EscortReviews
September 1, 2018
•[ hack, misconfiguration, technology ]
An online community promoting female escorts and reviews of their services has suffered a data breach after a hacker downloaded the site's database. The site ran vBulletin 3.8.9, which has known vulnerabilities that could allow attackers to breach the site. It is unknown if the forum was hacked using one of these vulnerabilities or if the site left an unsecured backup of the database online.
T-Mobile
August 23, 2018
•[ hack, misconfiguration, technology ]
T-Mobile reveals that hackers stole some of the personal data of 2 million people in a new data breach. The intrusion took place on August 20 when hackers accessed company servers through an API that "didn't contain any financial data or other sensitive data."
TelAlaska
August 16, 2018
•[ espionage, technology ]
A threat actor is targeting multiple organizations with trade ties to China, including those connected with China's Belt and Road Initiative. The actor also targets organizations in advance of officials' meetings with Chinese trade officials.
Mention
August 3, 2018
•[ leak, misconfiguration, technology ]
Mention CEO Matthieu Vaxelaire informs users of the occurrence of a data security breach involving a third-party provider. The breach occurred in July and Mention promptly reported details to the French data protection authorities.
Typeform
June 29, 2018
•[ leak, misconfiguration, technology ]
Barcelona-based online survey and form building service Typeform announces a data breach after an unknown attacker downloaded a backup file containing sensitive customer information. The backup file contained data gathered by Typeform customers through surveys and online forms up until May 3, 2018.
Klook Travel
June 29, 2018
•[ hack, malware, technology ]
Klook Travel informs its users about a data breach incident it suffered. The attackers exploited a malicious JS code associated with SOCIAPlus, a third-party tool integrated on the site.
Cyanweb Solutions
June 27, 2018
•[ hack, technology ]
Digital marketing and web provider Cyanweb Solutions loses nearly all customer data and backups after a "criminal hacking incident" that compromises one of its servers.
Major international airport
July 11, 2018
•[ hack, misconfiguration, technology ]
While researching underground hacker marketplaces, researchers from McAfee discover that access linked to security and building automation systems of a major international airport could be bought for only US$10.
FastBooking
June 26, 2018
•[ financial, technology ]
The personal details and payment card data of guests from hundreds of hotels, are stolen by an unknown attacker from FastBooking, a Paris-based company that sells hotel booking software to more than 4,000 hotels in 100 countries. The breach occurred on June 14.
Blizzard Entertainment
July 7, 2018
•[ hack, ddos, technology ]
Blizzard Entertainment is hit by a DDoS attack. Players of Overwatch, Heroes of the Storm, and World of Warcraft are affected.
GitHub account of the Gentoo Linux distribution
June 28, 2018
•[ hack, malware, technology ]
An unknown hacker temporarily takes control over the GitHub account of the Gentoo Linux organization and embed malicious code inside the operating system's distributions that would delete user files. The malicious code fails to trigger properly and users' remain safe.
Flightradar24
June 18, 2018
•[ leak, technology ]
Users of the popular flight-tracking site Flightradar24 are told to change their passwords after the site warns of a data breach. The breach may have compromised the email addresses and hashed passwords for a small subset of Flightradar24 users (those who registered prior to March 16, 2016).
Whitbread
July 2, 2018
•[ hack, technology ]
Whitbread's online recruitment system has suffered a data breach, affecting a number of the company's brands including Premier Inn, and the UK outlets of Costa Coffee. The breach is a consequence of the attack to PageUp.
Manuel Delia's Blog
May 20, 2018
•[ hack, ddos, technology ]
Manuel Delia's blog (a Maltese journalist and blogger) is the target of a DDoS attack. Apparently the attack comes from Ukraine.
Avery Moss
June 4, 2018
•[ hack, social, technology ]
Explicit videos and pictures of New York Giants defensive end Avery Moss are posted on his Twitter timeline after his account is hacked.
PageUp
June 6, 2018
•[ leak, misconfiguration, technology ]
Australia-based human resources firm PageUp confirms it found "unusual" activity on its IT infrastructure on May 23, which has resulted in the potential compromise of client data.
[24]7.ai
April 5, 2018
•[ financial, malware, technology ]
[24]7.ai, a firm providing online customer support services based on artificial intelligence and machine learning, is breached. As consequence other companies using its services suffer a theft of customer payment information. The breach occurred between September 26, 2017 and Octover 12, 2017.
Online casino in Central America
April 3, 2018
•[ hack, malware, technology ]
Researchers from ESET reveal that the infamous Lazarus Group, a malicious actor linked to North Korea, has used a new toolset, including the destructive KillDisk, to target the network of an online Casino in Central America.
Corporation Service Company (CSC)
May 17, 2018
•[ hack, technology ]
Hackers steal the personally identifiable information of 5,678 customers of the Corporation Service Company (CSC), according to a notice the company sent to the California attorney general's office.
24TV Turk Telekom
May 3, 2018
•[ hack, ddos, technology ]
As a retaliation for the attacks of the Turkish collective Akincilar, Greek hackers from Anonymous paralyze the 24TV Live website for several hours. They also claim to have hacked 12,987 routers of Turk Telekom.
