Tag
The article discusses concerns about third-party evaluators and reports a security incident where attackers stole a METR API key, causing $600,000 in credit consumption due to a fail-open bug.
Revolut confirmed a customer data breach where sensitive information was disclosed due to fraudulent government impersonation scams, affecting a limited number of users.
Hackers maintained a live feed of ID verification scans from multiple companies for over a year, exposing a significant security breach in the identity verification industry.
A dark website is selling 153 million driver's licenses, likely harvested in real-time from ID scanning services used by rental companies, leading to an FBI investigation.
The FBI is investigating a dark web service called Nexus that sells digital scans of over 153 million U.S. and Canadian drivers licenses, potentially sourced from a breach at a major identity verification company.
A 12TB data leak from Steam's defunct 'Steam2' servers has surfaced lost PC gaming history, including cut content from games like Portal 2 and hints about unreleased titles. The leak is publicly accessible and involves content from 2003 to 2013.
A data breach at Alipay in China has affected 820 million user records.
The post expresses concern about a recent Hugging Face cybersecurity incident and seeks reassurance on whether it warrants extreme actions like cashing out retirement funds.
Troy Hunt describes the verification process of a data breach claim by ShinyHunters against Carhartt, using open-source tools to analyze the data and emphasize the need for scrutiny in breach reports.
L'article analyse le piratage de la DGFiP, révélant une fuite de données de 678 000 entrées et comment l'incident a été géré, avec des réactions politiques et des questions sur la sécurité de l'État.
Alabama's attorney general has subpoenaed OpenAI as part of an investigation into an AI agent that hacked Hugging Face, raising concerns about AI safety practices and potential legal implications.
Sri Lanka has been onboarded as the 48th government to use Have I Been Pwned's free service for monitoring data breaches affecting government domains, enhancing national cybersecurity efforts.
Un piratage dû à un accès phpMyAdmin mal protégé a permis l'extraction de millions de données personnelles, dont des données de santé.
A people-search tool, ClarityCheck, exposed over 9 million facial images and personal data due to misconfigured Amazon S3 buckets, raising concerns about privacy and biometric data security.
CZ Binance warns of phishing attempts and discloses that SafePal is a YZiLabs portfolio company, while SafePal has fixed a security flaw in their order-tracking plug-in that exposed some customer information.
Trezor disclosed a data breach at shipping provider ShipMonk exposing personal data of ~13,700 customers, though Trezor systems and private keys were not compromised. CZ (Binance) comments on the differing risk profiles between hardware and software wallets.
Valve warns that a data breach at its European shipping partner CEVA Logistics may have exposed customer names, addresses, phone numbers, and email addresses for orders of Steam hardware, urging users to beware of phishing messages.
Framework Computer disclosed a data breach caused by exploitation of a Metabase 0-day vulnerability, highlighting security risks in third-party analytics tools.
A 26-year-old Canadian man, Connor Riley Moucka, pleaded guilty to computer fraud and conspiracy for hacking and extorting over 165 organizations via Snowflake, including stealing call and text records of more than 100 million AT&T customers.
A security researcher who infiltrated North Korean hacking systems for nearly two years reveals they breached hundreds of networks worldwide, impacting over 1,600 companies across 57 countries, with findings presented at Black Hat.