CPUID
Hackers gained access to an API for the CPUID project and changed the download links on the official website to serve malicious executables for the popular CPU-Z and HWMonitor tools. [...]
Technology & Software Data Breaches (1095 indexed)
Ransomware attack on ChipSoft knocks
Dutch healthcare IT firm ChipSoft suffered a ransomware attack, forcing services and its HiX platform offline, impacting hospitals and patients. ChipSoft, a major Dutch provider of EHR systems, was hit by a ransomware at
Healthcare IT solutions provider ChipSoft
Dutch healthcare software vendor ChipSoft has been impacted by a ransomware attack that forced the company to take offline its website and digital services for patients and healthcare providers. [...]
Ivanti Endpoint Manager Mobile (EPMM)
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code executi
My Lovely AI
106,271 records exposed — Email addresses, Social media profiles
Exposed ComfyUI Instances Targeted in
An active campaign has been observed targeting internet-exposed instances running ComfyUI, a popular stable diffusion platform, to enlist them into a cryptocurrency mining and proxy botnet. "A purpose-built Python s
Fortinet FortiClient EMS
Fortinet FortiClient EMS Improper Access Control Vulnerability — Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or comma
SongTrivia2
291,739 records exposed — Auth tokens, Avatars, Email addresses, Names and 2 more
TrueConf Client
TrueConf Client Download of Code Without Integrity Check Vulnerability — TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path ca
Google Dawn
Google Dawn Use-After-Free Vulnerability — Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML pag
Lloyds IT Glitch Exposed Data
Lloyds app glitch exposed up to 447,936 customers’ transactions and personal data during update
Citrix NetScaler
Citrix NetScaler Out-of-Bounds Read Vulnerability — Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability wh
European Commission Confirms Cloud Data
The European Commission has revealed details of a data breach impacting its AWS infrastructure
Telus Digital
1 petabyte data theft affecting 28 companies via multi-month breach by ShinyHunters
View incident → Indexed 2 weeks, 1 day ago
TELUS Digital
1 petabyte stolen by ShinyHunters including call records, FBI data
View incident → Indexed 2 weeks, 1 day ago
Aura Identity Protection
900K customer marketing contacts with names and email addresses exposed
View incident → Indexed 2 weeks, 1 day ago
F5 BIG-IP
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability — F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat actor to achieve remote code execution.
BreachForums Version 5
339,778 records exposed — Email addresses, Passwords, Usernames
Cloud Imperium Games
User account metadata, contact details from January breach
View incident → Indexed 2 weeks, 1 day ago
HungerRush
Restaurant POS system breach, customer emails exposed
View incident → Indexed 2 weeks, 1 day ago
Ericsson Inc. (US)
15K+ employees/customers data including SSNs, driver's licenses
View incident → Indexed 2 weeks, 1 day ago
Ericsson Inc (US)
15K+ employee and customer records including SSNs via service provider hack
View incident → Indexed 2 weeks, 1 day ago
Scuf Gaming
128,683 records exposed — Display names, Email addresses, IP addresses, Passwords and 1 more
Aquasecurity Trivy
Aquasecurity Trivy Embedded Malicious Code Vulnerability — Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, includin