Security Affairs

MAY 1, 2023

T-Mobile disclosed the second data breach of 2023, threat actors had access to the personal information of hundreds of customers since February. T-Mobile suffered the second data breach of 2023, threat actors had access to the personal information of hundreds of customers starting in late February 2023.

Data breaches 67

Data breaches Mobile Identity Theft Accountability 67

Approachable Cyber Threats

DECEMBER 13, 2022

Our updated research looks at how data breaches happened, what academia published, what the news covered, and what people Googled. The 2022 update to our research on the perception of data breach causes that’s helped organizations re-evaluate how they are at risk for a data breach instead of what feels right.

Data breaches 52

Data breaches Social Engineering Engineering Phishing 52

Security Affairs

APRIL 21, 2023

The American Bar Association (ABA) disclosed a data breach, threat actors gained access to older credentials for 1,466,000 members. The ABA has 166,000 members as of 2022. According to BleepingComputer, 1,466,000 members were impacted by this breach. million members impacted appeared first on Security Affairs.

Data breaches 85

Data breaches Passwords Education Accountability 85

CyberSecurity Insiders

NOVEMBER 25, 2022

Going by the details, a hacker reported in July this year that he/she has access to data related to 5 million accounts of Twitter users and includes phone numbers and email ids. The post Twitter data breach leaking phone numbers and email ID were seriously concerning appeared first on Cybersecurity Insiders.

Data breaches 117

Data breaches Cyber Attacks Accountability Information Security 117

Security Affairs

OCTOBER 26, 2022

International ticketing services company See Tickets disclosed a data breach that exposed customers’ payment card details. Ticketing service company See Tickets disclosed a data breach, and threat actors might have accessed customers’ payment card details. Follow me on Twitter: @securityaffairs and Facebook.

Data breaches 82

Data breaches Banking Malware Hacking 82

Security Affairs

JANUARY 20, 2023

PayPal is sending out data breach notifications to thousands of users because their accounts were compromised through credential stuffing attacks. PayPal announced that 34942 customers’ accounts have been compromised between December 6 and December 8.

Data breaches 84

Data breaches Identity Theft Accountability Passwords 84

Security Affairs

OCTOBER 6, 2022

The City of Tucson, Arizona disclosed a data breach, the incident was discovered in May 2022 and impacted 123,500 individuals. The security breach was discovered at the end of May 2022 and concluded the investigation in September. ” reads the data breach notice.”On

Data breaches 77

Data breaches Identity Theft Cyber Attacks Hacking 77

Security Affairs

APRIL 11, 2023

Brands, the company that owns the KFC, Pizza Hut, and Taco Bell brands, disclosed a data breach after the January ransomware attack. ” reads the data breach notification letter. “Our review determined that the exposed files contained some of your personal information.” On January 13, 2023, Yum!

Data breaches 89

Data breaches Identity Theft Education Ransomware 89

Security Affairs

APRIL 12, 2023

Hyundai disclosed a data breach that impacted Italian and French car owners and clients who booked a test drive. Hyundai has suffered a data breach that impacted Italian and French car owners and customers who booked a test drive. According to the letter, financial data were not exposed.

Data breaches 87

Data breaches Media Manufacturing Education 87

Security Affairs

JANUARY 13, 2023

Gen Digital, formerly Symantec Corporation and NortonLifeLock, warns that hackers breached Norton Password Manager accounts. Gen Digital, formerly Symantec Corporation and NortonLifeLock, informed its customers that threat actors have breached Norton Password Manager accounts in credential-stuffing attacks.

Password Management 85

Password Management Passwords Accountability Data breaches 85

Security Affairs

AUGUST 8, 2022

Communications company Twilio discloses a data breach after threat actors have stolen employee credentials in an SMS phishing attack. Communications company Twilio discloses a data breach, threat actors had access to the data of some of its customers. SecurityAffairs – hacking, data breach).

Data breaches 83

Data breaches Social Engineering Phishing Accountability 83

Security Affairs

MAY 8, 2023

Western Digital is notifying its customers of a data breach that exposed their sensitive personal information, the incident took place in March. In March 2022, Western Digital was hit by a ransomware attack and in response to the incident, it shut down several of its services. We are in the final!

Data breaches 72

Data breaches Backups Ransomware Wireless 72

Security Affairs

APRIL 6, 2022

Block disclosed a data breach related to the Cash App investing app and is notifying 8.2 The data breach involved a former employee that downloaded some unspecified reports of its Cash App Investing app that contained some U.S. customer information. “On April 4, 2022, Block, Inc. customer information.

