Microsoft
Microsoft is warning that the window for patching vulnerabilities is rapidly shrinking, as attackers move from disclosure to exploitation faster than enterprises can safely deploy fixes, and is urging organizations to ad
Retail & E-Commerce Data Breaches (9675 indexed)
Sensitive Information Exposed in Nutex Health Data Breach
Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration. The post Sensitive Information Exposed in Nutex Health Data Breach appeared first on SecurityWeek.
Gitea Gitea
Gitea Code Injection Vulnerability — Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git h
Vaughn Stupart, Matthew W. Van Hise, and Craig A. Hoffman of BakerHostetler write: One
Vaughn Stupart, Matthew W. Van Hise, and Craig A. Hoffman of BakerHostetler write: One ruling is not a trend. And there can be unique factors at play in regulatory investigations related to large incidents. But a summary
Hospital operator Nutex Health
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. [...]
As breach costs reach record highs and defense spending nears $240 billion, small
As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.
WeedHack Minecraft Malware Survives C2 Takedown: Fake Client Sites Still Active, SEO
WeedHack Minecraft Malware Survives C2 Takedown: Fake Client Sites Still Active, SEO Poisoning Puts Malicious Downloads at the Top of Google McAfee Labs published a follow-up report on the WeedHack Malware-as-a-Service c
Carhartt
12,933,413 records exposed — Email addresses, Names, Phone numbers, Physical addresses
View incident → Indexed 1 day, 7 hours ago
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year
The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. [...]
A Chinese-speaking cybercrime group is using AI-driven tools to help compromise
A Chinese-speaking cybercrime group is using AI-driven tools to help compromise internet-facing Windows and Linux web servers, according to Cisco Talos, Cisco’s threat intelligence research unit. Talos said the activity
Truffle Security
Truffle Security says it found over 9000 publicly accessible and active AWS key pairs
A DataBreaches.net Commentary On July 31, Asheville Beaverdam NC Opco LLC d/b/a Bear
A DataBreaches.net Commentary On July 31, Asheville Beaverdam NC Opco LLC d/b/a Bear Mountain Health and Rehabilitation, Asheville Victoria NC Opco LLC d/b/a Elevate Health & Rehabilitation, and Asheville US Seventy
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can re
A breach at South Korea's government-backed startup platform
A breach at South Korea's government-backed startup platform exposed encrypted personal data after an encryption key was included in an API. Penta Security explains why encryption keys must be securely managed and kept s
Eduard Kovacs
Eduard Kovacs reports: Private equity giant Apollo Global Management has disclosed a data breach that exposed sensitive personal information. According to a data breach notice sent to affected individuals, a social engin
The disruption took place amid a wave of attacks targeting vulnerable industrial devices
The disruption took place amid a wave of attacks targeting vulnerable industrial devices in the water and energy sectors.
Yesterday, DataBreaches reported that ShinyHunters had added ReliaQuest to its dedicated
Yesterday, DataBreaches reported that ShinyHunters had added ReliaQuest to its dedicated leak site, but without any substantive proof — only a few screenshots showing access to a user account on reliaquest.okta[.]com/end
The private equity firm appears to have been
The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies. The post Personal Information Exposed in Apollo Global Data Breach appeared first on SecurityWeek.
Foul Language
ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer.
A package gets installed. A login prompt opens. A box sits
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes
Security Affairs Malware newsletter includes a collection of the best articles and
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Akira Hits Safe Mode: Ransomware Rebooting Around EDR  Multi-F
Iran-linked hackers shut down a UK power plant for four days in the first confirmed
Iran-linked hackers shut down a UK power plant for four days in the first confirmed attack of its kind, concurrent with water infrastructure attacks across 12 US states. Iran-linked hackers shut down a British power plan
NIUS
6,090 records exposed — Bank account numbers, Email addresses, Names, Partial credit card data and 2 more
View incident → Indexed 3 days, 7 hours ago
MCBS
Data breach affecting 1.2M individuals at Atlanta-based medical business management company