KIRO7
KIRO7 reports: The Washington Department of Social and Health Services (DSHS) is issuing a notice of a massive data breach that happened in March, potentially compromising the personal data of around 8,600 people. An int
Law Firm Data Breaches (10298 indexed)
Adobe ColdFusion
Adobe ColdFusion Path Traversal Vulnerability — Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.
The alleged victim, believed to be a small Ohio county, reportedly paid the extortion
The alleged victim, believed to be a small Ohio county, reportedly paid the extortion group to prevent the public release of sensitive stolen data. The post County Government Reportedly Paid $1 Million to Cyber Extortion
The Gentlemen ransomware underscores a challenge many CISOs face: stopping attackers
The Gentlemen ransomware underscores a challenge many CISOs face: stopping attackers after they gain an initial foothold. Researchers say the malware can spread across enterprise networks using legitimate Windows managem
Langflow Langflow
Langflow Authorization Bypass Through User-Controlled Key Vulnerability — Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow bel
Joomlack Page Builder
Joomlack Page Builder Improper Access Control Vulnerability — Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload.
Accenture
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company. [...]
JoomShaper SP Page Builder
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability — JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated
A threat group researchers call "Armored Likho" has gained access to
A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhstan.
A cyber risk assessment helps security teams identify, estimate, and prioritize
A cyber risk assessment helps security teams identify, estimate, and prioritize potential threats and vulnerabilities to key enterprise digital and physical assets. Yet, despite its importance, many CISOs fall victim to
Carrie Tait
Carrie Tait reports: A retired lawyer is suing Alberta, its Chief Electoral Officer and two organizations that support secession for their respective roles in an alleged data breach affecting 2.9 million residents in the
Higher education has consolidated its entire academic operation into a handful of
Higher education has consolidated its entire academic operation into a handful of massive SaaS platforms. The LMS manages instruction, grading and communication. The SIS owns enrollment, records and financial aid. Identi
JadePuffer
An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.
AdaptHealth
Connor Jones reports: AdaptHealth says attackers used social engineering to breach its systems and steal sensitive patient data, including passwords associated with insurance billing. The medical equipment company disclo
A new report from the Citizen Lab has
A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee that
Moody Bible Institute
2,303,416 records exposed — Dates of birth, Email addresses, Genders, Marital statuses and 3 more
Security firm Sysdig says it has found what it believes is the first
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language
Hugging Face
Breach affected internal datasets and credentials, users urged to rotate tokens
Suno
Data breach exposed 55 million user accounts at AI music platform
LVM (Latvian Forestry)
State-owned forestry company LVM affected by ransomware attack; systems still restoring weeks later
Hugging Face
Internal datasets and credentials exposed; users urged to rotate access tokens
1.26 million patient records exposed in PEAR ransomware attack on healthcare billing
1.26 million patient records exposed in PEAR ransomware attack on healthcare billing company
Suno
Hackers stole names, phone numbers, and physical addresses of 55M users
fairlife (Coca-Cola)
Ransomware attack shut down dairy operations