-
Waydev
July 26, 2020
Hackers use a blind SQL injection vulnerability to gain access to Waydev's database, from where they stole GitHub and GitLab OAuth tokens from other companies.
-
Dave
July 26, 2020
•
[ leak, misconfiguration, finance ]
Loan app Dave.com has 7.5 million records leaked, blaming the breach to the OAuth tokens stolen by the attackers from Waydev.
-
Beaumont Health
July 25, 2020
•
[ social, phishing, healthcare ]
Beaumont Health, Michigan's largest healthcare provider warns around 6,000 patients that their data may have been exposed following a phishing attack that occurred between January 3, 2020, and January 29, 2020.
-
Emotet botnet
July 24, 2020
•
[ hack, malware, technology ]
Someone is taking fun at the Emotet botnet and disrupting its operations by hacking into the malware's distribution sites and replacing malicious payloads with memes and GIFs.
-
Aberystwyth University
July 24, 2020
•
[ hack, education ]
The Aberystwyth University is an additional university affected by the Blackbaud hack.
-
Amphastar Pharmaceuticals
July 21, 2020
•
[ ransomware, malware, healthcare ]
The DoppelPaymer ransomware threat actors posted data Amphastar Pharmaceuticals data that had been stolen in a May attack.
-
A telecom company in the Middle East
July 22, 2020
•
[ espionage, malware, technology ]
Researchers from Palo Alto Networks discover a series of cyberattacks on a telecom company in the Middle East signaling the return of the OilRig APT. The attacks also revealed a revised backdoor tool in the group's arsenal, called RDAT.
-
Twitter
July 15, 2020
A number of high profile Twitter accounts, including Bill Gates, Elon Musk and Apple, are hijacked to promote a bitcoin scam. The author of the hack is arrested by the FBI two weeks later.
-
Ente Nazionale Aviazione Civile (Italian Agency for the Civil Aviation)
July 10, 2020
The Italian Civil Aviation Authority is hit with a cyber attack.
-
Alfanar
July 10, 2020
•
[ leak, ransomware ]
Researchers from Cyble discover internal data from Alfanar leaked from the Netwalker ransomware operators.
-
Religare Health Insurance
July 9, 2020
Researchers from Cyble discover 5 million records from Religare Health Insurance up for sale on the dark web.
-
Impact Guru
July 8, 2020
•
[ leak, finance ]
Researchers from Cyble identify a threat actor claiming to be in possession of more than 500,000 confidential data records of Impact Guru, a crowdfunding platform.
-
VOXX International
July 7, 2020
•
[ ransomware, malware, healthcare ]
VOXX International notifies employees and dependents enrolled in their health plan of a ransomware attack.
-
Hapvida
July 6, 2020
•
[ hack, finance, healthcare ]
Brazilian health insurer Hapvida reveals to have suffered a cyber attack potentially involving access to the personal information of its customers.
-
Bank users in Portugal
July 6, 2020
•
[ financial, malware, finance ]
A new release of the Lampion trojan banker targets uses in Portugal.
-
MyGov accounts
July 3, 2020
Logins for more than 3600 MyGov accounts are listed for sale on the dark web.
-
Russia's Ministry of Foreign Affairs
July 2, 2020
Unknown hackers hijack the Twitter account of Russia's Ministry of Foreign Affairs, offer to sell stolen data.
-
LiveAuctioneers
July 20, 2020
Researchers claim to have found evidence that cybercriminals are offering for sale a database containing the personal details of 3.4 million users of LiveAuctioneers, an online art and antiques auction website, as well as three million cracked passwords.
-
GEDMatch
July 19, 2020
More than a million DNA profiles are available to search on GEDMatch after the genealogy portal is hacked.
-
Citrix third-party
July 15, 2020
•
[ leak, misconfiguration, technology ]
An actor sells what they claim to be a database with information on 2,000,000 Citrix customers on the dark web. An official statement by the company reveals that the database has been obtained from a third-party.
