Collecting Cyber-News from over 60 sources

Tag: theft

Medtronic discloses security incident after ShinyHunters claimed theft of 9M+ records

Apr 27, 2026 10:39 PM

Tags: breach, corporate, cyberattack, group, hacker, international, security-incident, theft

Medtronic confirmed a breach of its IT systems after ShinyHunters claimed the theft of over 9 million records. Medtronic confirmed a cyberattack on its corporate IT systems after the hacker group ShinyHunters claimed to have stolen over 9 million records. The company did not share details on the security breach. Medtronic is an international medical…
BlackFile actively extorting data-theft victims in retail and hospitality sector

Apr 27, 2026 5:39 PM

Tags: data, ransom, theft

Some attackers, which researchers link to The Com, have swatted company executives to increase leverage and pressure victims to pay their ransom demands. First seen on cyberscoop.com Jump to article: cyberscoop.com/blackfile-data-theft-extortion-retail-unit-42-rh-isac/
Medtronic confirms breach after hackers claim 9 million records theft

Apr 27, 2026 4:39 PM

Tags: breach, corporate, data, hacker, network, theft

Medical device giant Medtronic disclosed last week that hackers breached its network and accessed data in “certain corporate IT systems.” First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/medtronic-confirms-breach-after-hackers-claim-9-million-records-theft/
BlackFile Group Targets Retail and Hospitality with Vishing Attacks

Apr 27, 2026 10:39 AM

Tags: attack, data, extortion, group, theft

Researchers uncover a new data theft and extortion group dubbed “BlackFile” First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/blackfile-group-targets-retail/
BlackFile Group Targets Retail and Hospitality with Vishing Attacks

Apr 27, 2026 10:39 AM

Tags: attack, data, extortion, group, theft

Researchers uncover a new data theft and extortion group dubbed “BlackFile” First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/blackfile-group-targets-retail/
BlackFile Group Targets Retail and Hospitality with Vishing Attacks

Apr 27, 2026 10:39 AM

Tags: attack, data, extortion, group, theft

Researchers uncover a new data theft and extortion group dubbed “BlackFile” First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/blackfile-group-targets-retail/
New BlackFile extortion group linked to surge of vishing attacks

Apr 24, 2026 9:39 PM

Tags: attack, data, extortion, group, hacking, theft

A new financially motivated hacking group tracked as BlackFile has been linked to a wave of data theft and extortion attacks against retail and hospitality organizations since February 2026. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-blackfile-extortion-gang-targets-retail-and-hospitality-orgs/
North Korea’s Lazarus Targets macOS Users via ClickFix

Apr 24, 2026 3:39 PM

Tags: access, data, korea, lazarus, macOS, north-korea, theft

Lazarus continues leveraging ClickFix for initial access and data theft, in this case, against Mac-centric organizations and their high-value leaders. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/north-koreas-lazarus-targets-macos-users-clickfix
Community-Tool zur Erkennung von Credential-Theft mit Defense-First-AI

Apr 24, 2026 2:39 PM

Tags: ai, cybersecurity, defense, theft, tool

Arctic Wolf gibt die Einführung von Decipio bekannt. Dabei handelt es sich um ein defensives Cybersecurity-Tool, das Security-Teams dabei unterstützt, Angreifer genau in dem Moment zu erkennen, in dem sie Zugangsdaten innerhalb eines Netzwerks stehlen wollen. Der Diebstahl von Zugangsdaten zählt weiterhin zu den häufigsten Arten von Cyberangriffen, gleichzeitig stellt sich deren frühzeitige Erkennung als besonders schwer dar. Der jährliche Threat-Report von Arctic Wolf zeigt wiederholt,…
French Police Arrest HexDex Hacker Over Mass Data Theft and Leaks

Apr 24, 2026 12:39 PM

Tags: data, government, group, hacker, leak, theft

French police arrest HexDex hacker, a 20-year-old suspect accused of mass data theft and leaks targeting government, sports groups, and firms. First seen on hackread.com Jump to article: hackread.com/french-police-arrest-hexdex-hacker-data-leak-leaks/
Ransomware Gang Unveils Custom Data-Theft Tool

Apr 24, 2026 7:38 AM

Tags: attack, cyber, data, group, ransomware, theft, tool

Ransomware operators introduced a custom-built data exfiltration tool, signaling a notable evolution in attack techniques. Unlike most ransomware groups that rely on publicly available utilities such as Rclone or MegaSync, Trigona affiliates are now using a proprietary tool to steal sensitive data with greater precision and stealth. Trigona, active since late 2022, operates as a…
Bitwarden CLI password manager trojanized in supply chain attack

