Do Son Trend Micro reveals a new global malware campaign, EvilAI, that impersonates productivity and AI tools to infiltrate organizations and steal data.
Data Breach
A ransomware attack on a major Brazilian healthcare software provider exposes over 94,000 sensitive patient files, highlighting a new cyber threat.
A major breach at Salesloft's Drift platform exposed customer authentication tokens, leading to unauthorized access of Salesforce data at over 750 companies.
Plex has confirmed a data breach that exposed user data, including hashed passwords. All users are being urged to reset their passwords as a security precaution.
Cloudflare confirms it was hit by the Salesforce supply chain attack, exposing customer support data. The company is urging users to rotate credentials.
Google clarifies that recent claims of a "major Gmail security breach" affecting 2.5 billion users are entirely false and based on misinformation.
A new report reveals a dangerous misconfiguration: exposed appsettings.json files can contain Azure AD credentials, giving attackers full access to a company's cloud kingdom.
SK Telecom was fined a record-breaking $96.5 million after a massive data breach exposed the personal data of 27 million users.
A critical SQL injection flaw (CVE-2025-50979) in NodeBB allows remote attackers to access sensitive data. Admins are urged to patch immediately.
A severe misconfiguration in Tencent Cloud exposed sensitive internal credentials and source code to the public internet for months, risking a major breach.
A new report reveals that a phishing attack on a Salesforce vendor has led to a data breach at Farmers Insurance, exposing the data of over 1.1 million customers.
A new Rapid7 report reveals four critical flaws in Securden's Privileged Access Manager, including authentication bypass and RCE, that could expose passwords and secrets.
Earlier, encrypted email provider ProtonMail introduced a standalone two-factor authentication (2FA) tool. One might wonder why, given...
A design flaw in xAI's Grok chatbot has led to over 370,000 private conversations being indexed by search engines and exposed to the public.
A 26-year-old UK hacker, tied to the Yemen Cyber Army, has been sentenced to 20 months in prison for breaching thousands of websites and stealing data.
Critical design flaws in Workhorse Software's municipal accounting platform could allow unauthenticated users to download full database backups with sensitive PII and financial records.
Google confirms a June Salesforce breach by UNC6040 (ShinyHunters). The attack used social engineering to steal credentials, a tactic also used against Chanel and Allianz.
Seychelles Commercial Bank (SCB) suffered a cyberattack exposing 1.4M+ customer PII, including government employee data. Resecurity suspects espionage, not just financial gain, given the low data sale price.
The women-only Tea dating app experienced a second data breach, exposing over 1 million private messages, including sensitive discussions on abortion and infidelity, along with user IDs and selfies.
Allianz Life confirms a data breach impacting over 1.4 million individuals after attackers used social engineering to access a cloud-based CRM system. ShinyHunters is suspected.
The women-only dating app, Tea, suffered a data breach, leaking 72,000 images, including 13,000 selfies and ID documents, from users who registered before February 2024.
A misconfigured Elasticsearch server exposed hundreds of millions of detailed records on Swedish citizens and businesses, linked to fintech company Risika. The database is now secured.