Tag: data
-
Multiple 7-Zip Vulnerabilities Enable Arbitrary Code Execution
Multiple memory safety bugs in 7″‘Zip 26.00 allow remote attackers to leak sensitive data and, in at least one case, execute arbitrary code when a victim opens a crafted archive file. GitHub Security Lab has disclosed a critical heap buffer overflow in 7″‘Zip’s NTFS handler (GHSL”‘2026″‘140, CVE”‘2026″‘48095), alongside a cluster of additional memory access violations…
-
Third-Party Cyberattack Impacts Patient Information at The Oncology Institute
The Oncology Institute disclosed a data breach tied to a third-party vendor, potentially exposing patient information after a 2025 cyberattack. The Oncology Institute has confirmed that patient information was impacted in a cybersecurity incident involving a third-party software provider. The healthcare network first disclosed the security breach in November 2025 while the vendor’s investigation was…
-
Ransomware Uses ChaCha20 and Curve25519 to Encrypt Windows Files
Payload ransomware is a new Windows ransomware family that combines ChaCha20 stream encryption with per-file Curve25519 ECDH key exchange, making victim data effectively unrecoverable without the attackers’ private key. It also implements strong anti-forensics, including ETW patching, VSS deletion, event log wiping, and aggressive process/service termination to hinder detection and recovery. Payload first appeared publicly…
-
Hacker Lists 340M OnlyFans User Records for Sale
A hacker is selling a 340M OnlyFans database, but the seller says old leaks and public data were used to link creators and subscribers to real identities. The post Hacker Lists 340M OnlyFans User Records for Sale appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-onlyfans-340m-database-sale/
-
340 Million OnlyFans Profiles Allegedly Rebuilt from Leaks
A hacker is selling a 340M-strong OnlyFans-linked dataset built by correlating old breaches and public data, not by hacking OnlyFans directly. A threat actor is adverertising a purported database containing data of 340 million OnlyFans users, but the available evidence points to something less dramatic than a direct breach. According to HackRead, which reported the…
-
340 Million OnlyFans Profiles Allegedly Rebuilt from Leaks
A hacker is selling a 340M-strong OnlyFans-linked dataset built by correlating old breaches and public data, not by hacking OnlyFans directly. A threat actor is adverertising a purported database containing data of 340 million OnlyFans users, but the available evidence points to something less dramatic than a direct breach. According to HackRead, which reported the…
-
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks
Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks.According to QiAnXin XLab, the activity involves the exploitation of CVE-2026-26980 (CVSS score: 9.4), an SQL injection vulnerability in Ghost’s Content API that could allow an unauthenticated attacker to read arbitrary…
-
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks
Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks.According to QiAnXin XLab, the activity involves the exploitation of CVE-2026-26980 (CVSS score: 9.4), an SQL injection vulnerability in Ghost’s Content API that could allow an unauthenticated attacker to read arbitrary…
-
WhatsApp Chat Histories Exposed in Unencrypted Storage on macOS and iOS
Security researchers have raised concerns over how WhatsApp stores user chat data on macOS and iOS, revealing that message databases may be stored in unencrypted form within app group containers accessible by other applications from the same developer ecosystem. According to researchers at Mysk, WhatsApp stores chat histories in plaintext within a shared app group…
-
WhatsApp Chat Histories Exposed in Unencrypted Storage on macOS and iOS
Security researchers have raised concerns over how WhatsApp stores user chat data on macOS and iOS, revealing that message databases may be stored in unencrypted form within app group containers accessible by other applications from the same developer ecosystem. According to researchers at Mysk, WhatsApp stores chat histories in plaintext within a shared app group…
-
Hackers Exploit Azure RBAC to Steal Key Vault Secrets
Hackers are increasingly exploiting cloud identity and access management systems, and a methodical, sophisticated, and multi-layered attack, where a threat actor we track as Storm-2949 launched a relentless campaign with a singular focus: to exfiltrate as much sensitive data from a target organization’s high-value assets as possible. The attack, attributed to a threat actor tracked…
