135 articles
Data BreachA phishing click let hackers copy Arizona court backup files: SSNs of ~1.3M FARE debtors, protective-order records and 150,000+ foster care reports.
Cyber AttackANSSI's DGFiP report: infostealer credentials, weak MFA and an unmonitored portal let attackers steal impots.gouv.fr and cadastre data undetected.
MicrosoftCisco Talos ties China-nexus UAT-11587 to Antino, a Rust backdoor taking orders via Outlook and exfiltrating via OneDrive, on ~350 endpoints in 8 countries.
Data BreachJapan's Times Car confirms a September 25 intrusion exposed ~6.6M accounts and ~1.6M identity-document images, including driver's license scans.
MicrosoftProofpoint: China-aligned TA419 posed as an ex-White House OSTP official and an Anthropic employee to steal AI policy experts' Microsoft 365 sessions.
DevSecOpsJapan, US, Australian and German agencies say DPRK's WaterPlum hit 30,000+ PCs and 7,000+ crypto wallets via fake job tests, npm malware and VS Code tasks.
Crypto / Web3Threat actors exploited zero-day flaws in third-party perimeter security appliances to breach Bitget's wallet job server, siphoning $387.5M across 11 chains.
RansomwareA multinational law enforcement sweep led by German, Spanish, and Romanian police has dismantled KillSec, arresting three operators and seizing 110TB of data.
Cyber AttackAn authentication bypass in SOGo groupware allows remote attackers to impersonate any user without credentials by supplying an unsanitized x-webobjects-remote-user header.
RansomwareRhysida ransomware group exfiltrates 2.44 Terabytes of clinical patient files and medical records from General Santos Doctors Hospital in an 8-Bitcoin extortion scheme.
Data BreachQilin ransomware syndicate exfiltrates MedImpact pharmacy benefit databases, exposing prescription records, provider details, and SSNs across employer health plans.
Data BreachUpbound Group disclosures reveal cloud storage exfiltration led to $13 million in fraudulent lease-to-own contracts generated via the Acima platform.
Data BreachThe U.S. Department of Defense confirms a nine-month breach of an unencrypted DMDC server, exposing 3.05 million active military, retiree, and dependent records.
AWS CloudAn analysis of recent SEC Form 8-K Item 1.05 material cyber incident filings shows misconfigured cloud buckets and IAM token leaks driving corporate extortion.
Crypto / Web3Bitcoin Depot filed an SEC Form 8-K disclosing unauthorized access to IT systems and credential theft resulting in the exfiltration of 50.9 Bitcoin.
Cyber AttackHalliburton files SEC Form 8-K Item 1.05 detailing unauthorized corporate network access that forced critical energy infrastructure systems offline across global operations.
Cyber AttackAdaptHealth Corp files an SEC Form 8-K under Item 1.05 disclosing a cyberattack that disrupted internal systems and resulted in unauthorized patient data exfiltration.
RansomwareRiver Financial discloses unauthorized ransomware intrusion and customer data exfiltration in SEC Form 8-K filings following network extortion demands.
Data BreachCB Financial Services files historic SEC Form 8-K Item 1.05 after an employee used an unauthorized AI tool to process non-public customer PII and SSNs.
Data BreachAstrana Health files SEC Form 8-K Item 1.05 after threat actors spoofed corporate phone numbers to socially engineer IT support and compromise patient systems.
RansomwareNavient files SEC Form 8-K Item 1.05 after a ransomware attack on an external law firm exposed sensitive student loan borrower PII and Social Security numbers.
RansomwareNutex Health files amended SEC Form 8-K Item 1.05 confirming patient PHI and provider records exfiltrated and published following ransomware double extortion.
Cyber AttackInjectable drug packaging leader West Pharmaceutical Services files SEC Form 8-K Item 1.05 disclosing data exfiltration and systems encryption halting global manufacturing.
RansomwareDigital healthcare firm iRhythm Holdings files SEC Form 8-K Item 1.05 following social engineering compromise of cloud apps and extortion threats over patient cardiac data.