-
EOSBet
September 14, 2018
A gambling application that is based on the EOS blockchain has a flaw in its smart contract system exploited. The attacker is able to make off with $200,000 worth of EOS due to the vulnerability.
-
Feedify
September 12, 2018
Customer engagement service Feedify is hit by Magecart attackers, who repeatedly modified a script that it serves to a few hundred websites to include payment card skimming code.
-
FreshMenu
September 10, 2018
•
[ hack, retail ]
The Indian online food platform FreshMenu admits to have hidden a data breach affecting 110K users for two years. The data breach happened on July 1, 2016.
-
Mega
September 4, 2018
The official Chrome extension for the MEGA.nz file sharing service is compromised with malicious code that steals usernames and passwords, but also private keys for cryptocurrency accounts.
-
South African Department of Labour
September 3, 2018
•
[ hack, ddos, government ]
The South African Department of Labour confirms a DDoS attack which disrupted the government agency's website.
-
Schneider Electric
August 24, 2018
•
[ hack, malware, manufacturing ]
Schneider Electric finds a malicious code on the USB drives that have been shipped with Conext ComBox and Conext Battery Monitor products.
-
Cheddar Scratch Kitchen
August 22, 2018
•
[ hack, malware, retail ]
Restaurants in 23 states belonging to Cheddar Scratch Kitchen are affected by a cyberattack that exposed payment card information. The amount of impacted card details is estimated to be 567,000 and were stolen between November 3, 2017, and January 2, 2018.
-
Superdrug
August 20, 2018
•
[ hack, retail ]
Superdrug confirms that hackers claim to have obtained the personal details of almost 20,000 individuals who shopped online at Superdrug.
-
Dallas County Community College
August 17, 2018
•
[ social, phishing, education ]
Dallas County Community College discloses a breach after some employees' emails credentials are compromised by a phishing attack from September 14, 2017 to December 18, 2017.
-
Augusta University Health
August 16, 2018
•
[ social, phishing, healthcare ]
Augusta University Health discloses a breach affecting 417,000 patients as a consequence of two phishing attacks occurred on September 11, 2017 and July 31, 2018.
-
Livecoin
August 4, 2018
Livecoin crypto exchange announces that it met considerable losses because crucial bug in Monero code, allowing to manipulate transaction amounts. The total amount of the funds lost is 15108 XMR (more than $1,8 million).
-
TSMC (Taiwan Semiconductor Manufacturing Co.)
August 3, 2018
•
[ ransomware, malware, manufacturing ]
A computer virus, later reported to be a variant of WannaCry, halts several Taiwan Semiconductor Manufacturing Co. factories, the sole maker of the iPhone's main processor.
-
Borough of Matanuska-Susitna
July 31, 2018
•
[ ransomware, malware, government ]
The Borough of Matanuska-Susitna is hit by CryptoLocker. The attack took place on July 24 but was maybe dormant since May. The IT systems are not operational with some users starting to use typewriters.
-
UnityPoint Health
July 30, 2018
•
[ social, phishing, healthcare ]
UnityPoint Health warns 1.4 million patients their information might have been breached by email hackers after a phishing attack.
-
Banks in Chile
July 28, 2018
•
[ leak, finance ]
Additional 55,106 cards are leaked in Chile.
-
Hudl football team
July 27, 2018
Coaches for the football team at Braden River (Bradenton, Fla.), are caught using a college Hudl account to access opponents' game and practice videos.
-
Blue Springs Family Care
July 26, 2018
•
[ ransomware, malware, healthcare ]
Healthcare provider Blue Springs Family Care discloses a ransomware attack resulting from an authorized access that may have also compromised 44,979 patients records.
-
Krungthai Bank (KTB)
July 25, 2018
•
[ hack, finance ]
Computer systems of Kasikornbank (Kbank) and Krungthai Bank (KTB) are compromised, affecting the security of the personal and corporate data of more than 120,000 customers.
-
Etherscan
July 23, 2018
•
[ hack, xss, finance ]
Visitors of the popular Ethereum blockchain explorer Etherscan.io are shown a pop-up message showing "1337" indicating the website has been compromised.
-
PIR Bank of Russia
July 20, 2018
•
[ financial, misconfiguration, finance ]
Cybercriminals part of the notorious hacking group MoneyTaker attack the PIR Bank of Russia and steal $1M. The hacking is carried out after infiltrating the bank's systems by compromising an old, outdated router. The router was installed at one of the regional branches of the bank.
