Skip to content
October 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Top 8 biggest hacks of 2017
  • Data Leak
  • News

Top 8 biggest hacks of 2017

Do Son December 28, 2017 6 minutes read
Add Daily CyberSecurity as a preferred source on Google

1. Equifax data leak

Equifax, founded in 1899, has more than 800 million consumers and more than 88 million businesses worldwide. As a veteran credit information agency, it has important information about a large number of US consumers, such as your name, date of birth, home address, Social Security number SSN, driver’s license ID, and credit card information.

Equifax, with so much important information on it, was targeted by hackers in May of this year and did not notice until the end of July. Worse still, it was not announced to the public until September.

During this time, a total of three executives from Equifax’s CFO, US Information Solutions President, and Staffing Program President sold Equifax shares with a total value of nearly $ 1.8 million …

Frightened Americans began to worry that some people on the Internet had already sold their information to customers such as banks, landlords, and employers, and those who bought the information would know you better.

2. Yahoo admitted that 3 billion user account information fell into the hands of hackers in 2013

Last September, Yahoo! Inc. announced that hackers stole account information for at least 500 million of its users in August 2013. In December of that year, Yahoo also said that the number of stolen accounts of about 1 billion. According to information released on October 3 this year, Yahoo confirmed that all 3 billion of its user accounts should be hacked. The company has sent more prompts to more users to change their login password and related login information.

Yahoo and the investigators have said that the “state-funded hacker” launched the attack, but did not specify which country it was.

Stolen information includes user name, e-mail address, phone number, birthday and part of the user some customers encrypted or not encrypted security problems and answers. On October 3, Yahoo again stressed that hackers should not have access to computers that have unprotected passwords, payment card data, and bank account information, meaning that user account information is partially stolen.

Yahoo said there should be fewer than 3 billion affected users due to the existence of some accounts that are either permanently or rarely used and some that have multiple Yahoo accounts.

3. NSA attack tools leak, triggering “WannaCry” and other 

In the early hours of April 6, the United States conducted military sanctions on Syria on the grounds of opposing the anti-personnel chemical weapons and launched 59 Tomahawk cruise missiles on the Syrian government space base.

It was not long before the hacker group Shadow Brokers, protesting the U.S. attack on Syrian airbase, announced it would proclaim to the world that it had obtained a copy of the Equation Group, a hacker group affiliated with the NSA (the U.S. National Security Agency) The decryption key – CrDj “(; Va.*NdlnzB9M? @ K2) #> deB7mN, so that everyone in the world can view the United States network warfare weapons.

To put it bluntly, the United States bullied Syria. The Shadow Brokers felt uncomfortable. As a result, they released the dirty gadgets of the U.S. government for dirty work to the world and showed great fearlessness.

Hackers can exploit these tools to compromise a variety of Windows servers and operating systems, including Windows 7 and Windows 8 systems.

Although Microsoft said in March this year released a patch for the related security vulnerabilities, but many companies did not update. Subsequently, the “shadow broker” tool released to create a number of major international hacker events, such as “WannaCry” “blackmail incident.

4. WannaCry ransomware

People have seen that the author of the outbreak of ransomware received 350,000 U.S. dollars and it seems that there is not much more than its global influence. But many people do not know that this worm-transmitted virus is version 2.0, whereas in the previous version 1.0 virus authors had made tens of millions of dollars.

On the night of December 18, the U.S. government made a public statement that North Korea is behind the WannaCry incident.

5. Petya Ransomware

On June 27, Twitter reported that a new ransomware similar to “WannaCry” swept across Europe, causing many large enterprises, including RosneftPJSC and Danish AP Muller-Maersk Co., Ltd., to be attacked, And the government system in Ukraine was also hit by the virus. The virus code-named “Petya.”

In June of this year, the “Nott Petilia” computer virus targeted Ukrainian companies that use poisoning tax software. Several large multinational companies recruit, including FedEx, WPP Advertising UK, Rosneft and Maersk Line Denmark.

The Nottpea’s method of communication also exploits the security loopholes exposed by Shadow Brokers.

US FedEx said in September that the virus has caused a loss of 300 million U.S. dollars and its TNT International Courier Company was forced to suspend business.

6. Bad Rabbit ransomware

Another ransomware that caused a lot of commotion was the “bad rabbit.” Bad Rabbit infiltrated the user’s computer with Adobe Flash software installation requests popped up on the news media site, and those news sites were hacked.

This wave of blackmail wave occurred in October and mainly hit Russia. However, some experts found that victims also appeared in Ukraine, Turkey, and Germany.

This thing reminds us that users must not download the software through an advertisement pop-up window or a website that does not belong to a software company.

7. Voter records exposed

In June, a computer security researcher found that a U.S. Republican data company had made a mistake in choosing the security settings for its Amazon cloud storage service, resulting in the disclosure of nearly 200 million voters.

This is the latest major breach caused by the unsafe Amazon server. The server’s default option is safe, but cybersecurity officer Chris Vickery often discovers there is a company setting error.

Verizon and the U.S. Department of Defense have the same information stored on Amazon servers.

8. Uber paid $100,000 to hacker

In 2016, hackers stole data from 57 million Uber users, and Uber subsequently paid $ 100,000 to quell the incident. It was not until November of this year that the case was revealed by Dara Horaosossi, the new chief executive of Uber. Uber is now facing a question from legislators. Three federal senators to promote the relevant bills, it is likely to lead to those who intentionally cover up the data invasion of the face of prison.

Source: CNN

 

Related coverage

  • CVE-2021-3064 PAN-OS: PAN-OS Remote Code Execution Vulnerability
  • Next.js Flaw (CVE-2025-49826, CVSS 7.5): Cache Poisoning Leads to Denial-of-Service
  • Schneider Electric Warns of Multiple Vulnerabilities in Modicon Controllers
  • Qilin’s “EDR Killer” Dismantles 300+ Security Drivers
  • North Korea’s Famous Chollima APT Uses Trojanized Node.js App to Deploy OtterCookie RAT for Crypto Theft
  • PoC released for Chrome zero-day CVE-2023-4863 vulnerability
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Bad Rabbit ransomware Petya Ransomware WannaCry Ransomware

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-94504CVSS 7.2
    Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-93836CVSS 7.2
    The WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \'qty\'...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-21589CVSS 9.3
    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-61500CVSS 9.3
    Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-106016CVSS 9.8
    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1.
    📅 Updated: Oct 7, 2026
  • CVE-2026-103877CVSS 9.8
    Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server (or pre-TLS MITM) can...
    📅 Updated: Oct 7, 2026
  • CVE-2026-105636CVSS 9.9
    Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_task.py calls requests.post()...
    📅 Updated: Oct 7, 2026
  • CVE-2026-105641CVSS 9.8
    Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly...
    📅 Updated: Oct 7, 2026
  • CVE-2020-9547CVSS 9.8
    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
    📅 Updated: Oct 7, 2026
  • CVE-2026-95106CVSS 9.1
    Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject....
    📅 Updated: Oct 7, 2026
  • CVE-2026-94205CVSS 9.8
    Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the...
    📅 Updated: Oct 7, 2026
  • CVE-2026-86345CVSS 9.0
    A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client...
    📅 Updated: Oct 7, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.