HiddenLayer
HiddenLayer reveals infostealer malware in a Hugging Face repository
Latest Disclosures
The ICO has fined South Staffordshire Water nearly £1m for a series of data protection
The ICO has fined South Staffordshire Water nearly £1m for a series of data protection failings
Cushman & Wakefield
310,431 records exposed — Email addresses, Job titles, Names, Phone numbers and 2 more
View incident → Indexed 3 months, 3 weeks ago
ShinyHunters gets away with emails and other data on 200,000 Zara customers
ShinyHunters gets away with emails and other data on 200,000 Zara customers
ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school
ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school login pages and threatening to leak stolen data unless institutions negotiate
Australian Cyber Security Centre Issues
ACSC warns over a campaign targeting organizations which uses ClickFix to deliver Vidar infostealer malware
Zara
197,376 records exposed — Email addresses, Geographic locations, Purchases, Support tickets
View incident → Indexed 3 months, 3 weeks ago
BerriAI LiteLLM
BerriAI LiteLLM SQL Injection Vulnerability — BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized acces
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability — Ivanti
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability — Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with adm
Woflow
447,593 records exposed — Email addresses, Names, Phone numbers, Physical addresses
View incident → Indexed 3 months, 3 weeks ago
LegionProxy
10,144 records exposed — Email addresses, Names, Passwords, Purchases
Rapid7
Rapid7 reveals an Iranian false flag operation masquerading as a Chaos ransomware attack
Palo Alto Networks PAN-OS
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability — Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an un
ISACA report
ISACA report warns that while AI has become the norm, many organizations are yet to formally apply safety or security policies around its use
Vimeo
119,167 records exposed — Email addresses, Names
Marcus & Millichap
1,837,078 records exposed — Email addresses, Employers, Job titles, Names and 2 more
ZenBusiness
5,118,184 records exposed — Email addresses, Names, Phone numbers
View incident → Indexed 4 months ago
Department for Education (DfE)
Cyberattack exposed approximately 607,000 records containing sensitive government education data.
Ransomware attack affecting thousands of schools, disrupting finals week and operations
Ransomware attack affecting thousands of schools, disrupting finals week and operations
Canvas (Instructure)
ShinyHunters breach exposed approximately 275 million records from educational platform
7-Eleven
Data breach confirmed after ShinyHunters claims; documents related to franchises compromised
Ernst & Young
Vendor breach exposed tax client data after 81-day notification delay
7-Eleven
Data breach compromised current, former, and prospective franchisees' detailed application packages in Canada and US
African National Congress (ANC)
2 million private member records exposed and sold by hacker group on dark web