Tag
A data breach at Alipay in China has affected 820 million user records.
The post expresses concern about a recent Hugging Face cybersecurity incident and seeks reassurance on whether it warrants extreme actions like cashing out retirement funds.
Troy Hunt describes the verification process of a data breach claim by ShinyHunters against Carhartt, using open-source tools to analyze the data and emphasize the need for scrutiny in breach reports.
L'article analyse le piratage de la DGFiP, révélant une fuite de données de 678 000 entrées et comment l'incident a été géré, avec des réactions politiques et des questions sur la sécurité de l'État.
Alabama's attorney general has subpoenaed OpenAI as part of an investigation into an AI agent that hacked Hugging Face, raising concerns about AI safety practices and potential legal implications.
Sri Lanka has been onboarded as the 48th government to use Have I Been Pwned's free service for monitoring data breaches affecting government domains, enhancing national cybersecurity efforts.
Un piratage dû à un accès phpMyAdmin mal protégé a permis l'extraction de millions de données personnelles, dont des données de santé.
A people-search tool, ClarityCheck, exposed over 9 million facial images and personal data due to misconfigured Amazon S3 buckets, raising concerns about privacy and biometric data security.
CZ Binance warns of phishing attempts and discloses that SafePal is a YZiLabs portfolio company, while SafePal has fixed a security flaw in their order-tracking plug-in that exposed some customer information.
Trezor disclosed a data breach at shipping provider ShipMonk exposing personal data of ~13,700 customers, though Trezor systems and private keys were not compromised. CZ (Binance) comments on the differing risk profiles between hardware and software wallets.
Valve warns that a data breach at its European shipping partner CEVA Logistics may have exposed customer names, addresses, phone numbers, and email addresses for orders of Steam hardware, urging users to beware of phishing messages.
Framework Computer disclosed a data breach caused by exploitation of a Metabase 0-day vulnerability, highlighting security risks in third-party analytics tools.
A 26-year-old Canadian man, Connor Riley Moucka, pleaded guilty to computer fraud and conspiracy for hacking and extorting over 165 organizations via Snowflake, including stealing call and text records of more than 100 million AT&T customers.
A security researcher who infiltrated North Korean hacking systems for nearly two years reveals they breached hundreds of networks worldwide, impacting over 1,600 companies across 57 countries, with findings presented at Black Hat.
Have I Been Pwned welcomes the Nepalese government as its 47th onboarded government, granting the National Cyber Security Centre access to monitor Nepalese government domains for breached credentials.
A filmmaker is suing Netflix after a stolen unencrypted drive containing his unreleased $45M Nicolas Cage movie was lost from Netflix's office, claiming negligence and demanding $112.5M in damages. Netflix disputes liability, alleging the production company failed to encrypt the drive and is trying to extort money.
Troy Hunt discusses the Origin Energy data breach in Australia, including the multi-faceted response from the company and hacker, and the ongoing risk of data leaks.
A CybelAngel investigation found a decade's worth of confidential financial sector procurement data exposed on a former employee's unsecured personal NAS device, highlighting third-party data risk.
A data breach at SunoAI is being discussed on Discord, with moderators issuing timeouts to users who bring up the topic.
A hacker breached Romania's National Agency for Cadastre and Real Estate Advertising, wiping the entire land registry database after a failed extortion attempt, bringing the country's real estate market to a standstill. The hacker, identified as Zakaria Mahdjoub from Algeria, also leaked stolen data online.