Data breaches 104

Data breaches Cryptocurrency Accountability Banking 104

Security Affairs

MARCH 21, 2023

Ferrari disclosed a data breach after receiving a ransom demand from an unnamed extortion group that gained access to some of its IT systems. Ferrari disclosed a data breach after it received a ransom demand from an unnamed extortion group that breached its IT systems. “Ferrari N.V.

Data breaches 88

Data breaches Manufacturing Banking Cyber Attacks 88

Security Affairs

APRIL 11, 2022

disclosed a data breach that impacted more than 300,000 individuals. SuperCare Health disclosed a security breach that has led to the exposure of personal information belonging to its patients, patients/members of its partner organizations and others. To nominate, please visit:? Pierluigi Paganini.

Data breaches 72

Data breaches Healthcare Insurance Cybersecurity 72

Security Affairs

MARCH 2, 2023

Crooks can use the data to know the physical address of the buyers and can reach the to steal the weapon. At the end of 2022, a security researcher discovered the stolen data on an unsecured server belonging to a group of hackers. New breach: GunAuction[.]com New breach: GunAuction[.]com

Accountability 77

Accountability Hacking Data breaches Passwords 77

Security Affairs

JANUARY 4, 2022

The Broward Health public health system disclosed a massive data breach that has impacted more than 1.3 The Broward Health public health system has suffered a data breach that impacted 1,357,879 individuals. ” reads the data breach notification letter sent to the impacted individuals.

Data breaches 78

Data breaches Healthcare Identity Theft Insurance 78

Security Affairs

AUGUST 5, 2022

Twitter confirmed that the recent data breach that exposed data of 5.4 million accounts was caused by the exploitation of a zero-day flaw. At the end of July, a threat actor leaked data of 5.4 million Twitter accounts that were obtained by exploiting a now-fixed vulnerability in the popular social media platform.

Accountability 103

Accountability Data breaches Authentication Media 103

Security Affairs

FEBRUARY 26, 2023

In February 2022, the American media and publishing giant News Corp revealed it was the victim of a cyber attack from an advanced persistent threat actor that took place in January 2022. Now News Corp revealed that the threat actor behind the security breach first gained a foothold in the company infrastructure in February 2020.

Identity Theft 83

Identity Theft Data breaches Insurance Hacking 83

Security Affairs

MAY 3, 2023

Google announced the introduction of the passwordless secure sign-in with Passkeys for Google Accounts on all platforms. Google is rolling out the passwordless secure sign-in with Passkeys for Google Accounts on all platforms. Japan have already deployed to streamline sign-in for their users. ” continues the post.

Accountability 89

Accountability Passwords Password Management Phishing 89

SecureList

DECEMBER 12, 2023

Every year is abundant with major data leaks, biggest data breaches and hacks drawing massive media attention (such as Medibank and Optus data breach, Twitter data breach, and Uber and Rockstar compromise in 2022 and in T-Mobile , MailChimp and OpenAI in 2023).

Data breaches 86

Data breaches Accountability Telecommunications Malware 86

CyberSecurity Insiders

JANUARY 19, 2022

Data security is a C-suite imperative for 2022 and beyond. As organizational IT and security teams enabled hybrid work models, digitized processes and transformed business models, products and services, their security posture changed dynamically and often for the worse. In 2022, cloud security will capture $12.73

CISO 126

CISO Data breaches Artificial Intelligence Digital transformation 126

Security Affairs

AUGUST 29, 2022

Threat actors behind the Twilio hack also gained access to the accounts of 93 individual users of its Authy two-factor authentication (2FA) service. Early August, the communications company Twilio discloses a data breach , threat actors had access to the data of some of its customers.

Accountability 87

Accountability Authentication Phishing Data breaches 87

Security Affairs

JUNE 15, 2022

PrivacyAffairs released the Dark Web Index 2022, the document provides the prices for illegal services/products available in the black marketplaces. The document updates the information provided in the Dark Web Index 2022 report. The document updates the information provided in the Dark Web Index 2022 report.

Identity Theft 90

Identity Theft Accountability DDOS Cybercrime 90

Security Affairs

APRIL 9, 2019

Yahoo is continuously trying to settle a lawsuit on the massive data breach over the period of 2013 to 2016. million for the settlement of 3 billion hacked accounts. million settlement with millions of people whose email addresses and other personal information were stolen in the largest data breach in history”.

