…
-
Verizon Call Filter API flaw exposed customers’ incoming call history
A vulnerability in Verizon’s Call Filter feature allowed customers to access the incoming call logs for another Verizon Wireless number through an unsecured API request. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/verizon-call-filter-api-flaw-exposed-customers-incoming-call-history/
-
GitHub expands security tools after 39 million secrets leaked in 2024
Over 39 million secrets like API keys and account credentials were leaked on GitHub throughout 2024, exposing organizations and users to significant security risks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/github-expands-security-tools-after-39-million-secrets-leaked-in-2024/
-
Over 1,500 PostgreSQL Servers Hit by Fileless Malware Attack
A sophisticated malware campaign has compromised over 1,500 PostgreSQL servers, leveraging fileless techniques to deploy cryptomining payloads. The attack, identified by Wiz Threat Research and attributed to the threat actor group JINX-0126, exploits publicly exposed PostgreSQL instances configured with weak or default credentials. The attackers utilize these vulnerabilities to execute XMRig-C3 cryptominers without leaving detectable…
-
Royal Mail investigates data leak claims, no impact on operations
Royal Mail is investigating claims of a security breach after a threat actor leaked over 144GB of data allegedly stolen from the company’s systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/royal-mail-investigates-data-leak-claims-no-impact-on-operations/
-
Royal Mail Investigates Data Breach Affecting Supplier
A cyber threat actor has claimed to have leaked 144GB of data from Royal Mail users First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/royal-mail-investigates-data/
-
Hacker stiehlt Kundendaten von Samsung Deutschland
Samsung Deutschland ist von einem Datenleck betroffen. Samsung DeutschlandBei Samsung Deutschland hat es offenbar ein massives Datenleck gegeben. Etwa 270.000 Kundendatensätze von Samsung Electronics Deutschland werden derzeit in einem Darknet-Forum angeboten. Ein krimineller Hacker mit dem Pseudonym ‘GHNA” will diese Daten kürzlich aus dem Support-System von Samsung kopiert haben.Dem Darknet-Post zufolge enthalten die geleakten Datensätze…
-
FTC chief flags data privacy concerns in 23andMe bankruptcy
The company filed for bankruptcy after financial challenges over the past few years and;a massive data breach in 2023. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ftc-chief-flags-data-privacy-risks-23andme-bankruptcy/744184/
-
ImageRunner Flaw Exposed Sensitive Information in Google Cloud
Google has patched a Cloud Run vulnerability dubbed ImageRunner that could have been exploited to gain access to sensitive data. The post ImageRunner Flaw Exposed Sensitive Information in Google Cloud appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/imagerunner-flaw-exposed-sensitive-information-in-google-cloud/
-
Top Data Breaches of March 2025
Cyber threats continue to challenge organizations in 2025, and March saw its share of major breaches. From cloud providers to universities, sensitive data was exposed, raising concerns about security gaps… First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/top-data-breaches-of-march-2025/
-
Datenleck: Umgang mit Cyberangriff mündet in Sammelklage gegen Oracle
Nach einem Datenleck verhält sich Oracle schon seit Wochen äußerst fragwürdig. Das könnte angesichts einer jüngst eingereichten Klage teuer enden. First seen on golem.de Jump to article: www.golem.de/news/datenleck-umgang-mit-cyberangriff-muendet-in-sammelklage-gegen-oracle-2504-194944.html
-
Oracle Health warnt vor Datenleck
Tags: access, ceo, cloud, computer, cyberattack, cybersecurity, cyersecurity, data-breach, hacker, Internet, login, oracle, password, supply-chain, usaHacker haben sich Zugriff auf Daten von Oracle Health verschafft.Während Oracle den Datenverstoß, der in der vergangenen Woche ans Licht kam, öffentlich abstreitet, informierte die Tochtergesellschaft Oracle Health kürzlich betroffene Kunden über ein Datenleck. Betroffen waren Daten von alten Datenmigrations-Server von Cerner, wie aus einem Bericht von Bleeping Computer hervorgeht. Oracle hatte den IT-Dienstleister für…
-
Hacker Leaks 270,000 Samsung Customer Records”, Stolen Credentials Were Left Unchecked for Years
In a troubling security breach, a hacker exposed the personal data of over 270,000 Samsung customers in Germany, freely dumping it on the internet. The hack, attributed to a cybercriminal operating under the alias “GHNA,” occurred when the attacker accessed a system used by Samsung’s German customer service. According to cybersecurity firm Hudson Rock, the…
-
Riesiges Datenleck bei X: War es ein Insider-Job?
