Skip to content
October 30, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Top 8 biggest hacks of 2017
  • Data Leak
  • News

Top 8 biggest hacks of 2017

Do Son December 28, 2017 6 minutes read
Add Daily CyberSecurity as a preferred source on Google

1. Equifax data leak

Equifax, founded in 1899, has more than 800 million consumers and more than 88 million businesses worldwide. As a veteran credit information agency, it has important information about a large number of US consumers, such as your name, date of birth, home address, Social Security number SSN, driver’s license ID, and credit card information.

Equifax, with so much important information on it, was targeted by hackers in May of this year and did not notice until the end of July. Worse still, it was not announced to the public until September.

During this time, a total of three executives from Equifax’s CFO, US Information Solutions President, and Staffing Program President sold Equifax shares with a total value of nearly $ 1.8 million …

Frightened Americans began to worry that some people on the Internet had already sold their information to customers such as banks, landlords, and employers, and those who bought the information would know you better.

2. Yahoo admitted that 3 billion user account information fell into the hands of hackers in 2013

Last September, Yahoo! Inc. announced that hackers stole account information for at least 500 million of its users in August 2013. In December of that year, Yahoo also said that the number of stolen accounts of about 1 billion. According to information released on October 3 this year, Yahoo confirmed that all 3 billion of its user accounts should be hacked. The company has sent more prompts to more users to change their login password and related login information.

Yahoo and the investigators have said that the “state-funded hacker” launched the attack, but did not specify which country it was.

Stolen information includes user name, e-mail address, phone number, birthday and part of the user some customers encrypted or not encrypted security problems and answers. On October 3, Yahoo again stressed that hackers should not have access to computers that have unprotected passwords, payment card data, and bank account information, meaning that user account information is partially stolen.

Yahoo said there should be fewer than 3 billion affected users due to the existence of some accounts that are either permanently or rarely used and some that have multiple Yahoo accounts.

3. NSA attack tools leak, triggering “WannaCry” and other 

In the early hours of April 6, the United States conducted military sanctions on Syria on the grounds of opposing the anti-personnel chemical weapons and launched 59 Tomahawk cruise missiles on the Syrian government space base.

It was not long before the hacker group Shadow Brokers, protesting the U.S. attack on Syrian airbase, announced it would proclaim to the world that it had obtained a copy of the Equation Group, a hacker group affiliated with the NSA (the U.S. National Security Agency) The decryption key – CrDj “(; Va.*NdlnzB9M? @ K2) #> deB7mN, so that everyone in the world can view the United States network warfare weapons.

To put it bluntly, the United States bullied Syria. The Shadow Brokers felt uncomfortable. As a result, they released the dirty gadgets of the U.S. government for dirty work to the world and showed great fearlessness.

Hackers can exploit these tools to compromise a variety of Windows servers and operating systems, including Windows 7 and Windows 8 systems.

Although Microsoft said in March this year released a patch for the related security vulnerabilities, but many companies did not update. Subsequently, the “shadow broker” tool released to create a number of major international hacker events, such as “WannaCry” “blackmail incident.

4. WannaCry ransomware

People have seen that the author of the outbreak of ransomware received 350,000 U.S. dollars and it seems that there is not much more than its global influence. But many people do not know that this worm-transmitted virus is version 2.0, whereas in the previous version 1.0 virus authors had made tens of millions of dollars.

On the night of December 18, the U.S. government made a public statement that North Korea is behind the WannaCry incident.

5. Petya Ransomware

On June 27, Twitter reported that a new ransomware similar to “WannaCry” swept across Europe, causing many large enterprises, including RosneftPJSC and Danish AP Muller-Maersk Co., Ltd., to be attacked, And the government system in Ukraine was also hit by the virus. The virus code-named “Petya.”

In June of this year, the “Nott Petilia” computer virus targeted Ukrainian companies that use poisoning tax software. Several large multinational companies recruit, including FedEx, WPP Advertising UK, Rosneft and Maersk Line Denmark.

The Nottpea’s method of communication also exploits the security loopholes exposed by Shadow Brokers.

US FedEx said in September that the virus has caused a loss of 300 million U.S. dollars and its TNT International Courier Company was forced to suspend business.

6. Bad Rabbit ransomware

Another ransomware that caused a lot of commotion was the “bad rabbit.” Bad Rabbit infiltrated the user’s computer with Adobe Flash software installation requests popped up on the news media site, and those news sites were hacked.

This wave of blackmail wave occurred in October and mainly hit Russia. However, some experts found that victims also appeared in Ukraine, Turkey, and Germany.

This thing reminds us that users must not download the software through an advertisement pop-up window or a website that does not belong to a software company.

7. Voter records exposed

In June, a computer security researcher found that a U.S. Republican data company had made a mistake in choosing the security settings for its Amazon cloud storage service, resulting in the disclosure of nearly 200 million voters.

This is the latest major breach caused by the unsafe Amazon server. The server’s default option is safe, but cybersecurity officer Chris Vickery often discovers there is a company setting error.

Verizon and the U.S. Department of Defense have the same information stored on Amazon servers.

8. Uber paid $100,000 to hacker

In 2016, hackers stole data from 57 million Uber users, and Uber subsequently paid $ 100,000 to quell the incident. It was not until November of this year that the case was revealed by Dara Horaosossi, the new chief executive of Uber. Uber is now facing a question from legislators. Three federal senators to promote the relevant bills, it is likely to lead to those who intentionally cover up the data invasion of the face of prison.

Source: CNN

 

Related coverage

  • Critical Step CA Flaw (CVE-2025-44005, CVSS 10.0) Allows Unauthenticated Bypass to Issue Fraudulent Certificates
  • AdFection Spyware Attack Targets Al Jazeera Devices
  • PSAUX Ransomware is Exploiting Two Max Severity Flaws (CVE-2024-51567, CVE-2024-51568) in CyberPanel
  • OpenAI Rogue AI Agents May Have Hit 100+ Organizations
  • Microsoft develops new tools that prevent AI algorithms from being biased
  • Critical CVE-2025-32433 PoC Released: Erlang/OTP SSH Vulnerability Enables RCE
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Bad Rabbit ransomware Petya Ransomware WannaCry Ransomware

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    Admin intel📅 Updated: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    CISA KEV📅 Added to KEV: Oct 29, 2026
  • CVE-2026-76418CVSS 8.6
    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
    CISA KEV📅 Added to KEV: Oct 29, 2026
  • CVE-2026-116690CVSS 7.5
    MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
    Admin intel📅 Updated: Oct 28, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-86413CVSS 9.1
    When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl...
    📅 Updated: Oct 30, 2026
  • CVE-2026-86414CVSS 9.1
    An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to...
    📅 Updated: Oct 30, 2026
  • CVE-2026-87861CVSS 9.1
    When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection...
    📅 Updated: Oct 30, 2026
  • CVE-2026-119568CVSS 9.1
    vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data...
    📅 Updated: Oct 30, 2026
  • CVE-2026-119418CVSS 9.2
    CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame...
    📅 Updated: Oct 30, 2026
  • CVE-2026-119419CVSS 9.2
    CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated collation...
    📅 Updated: Oct 30, 2026
  • CVE-2025-31704CVSS 9.8
    A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially...
    📅 Updated: Oct 30, 2026
  • CVE-2026-116366CVSS 9.5
    An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with...
    📅 Updated: Oct 30, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.