Apr 24, 2026 1:38 AM

Tags: access, ai, api, attack, automation, cloud, control, credentials, data, github, group, malicious, network, password, software, supply-chain, theft, unauthorized

bw_setup.js that checks if the bun package manager is installed and then uses it to execute bw1.js. If bun doesn’t exist, it is downloaded and installed from GitHub.According to an analysis by security firm JFrog, the malicious payload is designed to detect and collect a board range of credentials and access tokens from the filesystem,…
Cryptohack Roundup: US-Sanctioned Grinex Hacked

Apr 23, 2026 9:39 PM

Tags: crypto, exploit, finance, hacker, scam, theft, update

Also: Updates in KelpDAO, Drift, Hyperbridge Hacks. This week, Grinex was exploited, a hacker laundered KelpDAO funds, Circle was sued over $280M Drift hack, Rhea Finance and Volo Protocol were exploited, update in Hyperbridge hack, sentencing in art scam case, a French home invasion for crypto theft and eth.limo hijack thwarted. First seen on govinfosecurity.com…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Self-Propagating npm Malware Turns Trusted Packages Into Attack Paths

Apr 23, 2026 8:39 PM

Tags: access, api, attack, authentication, automation, breach, control, credentials, crypto, data, data-breach, endpoint, exploit, intelligence, malicious, malware, open-source, pypi, risk, service, software, supply-chain, theft, threat, unauthorized, worm

<div cla TL;DR An open source malware campaign dubbed CanisterSprawl has been observed in npm, stealing sensitive data from developer machines including tokens, API keys, and more. From there, the malware publishes additional compromised packages under hijacked credentials, abusing developer trust in open source ecosystems to spread. Impacted organizations should remove the malware immediately, examine…
Offer customers passkeys by default, UK’s NCSC tells enterprises

Apr 23, 2026 4:39 PM

Tags: attack, authentication, credentials, cyber, identity, login, mfa, passkey, password, phishing, risk, service, strategy, theft

How passkeys change the attack model: The NCSC added that passkeys reduce risk by removing reliance on shared secrets and binding authentication to the legitimate service.According to the agency, this prevents credential reuse and relay attacks, as authentication cannot be intercepted and reused by an attacker.Passkeys use cryptographic key pairs stored on a user’s device,…
UK’s NCSC calls passkeys the default, says passwords are no longer fit for the purpose

Apr 23, 2026 3:39 PM

Tags: attack, authentication, credentials, cyber, identity, login, mfa, passkey, password, phishing, risk, service, strategy, theft

How passkeys change the attack model: The NCSC added that passkeys reduce risk by removing reliance on shared secrets and binding authentication to the legitimate service.According to the agency, this prevents credential reuse and relay attacks, as authentication cannot be intercepted and reused by an attacker.Passkeys use cryptographic key pairs stored on a user’s device,…
Xinference PyPI Breach Exposes Developers to Cloud Credential Theft

Apr 23, 2026 10:39 AM

Tags: attack, breach, cloud, credentials, cyber, data, malicious, pypi, software, supply-chain, theft, threat, tool

A severe supply chain attack has compromised the popular Python package Xinference, exposing developers to massive data theft. Threat actors uploaded malicious versions of the tool to the Python Package Index (PyPI), embedding a heavily obfuscated infostealer into the code. Xinference has over 600,000 total downloads, making this a significant security event for the software…
Malicious pgserve, automagik developer tools found in npm registry

Apr 23, 2026 5:39 AM

Tags: access, attack, breach, cloud, control, corporate, credentials, crypto, data, firewall, github, infrastructure, least-privilege, malicious, malware, network, open-source, password, radius, risk, service, software, tactics, theft, threat, tool, worm

Advice to victimized developers: Developers who have downloaded the malicious versions of pgserver and automagik need to act fast, says Tanya Janca, head of Canadian secure coding consultancy SheHacksPurple.”Rotate every credential you can think of, right now, before you do anything else,” she said. “Then harden your CI/CD network egress controls so your build runners…
North Korea Blamed for $290m KelpDAO Crypto Heist

Apr 22, 2026 5:39 PM

Tags: crypto, group, korea, lazarus, north-korea, theft

North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/north-korean-blamed-290m-kelpdao/
Auraboros RAT Adds Live Audio, Keylogging, and Cookie Theft via Open C2 Panel

