Tag: data-breach
-
PoeLLM Malware Hijacks 3,400+ Servers for Crypto Mining and Botnet Expansion
Tags: ai, botnet, control, crypto, cyber, data-breach, exploit, infrastructure, Internet, malware, vulnerabilityA cryptocurrency mining campaign dubbed PoeLLM has compromised more than 3,400 servers by targeting exposed AI infrastructure and other internet-facing applications. Active since April 2026, the operation combines vulnerability exploitation, cryptocurrency miners and an unusual command-and-control mechanism that derives server addresses from a poem hosted on GitHub. Victims predominantly run LiteLLM, Ollama, Gotenberg and Gitea,…
-
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-ongoing-fortibleed-attacks-lock-out-fortigate-vpn-admins/
-
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence (AI) and large language model (LLM) infrastructure with an aim to deploy cryptocurrency miners and further expand the scale of the botnet.The financially motivated campaign, dubbed Canto Incognito, has been found to install cryptocurrency miners, including First…
-
PoeLLM malware infects exposed AI servers in cryptomining attacks
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/poellm-malware-infects-exposed-ai-servers-in-cryptomining-attacks/
-
EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data
Ernst & Young (EY) has warned that a data breach exposed personal and financial information belonging to clients of Goldman Sachs’ wealth management division and Man Group. The incident involved a platform supporting EY’s tax services, not the financial firms’ own networks, according to client notifications reported by the Financial Times. The latest disclosures expand…
-
Atlassian Warns of Critical Flaw Affecting Eight Self-Managed Products
Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting Confluence Data Center and seven other self-managed products. The advisory, published on October 5, 2026, warns that every version of the affected software is exposed and urges administrators to act right away, either by upgrading or by putting temporary safeguards in place. First seen…
-
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways.”The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat First seen…
-
Advantest confirms personal information stolen in ransomware attack
Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/advantest-confirms-personal-information-stolen-in-ransomware-attack/
-
Hackers Use ERP Web Shell and IDOR Flaws to Breach Major South Korean Churches
Attackers breached two of South Korea’s largest churches through distinct intrusion chains, combining an ERP web shell, privileged database access, leaked credentials, and broken authorization controls. Oasis Security’s analysis of attacker-server files documents extensive collection of congregant, employee, financial, and administrative information across both organizations. Its findings describe recovered attacker artifacts, rather than a complete…
-
ASOS confirms data breach after >>hacked<< app alert reaches shoppers
UK fashion retailer ASOS has confirmed a data breach after a notification claiming hackers had broken into its data was sent to shoppers through its app. ASOS was founded in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/07/asos-data-breach-app-notification/
-
Rockstar Games Attacks Expose MFA Fatigue, OAuth Token Theft and Dev Pipeline Security Failures
Rockstar Games’ breach history illustrates how stolen identities, trusted integrations and exposed development assets can undermine enterprise defenses without a perimeter exploit. A September 2026 Lares analysis connects the incidents, although several reconstructed attack details remain assessments rather than independently established forensic findings. In September 2022, an intrusion associated with Lapsus$ exposed approximately 90 GTA…
-
ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach
British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send… First seen on hackread.com Jump to article: hackread.com/asos-hackers-hijack-app-notifications-snowflake-data-breach/
-
AI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed
A reported leak of 13,000 screenshots shows how AI agents can bypass weak approval and audit controls even when organizations have written policies. The post AI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-agents-screenshot-leak-enterprise-governance/
-
AI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed
A reported leak of 13,000 screenshots shows how AI agents can bypass weak approval and audit controls even when organizations have written policies. The post AI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-agents-screenshot-leak-enterprise-governance/
-
Denmark Braces for Wave of Phishing Attacks
Attackers Stole Data of Nearly 9M Danes from the Central Register of Persons. Denmark’s residents have been hit by a data breach affecting the country’s Central Register of Persons, exposing names, addresses, CPR numbers and other details of 8.8 million people. The breach was traced to abuse of a small company’s legitimate access to the…
-
Denmark Braces for Wave of Phishing Attacks
Attackers Stole Data of Nearly 9M Danes from the Central Register of Persons. Denmark’s residents have been hit by a data breach affecting the country’s Central Register of Persons, exposing names, addresses, CPR numbers and other details of 8.8 million people. The breach was traced to abuse of a small company’s legitimate access to the…
-
FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach
The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system. First seen on hackread.com Jump to article: hackread.com/fbi-removes-accenture-contractor-shinyhunters-data-breach/
-
South Korean officials believe AI agents were used to hack several banks
The personal data of at least 68,000 people was reportedly exposed in breaches of at least seven financial institutions, with officials saying they believe a Chinese cybersecurity tool was used to hack the banks’ systems. First seen on therecord.media Jump to article: therecord.media/south-korean-bank-hacks-ai-agents
-
Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks
A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions, turning an AI coding assistant’s tool interface into an operational command-and-control channel. CloudSEK identified the activity while investigating exposed infrastructure belonging to an operator calling himself Azazel. Azazel also operated LEAKNED, an independent leak site that allegedly diverted…
-
Accenture Contractor Removed After FBI Data Breach Exposes Thousands of Employees
On October 5, the Federal Bureau of Investigation (FBI) terminated an Accenture employee’s contract after a security breach exposed sensitive information belonging to thousands of workers, according to Reuters. The incident involved an allegedly unpatched human resources platform, raising concerns about the bureau’s operational security. FBI cyber chief Brett Leatherman confirmed that the contractor failed…
-
Cling Botnet Spoofs Google STUN Traffic to Hide Commands Sent to Infected IoT Devices
Cling, an IoT botnet that disguises operator commands as Google STUN replies, blending malicious communications into routine NAT traversal traffic. Published October 1, the research documents exploitation of exposed networking devices and a command channel designed to exploit trust in familiar infrastructure. Researchers discovered the malware while investigating increased exploitation of CVE-2021-35394, a remote code…
-
FBI Drops Accenture Contractor After Sensitive Data Breach
Accenture lost an FBI contract after a missed security patch exposed sensitive employee data, raising serious concerns over operational security. The FBI pulled an Accenture contractor off its account on Monday, and the reason is almost mundane compared to the damage it caused. One update didn’t get installed on time. >>The “ŒFederal Bureau of Investigation…
-
Data breach at Denmark’s population register exposes 8.8 million people
A data breach at Denmark’s Central Population Register (CPR) has exposed the personal information of 8.8 million people. These include people living in Denmark, deceased … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/06/denmark-central-population-register-cpr-data-breach/
-
Product showcase: Webroot Mobile Security screens texts, blocks risky sites, and checks for data leaks
Webroot Mobile Security combines device security checks, Safari protection, text scam filtering, and data breach monitoring. It is available for iPhone, iPad, and Android … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/06/product-showcase-webroot-mobile-security/
-
Alleged ShinyHunters member reportedly detained in Jordan, assisting law enforcement
Saif “Œal-Din Khader is cooperating with the FBI, reports said, as the bureau responds to a massive breach that exposed employee data. First seen on therecord.media Jump to article: therecord.media/alleged-shinyhunters-member-detained-jordan-fbi
-
Denmark population registry data breach affects 8.8 million people
Denmark’s Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/denmark-population-registry-data-breach-affects-88-million-people/
-
Denmark’s CPR breach exposes 8.8 million people as experts warn over trusted third-party access
Personal details belonging to around 8.8 million people have been exposed in a breach of Denmark’s Central Person Register (CPR), after unauthorised parties abused a Danish company’s legitimate access to the national civil registration system, authorities confirmed on Monday. According to the Ministry of Research, Education and Digitalisation, the compromised information includes names, addresses and…