-
Lessons for organizations from the Verizon 2026 Data Breach Investigations Report
This is my favourite time of the year, not just because spring is here and the promise of summer is on the way. But also, because one of my must reads each year gets … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/25/lessons-from-verizon-dbir-2026-findings/
-
Hacker Selling 340 Million OnlyFans User Records Built From Old Breaches
A hacker is selling a 340M OnlyFans user database allegedly built by matching old breach data and public profiles to real OnlyFans accounts. First seen on hackread.com Jump to article: hackread.com/hacker-selling-onlyfans-user-records-old-breaches/
-
Why pure extortion is replacing traditional ransomware
Ransomware gangs are shifting from encryption to pure extortion, focusing on stolen data, reputational pressure, and stealthier attacks. Ransomware groups are quietly changing strategy in 2026. Instead of encrypting systems and causing immediate disruption, many attackers are now focusing on pure extortion: stealing sensitive data and threatening to leak it publicly if victims refuse to…
-
Trump Mobile confirms exposure of customer data
First seen on scworld.com Jump to article: www.scworld.com/brief/trump-mobile-confirms-exposure-of-customer-data
-
Perimeter Defense Isn’t Enough. MSSPs Need a Data Resilience Strategy
First seen on scworld.com Jump to article: www.scworld.com/news/perimeter-defense-isnt-enough-mssps-need-a-data-resilience-strategy
-
Wahlap data leak exposes 18.9 million records from WeChat mini-program ecosystem
First seen on scworld.com Jump to article: www.scworld.com/brief/wahlap-data-leak-exposes-18-9-million-records-from-wechat-mini-program-ecosystem
-
Scaling the SOC Is a Data Problem: What MSSPs Need to Get Right
First seen on scworld.com Jump to article: www.scworld.com/perspective/scaling-the-soc-is-a-data-problem-what-mssps-need-to-get-right
-
Scaling the SOC Is a Data Problem: What MSSPs Need to Get Right
First seen on scworld.com Jump to article: www.scworld.com/perspective/scaling-the-soc-is-a-data-problem-what-mssps-need-to-get-right
-
Senator urges classified briefing after CISA data leak on GitHub
First seen on scworld.com Jump to article: www.scworld.com/news/senator-urges-classified-briefing-after-cisa-data-leak-on-github
-
Data Sanitization Challenges Are Increasing in the AI Era
A new Blancco report shows AI and poor sanitization practices are increasing data security risks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/data-sanitization-challenges-are-increasing-in-the-ai-era/
-
Data Sanitization Challenges Are Increasing in the AI Era
A new Blancco report shows AI and poor sanitization practices are increasing data security risks. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/data-sanitization-challenges-are-increasing-in-the-ai-era/
-
Trump Mobile phone provider reportedly leaking customer data
First seen on scworld.com Jump to article: www.scworld.com/brief/trump-mobile-phone-provider-leaking-customer-data
-
Confluent Targets Real-Time AI Data Gaps
First seen on scworld.com Jump to article: www.scworld.com/brief/confluent-targets-real-time-ai-data-gaps
-
Cato Adds Data Context to XOps
Tags: dataFirst seen on scworld.com Jump to article: www.scworld.com/brief/cato-adds-data-context-to-xops
-
First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups
Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomware attacks, data theft, scanning, and denial-of-service attacks.The disruption of First VPN Service was led by France and the Netherlands, with several other nations supporting the investigation since…
-
Trump Mobile confirms it exposed customers’ personal data, including phone numbers and home addresses
President Trump’s branded cell phone maker and cell provider said the exposure was linked to a third-party platform, and was evaluating whether it needs to notify customers. First seen on techcrunch.com Jump to article: techcrunch.com/2026/05/22/trump-mobile-confirms-it-exposed-customers-personal-data-including-phone-numbers-and-home-addresses/
-
Hackers steal patient and billing data from German hospitals via third-party provider
The large-scale data breach reportedly hit Unimed, a company that handles billing services for privately insured and self-paying patients on behalf of numerous German hospitals. First seen on therecord.media Jump to article: therecord.media/hackers-steal-patient-billing-data-german-hospitals
-
Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning
The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/