Manchester Airports Group
Gabriel Higgins reports: Manchester Airports Group (MAG) has confirmed that it has been the target of a cybersecurity incident carried out by an unauthorised third party, resulting in the exposure of a quantity of custom
Latest Disclosures
ThreatsDay
A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets stranger: botnets borrowing AI, command tra
Manchester Airports Group
The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airports. [...]
DOJ firearms agency
The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed it experienced a cyberattack on a system containing investigation information, as a prolific ransomware gang claimed to have carried out the breach.
Authorities in Australia have arrested two men believed to be members of TeamPCP, a
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. I
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders. The post Cyberattack Causes Global Disruption at Boston Scientific appeared first on SecurityWeek.
Boston Scientific
The medical device-maker says it cannot yet determine any financial impact from the attack it suffered this week.
A recommendation from the Saskatchewan Information and Privacy Commissioner caught our eye
Here’s one we missed last week. Hannah Spray reports: The personal information of more than 2,000 people was stolen from Autism Services of Saskatoon during a data breach last year. In the aftermath, the organizati
Nutex Health has informed the SEC that it recently detected unauthorized access and data
Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration. The post Sensitive Information Exposed in Nutex Health Data Breach appeared first on SecurityWeek.
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability — Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations
Microsoft
Microsoft is warning that the window for patching vulnerabilities is rapidly shrinking, as attackers move from disclosure to exploitation faster than enterprises can safely deploy fixes, and is urging organizations to ad
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability — Red Hat
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability — Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to
Microsoft SQL Server
Microsoft SQL Server Remote Code Execution Vulnerability — Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine
CISA
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks. The post CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks appeared first on
The company released a statement and filed documents with the Securities and Exchange
The company released a statement and filed documents with the Securities and Exchange Commission (SEC) saying a cybersecurity incident was discovered on Tuesday.
Ajax.NET Professional Ajax.NET Professional
Ajax.NET Professional Deserialization of Untrusted Data Vulnerability — Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary
Red Hat Libuser
Red Hat Libuser Race Condition Vulnerability — Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escal
Linux Kernel
Linux Kernel Out-of-Bounds Write Vulnerability — Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.
Boston Scientific
Medical technology company Boston Scientific has been targeted in a cyberattack that disrupted some of its IT systems, causing operational disruptions globally. [...]
Hospital operator Nutex Health
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. [...]
As breach costs reach record highs and defense spending nears $240 billion, small
As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.
Gitea Gitea
Gitea Code Injection Vulnerability — Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git h
Carhartt
12,933,413 records exposed — Email addresses, Names, Phone numbers, Physical addresses
View incident → Indexed 4 days, 19 hours ago
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. [...]