Die Profil-Daten von 2,87 Milliarden Nutzern von X (ehemals Twitter) sind auf der Plattform Breach Forum entdeckt worden. Angeblich handelt es sich um die Tat eines Ex-Mitarbeiters. First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/riesiges-datenleck-bei-x-war-es-ein-insider-job
-
Das gehört in Ihr Security-Toolset
Tags: access, ai, antivirus, authentication, backup, breach, business, cloud, compliance, control, cyberattack, cybersecurity, data, data-breach, defense, detection, edr, firewall, gartner, governance, iam, identity, incident response, intelligence, iot, malware, mfa, ml, mobile, network, password, ransomware, risk, saas, service, software, spyware, threat, tool, update, vulnerability, vulnerability-managementLesen Sie, welche Werkzeuge essenziell sind, um Unternehmen gegen Cybergefahren abzusichern.Sicherheitsentscheider sind mit einer sich kontinuierlich verändernden Bedrohungslandschaft, einem zunehmend strengeren, regulatorischen Umfeld und immer komplexeren IT-Infrastrukturen konfrontiert. Auch deshalb wird die Qualität ihrer Sicherheits-Toolsets immer wichtiger.Das Problem ist nur, dass die Bandbreite der heute verfügbaren Cybersecurity-Lösungen überwältigend ist. Für zusätzliche Verwirrung sorgen dabei nicht…
-
Ransomware Threatens 93% of Industries”, Resilience Is Critical
Tags: breach, business, cyber, data, data-breach, malicious, ransomware, resilience, software, threatRansomware continues to be one of the most disruptive cyber threats, with recent data revealing that it affects 93% of industries globally. According to Verizon’s 2024 Data Breach Investigations Report, ransomware is implicated in one-third of all data breaches, underscoring its widespread impact across sectors. This malicious software encrypts critical business data and demands payment…
-
Oracle Hit with Lawsuit Over Alleged Cloud Breach Affecting Millions
Oracle faces a class action lawsuit filed in Texas over a cloud data breach exposing sensitive data of 6M+ users; plaintiff alleges negligence and delays. First seen on hackread.com Jump to article: hackread.com/oracle-lawsuit-over-cloud-breach-affecting-millions/
-
Massive 400GB X (Twitter) Data Leaked 2.8 Billion Records Exposed
A colossal 400GB trove containing data from 2.873 billion X (formerly Twitter) users has surfaced on hacker forums. The breach, allegedly dated January 2025, is now being deemed one of the largest data leaks in social media history. Breach Origin and Allegations The leak first came to light on March 28, 2025, when a data…
-
Oracle warns customers of health data breach amid public denial
Tags: access, breach, ceo, cloud, computer, cybersecurity, data, data-breach, Internet, login, oracle, password, service, supply-chain, threatOracle isn’t budging on Cloud breach denial: Cybersecurity firm CloudSEK first reported the cloud breach involving a threat actor “rose87168” selling six million records exfiltrated from single-sign-on (SSO) and Lightweight Directory Access Protocol (LDAP) of Oracle Cloud.While Oracle quickly denied the breach to media outlets, data shared as samples from the breach were validated by…
-
LensDeal Data Breach Exposes 100,000 Customers’ Personal Information
A major data breach involving LensDeal, a Netherlands-based contact lens supplier, has reportedly exposed the personal information of over 100,000 customers. According to the Cyber Security Hub post, the breach affects 115,096 individuals and includes sensitive details such as full names, birthdates, email addresses, hashed passwords, IP addresses, and in some cases, company details. Some…
-
Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign
Cybersecurity researchers are warning of a spike in suspicious login scanning activity targeting Palo Alto Networks PAN-OS GlobalProtect gateways, with nearly 24,000 unique IP addresses attempting to access these portals.”This pattern suggests a coordinated effort to probe network defenses and identify exposed or vulnerable systems, potentially as a precursor to targeted exploitation,” threat First seen…
-
Cloud security explained: What’s left exposed?
Think AWS has security covered? Think again. Discover real-world examples of what it doesn’t secure and how to protect your environment First seen on theregister.com Jump to article: www.theregister.com/2025/03/31/cloud_security_explained_whats_left/