Paidwork
23,272,765 records exposed — Bank account numbers, Dates of birth, Device information, Education levels and 10 more
View incident → Indexed 1 month, 2 weeks ago
Law Firm Data Breaches (11941 indexed)
The company disconnected its systems on July 13 and is starting to gradually restore
The company disconnected its systems on July 13 and is starting to gradually restore operations. The post Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei appeared first on SecurityWeek.
Ernst & Young
Ernst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel. [...]
The company
The company says the incident has not affected product quality and safety, nor Fairlife’s Canada production. The post Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack appeared first on SecurityWeek.
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, O
Abbott Laboratories is
Abbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its Cancer Diagnostics business, while also investigating a sepa
Fortinet FortiSandbox
Fortinet FortiSandbox OS Command Injection Vulnerability — Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute
ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their
ClickLock Stealer, a new macOS infostealer, answers a victim's refusal by killing their apps on a loop until they hand over the login password. It arrives as a command pasted into Terminal, asks for the password behind a
Coca-Cola
The Coca-Cola Company disclosed today that a ransomware attack impacting its Fairlife dairy subsidiary has disrupted operations, temporarily suspending production of Fairlife products across the United States. [...]
Nearly two years after a cyberattack disrupted Transport for London’s (TfL) online
Nearly two years after a cyberattack disrupted Transport for London’s (TfL) online services and exposed customer data, two…
Fortinet FortiSandbox
Fortinet FortiSandbox OS Command Injection Vulnerability — Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via cr
Microsoft SharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability — Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.
Alex Ebert
Alex Ebert reports: Wilmer Cutler Pickering Hale & Dorr should pay millions of dollars in damages for loss of clients’ personal information in a May data breach, a putative class action claims. The lawsuit, filed Tue
Munsif Vengattil and Aditya Kalra Ransomware group World Leaks has posted on the dark
Munsif Vengattil and Aditya Kalra Ransomware group World Leaks has posted on the dark web a huge cache of files related to India’s largest nuclear plant, including purported blueprints of parts of its facilities a
Passkeys have been around for some time, but enterprise-wide adoption to this point has
Passkeys have been around for some time, but enterprise-wide adoption to this point has been slow for a number of reasons. But soon, many Microsoft customers won’t have a choice. Starting September 1, Microsoft will r
Kentucky Fried Chicken restaurants have been left short on ingredients and major
Kentucky Fried Chicken restaurants have been left short on ingredients and major restaurant chains struggling to keep up with deliveries following a cyberattack on Nichirei Logistics Group.
Oracle E-Business Suite
Oracle E-Business Suite Improper Privilege Management Vulnerability — Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP t
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive
KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability — KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive ac
NPM ecosystem
Attacks targeting developer ecosystems are increasing in frequency and sophistication, with Node.js developers firmly in this week’s crosshairs, as multiple npm packages belonging to the open-source AsyncAPI and Jscrambl
Attackers who already have administrator privileges on a Windows machine have newer ways
Attackers who already have administrator privileges on a Windows machine have newer ways to slip past endpoint security without exploiting a vulnerable driver or modifying trusted binaries. Bitdefender researchers hav
Trevor Long
Trevor Long reports: A large health care chain that owns family medical clinics across Australia has been the victim of a cyber breach which has exposed the data of their patients, including potentially treatment informa
Goose Creek
6,574,121 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
View incident → Indexed 1 month, 2 weeks ago
Fluke
821,100 records exposed — Email addresses, Employers, Job titles, Names and 2 more
View incident → Indexed 1 month, 2 weeks ago
It’s common for victims and threat actors to disagree sharply over the scope of an
It’s common for victims and threat actors to disagree sharply over the scope of an attack or its significance. Today’s example involves Israeli fintech Nayax and a group called The Syndicate. In previous cove