Data breaches 71

Data breaches Small Business Advertising Cryptocurrency 71

Security Affairs

DECEMBER 23, 2022

Online sports betting company BetMGM suffered a data breach and threat actors offered for sale a database containing the data of 1.5 On December 21, the online sports betting company BetMGM disclosed a data breach while threat actors offered for sale a database containing the information of 1,569,310 million BetMGM customers.

Data breaches 91

Data breaches Accountability Passwords Hacking 91

Security Affairs

SEPTEMBER 16, 2022

. — Uber Comms (@Uber_Comms) September 16, 2022. According to the New York Times , the threat actors hacked an employee’s Slack account and used it to inform internal personnel that the company had “suffered a data breach” and provided a list of allegedly hacked internal databases. “I

Hacking 127

Hacking Data breaches Engineering Information Security 127

Security Affairs

APRIL 7, 2024

More than 16,000 Ivanti VPN gateways still vulnerable to RCE CVE-2024-21894 Cisco warns of XSS flaw in end-of-life small business routers Magento flaw exploited to deploy persistent backdoor hidden in XML Cyberattack disrupted services at Omni Hotels & Resorts HTTP/2 CONTINUATION Flood technique can be exploited in DoS attacks US cancer center (..)

Data breaches 94

Data breaches Small Business Hacking Malware 94

Krebs on Security

OCTOBER 20, 2023

BeyondTrust’s security team detected that someone was trying to use an Okta account assigned to one of their engineers to create an all-powerful administrator account within their Okta environment. 2 was not a result of a breach in its systems. He said that on Oct 2., But she said that by Oct.

Social Engineering 327

Social Engineering Engineering Accountability Hacking 327

Security Affairs

MARCH 28, 2022

While Twitter suspends some Anonymous accounts, the collective hacked All-Russia State Television and Radio Broadcasting Company (VGTRK). On Friday, Anonymous announced that the affiliate group Black Rabbit World has leaked 28 GB of data stolen from the Central Bank of Russia. Our Anonymous brother @OpsAn0n got suspended by @Twitter.

Accountability 96

Accountability Hacking Banking Government 96

Security Affairs

APRIL 28, 2024

Hackers may have accessed thousands of accounts on the California state welfare platform Brokewell Android malware supports an extensive set of Device Takeover capabilities Experts warn of an ongoing malware campaign targeting WP-Automatic plugin Cryptocurrencies and cybercrime: A critical intermingling Kaiser Permanente data breach may have impacted (..)

Cybercrime 90

Cybercrime Spyware Data breaches Antivirus 90

Security Affairs

JUNE 13, 2023

A database containing personal information of 8,929,503 Zacks Investment Research users emerged on a popular hacking forum on June 10, 2023. The availability of the archive was reported by the data breach notification service Have I Been Pwned , which notified Zecks.

Data breaches 80

Data breaches Passwords Cybercrime Encryption 80

Approachable Cyber Threats

DECEMBER 6, 2023

The 2023 update to our research on the perception of cybersecurity incident and data breach causes that’s helped organizations re-evaluate how they are at risk of a cybersecurity incident or data breach instead of what feels right. Source: Verizon DBIR [1] Patterns over time in cybersecurity data breaches.

Cybersecurity 106

Cybersecurity Social Engineering Data breaches Engineering 106

Security Affairs

DECEMBER 13, 2022

Twitter confirmed that the recent leak of members’ profile information resulted from the 2021 data breach disclosed in August 2022. Twitter confirmed that the recent data leak of millions of profiles resulted from the 2021 data breach that the company disclosed in August 2022.

Data breaches 89

Data breaches Accountability Media Hacking 89

Security Affairs

APRIL 6, 2022

Ukraine’s technical security and intelligence service warns of threat actors targeting aimed at gaining access to users’ Telegram accounts. State Service of Special Communication and Information Protection (SSSCIP) of Ukraine spotted a new wave of cyber attacks aimed at gaining access to users’ Telegram accounts.

Accountability 95

Accountability Phishing Passwords Hacking 95

Security Affairs

NOVEMBER 3, 2023

The attackers gained access to Okta’s customer support system by leveraging a service account stored in the system itself. The service account was granted permissions to view and update customer support cases. “The username and password of the service account had been saved into the employee’s personal Google account. .

Data breaches 113

Data breaches Social Engineering Accountability Authentication 113

Security Affairs

MARCH 23, 2022

On March 22, 2022 night the group shared a torrent for a 7zip archive containing 9 GB of Microsoft source code. Microsoft has now confirmed that the attackers have compromised the account of one of its employees gaining limited access to source code repositories. . No customer code or data was involved in the observed activities.

Accountability 99

Accountability VPN Social Engineering Hacking 99