Telecommunication providers in Crimea
June 27, 2024
•[ hack, ddos, technology ]
Local authorities in Crimea warn of internet disruptions from distributed denial-of-service (DDoS) attacks targeting telecommunication providers.
BudTrader
June 27, 2024
•[ hack, misconfiguration ]
In July 2024, a data breach of the now defunct cannabis social platform BudTrader was posted for sale on a hacking forum. Dating back to the previous month, the breach of the website exposed 2.7M email addresses, usernames and WordPress password hashes.
Neiman Marcus
June 24, 2024
•[ hack, malware, retail ]
High-end department store Neiman Marcus discloses a data breach, shortly before the threat actor 'Sp1d3r' offered to sell information belonging to millions of the companys customers. The hack impacted 64,000 users and is likely part of the massive SnowFlake campaign.
CoinStats
June 23, 2024
•[ hack, finance ]
CoinStats reveals to have suffered a massive security breach that compromised 1,590 cryptocurrency wallets, draining over $2 million in virtual assets, with the attack suspected to have been carried out by North Korean threat actors.
Japan Aerospace Exploration Agency (JAXA)
June 21, 2024
•[ hack, government ]
The Japanese space agency JAXA has been hit by a series of cyberattacks since it reported a cyber incident during November 2023.
Apple
June 19, 2024
•[ hack, manufacturing ]
The threat actor IntelBroker claims to have hacked Apple, allegedly gaining access to internal source code of three popular tools of Apple.com.
CDK Global
June 19, 2024
•[ hack, retail ]
CDK Global suffers an additional breach as it was starting to restore systems shut down in an previous cyberattack.
Crown Equipment
June 19, 2024
•[ hack, manufacturing ]
Forklift manufacturer Crown Equipment confirms that it suffered a cyberattack earlier this month that disrupted manufacturing at its plants.
Learnosity
June 17, 2024
•[ hack, education ]
Learnosity, an e-learning platform with more than 40 million learners, discloses a cybersecurity incident.
TVP
June 16, 2024
•[ hack, ddos, technology ]
Russian threat actors could be behind the disruption to TVP, an online broadcast of the Euro 2024 soccer tournament, during the Polish national teams opening match against the Netherlands.
1,899 victims in Singapore
June 14, 2024
•[ financial, hack, malware ]
A Singapore police-led law enforcement operation dismantles a regional cybercrime ring that carried out malware-enabled scams to steal tens of millions of dollars from victims since 2023.
Globe Life
June 14, 2024
•[ hack, finance ]
American financial services holding company Globe Life says attackers may have accessed consumer and policyholder data after breaching one of its web portals.
Amtrak
June 14, 2024
•[ hack, brute-force ]
Amtrak reveals that the Guest Rewards Accounts were hacked in credential stuffing attacks
Consulting Radiologists
June 14, 2024
•[ hack, healthcare ]
Consulting Radiologists notifies more than 500,000 individuals that their sensitive information was accessed and potentially acquired by threat actors earlier this year.
Richland School District
June 14, 2024
•[ hack, education ]
Richland School District is left without phones and Internet, after someone gained unauthorized access to the network.
Truist Bank
June 13, 2024
•[ hack, leak, finance ]
Truist Bank, a leading U.S. commercial bank, confirms this week that its systems were breached in an October 2023 cyberattack after a threat actor posted some of the company's data for sale on a hacking forum.
Pure Storage
June 10, 2024
•[ hack, misconfiguration, technology ]
Pure Storage, a leading provider of cloud storage systems and services, confirms that attackers breached its Snowflake workspace and gained access to what the company describes as telemetry information.
Absolute Telecom
June 9, 2024
•[ hack, technology ]
GhostR claims to have stolen over 34 gigabytes of data belonging to Singapore-based telecom company Absolute Telecom PTE Ltd.
mSpy (2024)
June 9, 2024
•[ hack, leak, technology ]
In June 2024, a huge trove of data from spyware maker mSpy was obtained by hacktivists and published online. Comprising of 142GB of user data and support tickets along with 176GB of more than half a million attachments, the data contained 2.4M unique email addresses, IP addresses names and photos. The data was predominantly support tickets seeking help to install the spyware on target devices, whilst the attachments contained various data including screen grans of financial transactions, photos of credit cards and nude selfies.
Various election-related sites and two political parties in the Netherlands
June 6, 2024
•[ hack, ddos, government ]
Researchers from Cloudflare report to have mitigated at least three distributed denial of service (DDoS) attack waves on various election-related sites in the Netherlands, as well as several political parties; PVV (Party for Freedom) and FvD (Forum for Democracy). The hacktivist group known as 'HackNeT' took responsibility for the attacks.