Apr 22, 2026 11:39 AM

Tags: access, control, credentials, cyber, data, data-breach, framework, Internet, rat, theft

A fully exposed command-and-control (C2) panel for a previously undocumented remote access trojan (RAT) framework dubbed Auraboros, supporting live audio streaming, intensive keylogging, browser credential theft, and multi-cookie hijacking all accessible over the internet with zero authentication. Further inspection revealed “Auraboros C2 Station,” a polished single-page dashboard that immediately loads victim data and live controls without…
North Korea’s Lazarus APT stole $290M from Kelp DAO

Apr 21, 2026 9:39 PM

Tags: apt, crypto, finance, group, hacker, korea, lazarus, north-korea, theft

North Korea-linked Lazarus Group stole $290M from Kelp DAO by abusing LayerZero. A second $95M attempt was stopped. Hackers tied to the North-Korea linked group Lazarus APT carried out a $290M crypto theft targeting Kelp DAO. Kelp DAO is a decentralized finance (DeFi) protocol built on the Ethereum ecosystem that focuses on a concept called…
Top techniques attackers use to infiltrate your systems today

Apr 21, 2026 11:39 AM

Tags: 2fa, access, ai, api, attack, authentication, automation, business, captcha, cloud, container, control, corporate, credentials, cybercrime, cybersecurity, data, deep-fake, defense, detection, email, exploit, flaw, hacking, Hardware, identity, infrastructure, least-privilege, malicious, mfa, microsoft, monitoring, network, password, phishing, powershell, ransomware, risk, saas, scam, service, social-engineering, software, supply-chain, theft, tool, training, vpn, vulnerability, worm

Network security device hacking: Network edge devices have increasingly drawn attackers’ attention over the past two years, establishing a new battleground where the very devices meant to protect the network have become attractive targets for exploitation.As a result, flaws in security device, such as SSL VPN systems and other gateways, are among the top initial…
North Korean Blamed for $290m KelpDAO Crypto Heist

Apr 21, 2026 11:39 AM

Tags: crypto, group, korea, lazarus, north-korea, theft

North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/north-korean-blamed-290m-kelpdao/
North Korean hackers blamed for $290M crypto theft

Apr 20, 2026 11:38 PM

Tags: crypto, hacker, north-korea, theft

The hack against Kelp DAO is the largest crypto heist of the year so far. First seen on techcrunch.com Jump to article: techcrunch.com/2026/04/20/north-korea-hackers-blamed-for-290m-crypto-theft/
Scattered Spider member Tyler Buchanan pleads guilty to major crypto theft

Apr 20, 2026 9:39 PM

Tags: crypto, fraud, group, hacking, theft

Tyler Buchanan, linked to Scattered Spider, pleaded guilty in the US to hacking companies and stealing millions in cryptocurrency. Tyler Buchanan, a 24-year-old from Scotland linked to the Scattered Spider group, admitted in a US court that he hacked dozens of companies, committed fraud, and stole millions in cryptocurrency. Spanish police arrested the British national…
Scattered Spider member Tyler Buchanan pleads guilty to major crypto theft

Apr 20, 2026 9:39 PM

Tags: crypto, fraud, group, hacking, theft

Tyler Buchanan, linked to Scattered Spider, pleaded guilty in the US to hacking companies and stealing millions in cryptocurrency. Tyler Buchanan, a 24-year-old from Scotland linked to the Scattered Spider group, admitted in a US court that he hacked dozens of companies, committed fraud, and stole millions in cryptocurrency. Spanish police arrested the British national…
Seiko USA website defaced as hacker claims customer data theft

Apr 20, 2026 9:39 PM

Tags: data, hacker, leak, ransom, theft, usa

The Seiko USA website was defaced over the weekend, displaying a message from attackers claiming they stole its Shopify customer database and threatening to leak it unless a ransom is paid. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/seiko-usa-website-defaced-as-hacker-claims-customer-data-theft/
Vercel Traces Customer Data Theft to Agentic AI Tool Breach

Apr 20, 2026 8:39 PM

Tags: ai, breach, cloud, credentials, data, intelligence, service, theft, tool

Attacker First Compromised AI Tool Used by Vercel Employee, Platform Provider Finds. Cloud platform provider Vercel said an attacker breached its systems and stole customer data after compromising a third-party agentic artificial intelligence tool used by an employee, called Context.ai, and stealing from it credentials and OAuth tokens tied to multiple services and customers. First…