Tag: data-breach
-
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover
Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/13/slugfest-npm-trusted-publishing-flaw/
-
npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover
Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/13/slugfest-npm-trusted-publishing-flaw/
-
Denmark Data Breach Involving 8.8 Million Records Linked to ‘123456’ Password
A significant data breach in Denmark has exposed approximately 8.8 million personal records, linked to inadequate account security at Pays ApS, a small IT company located in Odense, Funen. An investigation by Politiken revealed that at least three accounts within the company, including an administrator account, utilized the password >>123456.<< The compromised data included Danish…
-
Denmark Data Breach Involving 8.8 Million Records Linked to ‘123456’ Password
A significant data breach in Denmark has exposed approximately 8.8 million personal records, linked to inadequate account security at Pays ApS, a small IT company located in Odense, Funen. An investigation by Politiken revealed that at least three accounts within the company, including an administrator account, utilized the password >>123456.<< The compromised data included Danish…
-
Denmark Data Breach Involving 8.8 Million Records Linked to ‘123456’ Password
A significant data breach in Denmark has exposed approximately 8.8 million personal records, linked to inadequate account security at Pays ApS, a small IT company located in Odense, Funen. An investigation by Politiken revealed that at least three accounts within the company, including an administrator account, utilized the password >>123456.<< The compromised data included Danish…
-
GitLab fixes critical vulnerability that exposed software environments to sabotage
The company urged customers to upgrade to the latest versions of its flagship products. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/gitlab-vulnerability-remote-code-execution/832736/
-
GitLab fixes serious vulnerability that exposed software environments to sabotage
The company urged customers to upgrade to the latest versions of its flagship products. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/gitlab-vulnerability-remote-code-execution/832736/
-
Nippon Columbia Malware Infection Puts 8.72 Million Daiichikosho Customer Records at Risk
Japanese karaoke operator Daiichi Kosho has issued a warning about a malware infection at its outsourcing partner, Nippon Columbia Group (NCG), that may have exposed about 8.72 million personal records. This potential data exposure includes both customer and employee information, not just customer records. As of now, neither data theft nor misuse has been confirmed,…
-
Seoul National University Faces 588 Hacking Attempts in 2026
Seoul National University (SNU) has been struck by 28 hacking incidents since 2021, and more than 1,100 pieces of personal information belonging to students, faculty and staff were exposed along the way. The SNU cyberattack figures come from data the university submitted on Sunday to Rep. Baek Seung-ah of the Democratic Party. First seen on…
-
Karaoke Giant Reveals Data Breach Impacting Eight Million
Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/karaoke-giant-data-breach-eight/
-
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/nippon-columbia-malware-incident-exposes-86-million-karaoke-fan-records/
-
Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
Traditional attack surface management helps organizations discover exposed assets, but visibility alone is not enough to address threats. Criminal IP introduces AITEM, an AI-powered approach that connects exposure discovery with investigation, risk prioritization, and response. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/criminal-ip-introduces-aitem-as-the-next-evolution-of-attack-surface-management/
-
Hundreds of thousands impacted by data breach at biosensor firm iRhythm
A company known for wearable cardiac sensors, iRhythm, has begun notifying states of the impact of a data breach from the summer. First seen on therecord.media Jump to article: therecord.media/irhythm-data-breach-reports
-
FBI touts another ShinyHunters arrest in response to data breach
“We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate,” FBI Director Kash Patel said. First seen on therecord.media Jump to article: therecord.media/shinyhunters-arrest-fbi-data-breach-investigation
-
High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring
Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets unauthenticated … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/09/nvidia-dcgm-exporter-vulnerability-cve-2026-47483/
-
Datenleck: 9 GByte Redaktions- und Nutzerdaten von Nius frei zugänglich
Unbekannte stellen die Nius-Daten nach einem Hackerangriff ins Netz. Sie enthalten auch Informationen über Gesprächspartner der Redaktion. First seen on golem.de Jump to article: www.golem.de/news/datenleck-9-gbyte-redaktions-und-nutzerdaten-von-nius-frei-zugaenglich-2610-213910.html
-
Datenleck: 9 GByte Redaktions- und Nutzerdaten von Nius frei zugänglich
Unbekannte stellen die Nius-Daten nach einem Hackerangriff ins Netz. Sie enthalten auch Informationen über Gesprächspartner der Redaktion. First seen on golem.de Jump to article: www.golem.de/news/datenleck-9-gbyte-redaktions-und-nutzerdaten-von-nius-frei-zugaenglich-2610-213910.html
-
Thousands of wind and solar park systems sit exposed on the internet across Europe
Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/09/eu-renewable-energy-cybersecurity/
-
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attacker left a server exposed, complete with tools and traces of an intrusion. Apparently, keeping things secure is a problem on both sides of the fence.The rest of the week isn’t much more reassuring. Malicious…
-
Scope of Asos data breach wider than first reported
Following a data breach earlier in October, cyber criminals appear to have a much more complete picture of Asos’ user base than first thought, it has emerged. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651860/Scope-of-Asos-data-breach-wider-than-first-reported
-
Leaked chats show Russian extortion gang sending ‘agents’ into US law firms
In leaked chats, members track dozens of victims, haggle over multimillion-dollar payments and direct operatives based in the United States whom they call “agents.” First seen on therecord.media Jump to article: therecord.media/leaked-chats-show-russian-extortion-gang-sending-agents-to-law-firms
-
Hackers target two South Korean megachurches, potentially exposing congregant data
Two of South Korea’s largest Protestant churches are investigating cyberattacks that may have exposed sensitive information about hundreds of thousands of members, including personal details, financial records and internal documents. First seen on therecord.media Jump to article: therecord.media/south-korea-hackers-megachurches
-
ASOS Confirms Data Breach Linked to Stolen Employee Credentials
The ASOS hack comes from the compromise of agentic marketing platform Simon AI, said the attackers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/asos-data-breach-stolen-employee/
-
US government lagging in transition to post-quantum encryption, GAO finds
Auditors warned that agencies risked leaving sensitive data exposed to future decryption attacks. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/government-quantum-encryption-migration-gao/832377/
-
Exposed DarkSword iOS Servers Reveal Crypto Wallet Theft From Compromised iPhones
Exposed directories on five servers have revealed an operational DarkSword/Coruna exploitation platform built to compromise iPhones and harvest cryptocurrency wallet secrets. Censys researchers uncovered delivery infrastructure, implants, wallet injection modules, and reseller controls. At the same time, a separate production-server capture contained 11 victim recovery phrases, 179 device loot directories, and 75 control-plane accounts. The…
-
Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets
Tags: ai, breach, china, cyber, data-breach, finance, hacker, infrastructure, open-source, penetration-testing, toolA financially motivated campaign that used agentic AI tools to breach South Korean financial organizations and exfiltrate data. Active from late September to early October 2026, the operation combined ARTEX, an open-source penetration testing platform developed in China, with multiple large language models. Researchers recovered exposed operational files that documented the attacker’s infrastructure, prompts, and…