Fanlore
144,520 records exposed — Email addresses, Names, Passwords, Usernames
Latest Disclosures
A suspected ransomware affiliate is posing as a ransomware recovery service called
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete s
Cybersecurity researchers have flagged a global cybercrime operation that abuses
Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents, screens
An autonomous AI security agent developed by cloud security firm Wiz identified and
An autonomous AI security agent developed by cloud security firm Wiz identified and exploited a critical vulnerability in Snowflake’s GitHub Actions pipeline, while GitHub Copilot had previously reviewed the code change
Latvia’s road traffic agency confirmed that hackers stole data connected to about
Latvia’s road traffic agency confirmed that hackers stole data connected to about two-thirds of the country’s population in a major cyberattack that has prompted calls for senior officials to resign.
UnitedHealthcare
Millions of patients' health and insurance information exposed in 2024 cyberattack
Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say
Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass fl
U.S. Government
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
IBM-managed test system (Singapore)
Exposed personal information of approximately 70,000 individuals due to supply chain vulnerability
The data breach was initially believed to affect roughly 350,000 people, but the HHS
The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact. The post CareCloud Data Breach Impact Grows to 3.7 Million Individuals appeared first on Secu
EVO Banco
2024 API vulnerability exposed financial and identity data of 1.27 million records. Bankinter fined €240K.
TransUnion
Data breach exposed credit and personal data of 37,000 people in 2019
FRANCE TRAVAIL
Information system hacked; resulted in €5 million fine
Waqas
Waqas reports: A server mistake by cybercriminals has exposed the inner workings of a global malware operation that used nearly 2,000 hacked WordPress websites to infect computers, steal files and deploy ransomware. Chec
Snowflake
Hacking led to 165 confirmed breaches affecting 100+ million people
A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical
A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for the enterprise Product Lifecycle Management (PLM) softw
Rich Mogull, chief analyst with the Cloud Security Alliance, joins the Dark Reading News
Rich Mogull, chief analyst with the Cloud Security Alliance, joins the Dark Reading News Desk with what defenders need to take away from AI agents escaping their environments to launch attacks.
The University of Texas at San Antonio, which serves 40,000 students across six
The University of Texas at San Antonio, which serves 40,000 students across six campuses, said its IT team identified threat activity on its academic campus over the weekend and took some systems, including phones, offli
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability —
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability — Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.
Apple macOS
Apple macOS Improper Authentication Vulnerability — Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials.
Microsoft SharePoint
Microsoft SharePoint Weak Authentication Vulnerability — Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a security feature over a network.
A Heights Finance breach
A Heights Finance breach exposed personal and financial data of over 1.2 million people after hackers compromised a third-party cloud platform. Heights Finance is a U.S. consumer finance company that provides personal lo
The first 24 hours after a cyber incident are messy. Teams are moving fast, and a lot
The first 24 hours after a cyber incident are messy. Teams are moving fast, and a lot gets said on Slack or email that can come back later. People are scrambling to contain the issue, figure out what happened and keep th
The security defect allows unauthenticated attackers to modify or delete user data and
The security defect allows unauthenticated attackers to modify or delete user data and public projects. The post GitLab Patches Critical Code Injection Vulnerability appeared first on SecurityWeek.