Adobe Acrobat
Adobe Acrobat Use-After-Free Vulnerability — Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
Technology & Software Data Breaches (1146 indexed)
Microsoft Windows
Microsoft Windows Out-of-Bounds Read Vulnerability — Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation
OpenAI Revokes macOS App Certificate
OpenAI revealed a GitHub Actions workflow used to sign its macOS apps, which downloaded the malicious Axios library on March 31, but noted that no user data or internal system was compromised. "Out of an a
Ransomware attack on ChipSoft knocks
Dutch healthcare IT firm ChipSoft suffered a ransomware attack, forcing services and its HiX platform offline, impacting hospitals and patients. ChipSoft, a major Dutch provider of EHR systems, was hit by a ransomware at
CPUID
Hackers gained access to an API for the CPUID project and changed the download links on the official website to serve malicious executables for the popular CPU-Z and HWMonitor tools. [...]
Healthcare IT solutions provider ChipSoft
Dutch healthcare software vendor ChipSoft has been impacted by a ransomware attack that forced the company to take offline its website and digital services for patients and healthcare providers. [...]
My Lovely AI
106,271 records exposed — Email addresses, Social media profiles
Ivanti Endpoint Manager Mobile (EPMM)
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code executi
Exposed ComfyUI Instances Targeted in
An active campaign has been observed targeting internet-exposed instances running ComfyUI, a popular stable diffusion platform, to enlist them into a cryptocurrency mining and proxy botnet. "A purpose-built Python s
Fortinet FortiClient EMS
Fortinet FortiClient EMS Improper Access Control Vulnerability — Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or comma
SongTrivia2
291,739 records exposed — Auth tokens, Avatars, Email addresses, Names and 2 more
TrueConf Client
TrueConf Client Download of Code Without Integrity Check Vulnerability — TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path ca
Google Dawn
Google Dawn Use-After-Free Vulnerability — Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML pag
European Commission Confirms Cloud Data
The European Commission has revealed details of a data breach impacting its AWS infrastructure
Citrix NetScaler
Citrix NetScaler Out-of-Bounds Read Vulnerability — Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability wh
Lloyds IT Glitch Exposed Data
Lloyds app glitch exposed up to 447,936 customers’ transactions and personal data during update
F5 BIG-IP
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability — F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution.
Telus Digital
1 petabyte data theft affecting 28 companies via multi-month breach by ShinyHunters
View incident → Indexed 1 month, 1 week ago
TELUS Digital
1 petabyte stolen by ShinyHunters including call records, FBI data
View incident → Indexed 1 month, 1 week ago
BreachForums Version 5
339,778 records exposed — Email addresses, Passwords, Usernames
Aura Identity Protection
900K customer marketing contacts with names and email addresses exposed
View incident → Indexed 1 month, 1 week ago
Cloud Imperium Games
User account metadata, contact details from January breach
View incident → Indexed 1 month, 1 week ago
HungerRush
Restaurant POS system breach, customer emails exposed
View incident → Indexed 1 month, 1 week ago
Ericsson Inc. (US)
15K+ employees/customers data including SSNs, driver's licenses
View incident → Indexed 1 month, 1 week ago