Data Breaches
Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs.
Hi, what are you looking for?
SecurityWeek
Data Breaches
Nutex Health has informed the SEC that it recently detected unauthorized access and data exfiltration.
Cybercrime
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
Data Breaches
The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies.
Data Breaches
The cybercrime gang has listed major companies such as Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision.
Data Breaches
Hackers accessed the institution’s internal network and deleted two drives containing employee, student, and university data.
Data Breaches
The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact.
Cybercrime
In April, ShinyHunters accessed the company’s corporate IT systems and stole patients’ personal and medical information.
Data Breaches
Hackers accessed the insurance giant’s policyholder portal multiple times between June 15 and June 25.
Data Breaches
Only a handful of the 100 organizations targeted in the PeopleSoft campaign have been confirmed.
Data Breaches
The ShinyHunters extortion group claims to have stolen 3.1 TB of data from the organization.
Data Breaches
Roughly two dozen companies have notified their customers of the Klue-Salesforce incident impact.
Artificial Intelligence
Other noteworthy stories that might have slipped under the radar: Russia used Cellebrite to hack activist’s phone, Five Eyes issue urgent AI threat warning,...
Data Breaches
Over a dozen Klue customers have confirmed that hackers stole data from their Salesforce instances.
Data Breaches
Hackers stole customers’ names, addresses, email addresses, phone numbers, and account information.
Data Breaches
Threat actors gained access to personal and protected health information that Xsolis received from its clients.
Data Breaches
HackerOne, Huntress, Jamf, OneTrust, Recorded Future, Snyk, and Tanium are among the affected Klue customers.
Data Breaches
Hackers stole personal information after breaching the systems of a third-party license vendor serving TPWD.
Data Breaches
Kodak told SecurityWeek it believes there is no threat to its systems or operations as a result of the cybersecurity incident.
Data Breaches
The digital health company said it learned of the breach on June 8 and the attackers demanded a ransom.
Data Breaches
The hack-and-leak group FulcrumSec claims to have stolen 1.3TB of data from the pharmaceutical giant.
Data Breaches
The pharmaceutical giant says the attackers gained access to personal data stored on the compromised systems.
Data Breaches
French officials say roughly 73,000 government accounts were affected, while the threat actor claims to have stolen messages and user data from the sovereign...
Data Breaches
The extortion group threatens to leak 297 GB of data allegedly stolen from the Council of Europe, including employee personal information.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)