-
mSpy
July 11, 2024
A data breach at the Zendesk customer support site of the phone surveillance operation mSpy exposes millions of its customers who bought access to the phone spyware app over the past decade, as well as the Ukrainian company behind it, Brainstack.
-
Sibanye-Stillwater
July 11, 2024
•
[ ransomware, malware, healthcare ]
Mining giant Sibanye-Stillwater, one of the worlds biggest producers of platinum and gold, reveals that its global IT systems have suffered a cyberattack. The BlackSuit ransomware gang claims responsibility for the attack.
-
General Motors
July 9, 2024
•
[ hack, brute-force, manufacturing ]
General Motors (GM) suffers what appears to be a credential stuffing attack, affecting 65 GM MyAccounts.
-
U.S. Department of Veterans Affairs
July 8, 2024
The Microsoft Azure environment of the U.S. Department of Veterans Affairs was briefly compromised by Russian threat actors
-
-
Twilio Authy
July 3, 2024
Twilio confirms that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to SMS phishing and SIM swapping attacks.
-
Louisiana Special School District
July 3, 2024
•
[ ransomware, malware, education ]
Louisiana Special School District suffers an Akira ransomware attack.
-
FIA (Fédération Internationale de l'Automobile)
July 3, 2024
FIA (Fdration Internationale de l'Automobile) says attackers gained access to personal data after compromising several FIA email accounts in a phishing attack.
-
Organizations in the manufacturing and logistics industries
July 1, 2024
•
[ ransomware, malware, manufacturing ]
Researchers from Halcyon discover Volcano Demon, a new ransomware group targeting organizations in manufacturing and logistics via an encryptor dubbed LukaLocker.
-
Florida Community Health Centers
July 1, 2024
•
[ ransomware, malware, healthcare ]
Florida Community Health Centers (FCHC) discloses to have suffered a ransomware attack affecting nearly 300,000 people.
-
Mercku
June 30, 2024
The helpdesk portal of Mercku, a router maker, is sending MetaMask phishing emails in response to newly filed support tickets, in what appears to be a compromise.
-
Roll20
June 29, 2024
•
[ hack, technology ]
Roll20, a popular online tabletop platform for role-playing games (RPGs), reveals that its systems were breached.
-
Central Bank of Iran (CBI) and several other banks in the country
August 14, 2024
Iran International reports that a massive cyber attack disrupted operations of the Central Bank of Iran (CBI) and several other banks in the country.
-
Undisclosed victim
July 13, 2024
Scam Sniffer reports that a crypto scammer returned $9.27 million in stablecoins to a victim, after stealing $24.23 million in various crypto assets (38.26% of the total stolen amount)
-
Disney
July 13, 2024
A self-proclaimed hacktivist group named NullBulge, aiming to protect artists rights and ensure fair compensation for their work, claims to have breached Disney and leaks 1.2 TB of the companys internal Slack infrastructure.
-
Dough Finance
July 12, 2024
Decentralized finance protocol Dough Finance loses $1.8 million in digital assets after threat actors executed a flash loan attack.
-
Lulu Hypermarket
July 10, 2024
•
[ leak, retail ]
Lulu Hypermarket experiences a data breach, exposing over 200,000 customer records. The attack, claimed by IntelBroker, includes personal details such as email addresses and phone numbers. The full database, allegedly containing millions of user and order details, might be leaked in the future.
-
Undisclosed app
July 7, 2024
•
[ leak, misconfiguration, retail ]
E-commerce platform Shopify denies it suffered a data breach after a threat actor with the moniker of 888 begins selling customer data they claim was stolen from the company's network. According to Shopify, the data loss reported was caused by a third-party app.
-
Cedar Falls
July 3, 2024
Cedar Falls officials are investigating a ransomware event that was detected in June 2024.
-
Solano County
July 3, 2024
•
[ ransomware, malware, government ]
Nearly three months after a ransomware attack disrupted phone lines, computer services and Wi-Fi across Solano County's public libraries, systems are still down.
