EDP
August 28, 2020
•[ hack, ddos, technology ]
EDP is one of more than a dozen European ISPs whose DNS infrastructure is the target of a DDoS attack.
Belarusian anti-government protesters
September 2, 2020
•[ espionage, malware, technology ]
Google has removed an Android app from the Play Store that was used to collect personal information from Belarusians attending anti-government protests.
Caiway
August 28, 2020
•[ financial, ddos, technology ]
Caiway is one of more than a dozen European ISPs whose DNS infrastructure is the target of a DDoS attack. The attackers demanded a Bitcoin payment to stop the attack.
Data#3
August 27, 2020
•[ hack, technology ]
Australian IT vendor Data#3 notifies to have experienced what it dubbed as a "cyber incident".
CNN-News18
September 3, 2020
•[ hack, technology ]
In an attempt to refute the claims that they were behind the PAyTM hacks, "John Wick' hacked the TV channle CNN-News 18 to spread a message claiming their innocence.
SoftServe
September 1, 2020
•[ ransomware, malware, technology ]
Ukrainian software developer and IT services provider SoftServe suffers a RansomExx ransomware attack.
Bykea
September 1, 2020
•[ hack, technology ]
Unidentified hackers successfully infiltrate and delete the entire database of Bykea, a Pakistan-based vehicle for hire and delivery company.
Tirto
August 28, 2020
•[ hack, technology ]
The website of the Tirto.id media outlet is defaced.
Empire Market
August 24, 2020
•[ ddos, technology ]
The popular dark web site Empire Market has been down for at least 48 hours, with some users suspecting an exit scam and others blaming a prolonged distributed denial-of-service (DDoS) attack.
Freepik
August 21, 2020
•[ hack, sqlinjection, technology ]
Freepik says that hackers were able to steal emails and password hashes for 8.3 million Freepik and Flaticon users in an SQL injection attack against the company's Flaticon website.
SnapFulfil
August 20, 2020
•[ ransomware, malware, technology ]
Warehouse management software provider SnapFulfill is hit by ransomware.
Yunrun Big Data Service
August 20, 2020
•[ hack, misconfiguration, technology ]
A group of hackers says they have obtained internal files from three Chinese social media monitoring companies. The victims are Knowlesys, Yunrun Big Data Service, and OneSight.
Kariyer
August 12, 2020
•[ leak, misconfiguration, technology ]
A file containing the information of 50,000 members of Kariyer.net is found on the web by LVKK, the Turkish data protection authority.
RailYatri
August 12, 2020
•[ leak, misconfiguration, technology ]
One of India's most popular travel booking hubs has suffered a significant data breach that led to the loss of over 43GB of data as a result of a Meow bot attack. Preceding the attack, the affected Elastic search server was left publicly exposed for several days.
Defcon
August 9, 2020
•[ hack, misconfiguration, technology ]
The defcon.org forum is attacked with CVE-2019-16759 (targeting vBulletin), three hours after it is disclosed.
Reddit
August 7, 2020
•[ hack, technology ]
Tens of Reddit channels have been hacked and defaced to show messages in support of Donald Trump's reelection campaign.
Flood
July 26, 2020
•[ hack, misconfiguration, technology ]
Software testing service Flood.io suffers a breach blamed on OAuth tokens stolen by the attackers from Waydev.
DeepSource
July 21, 2020
•[ social, phishing, technology ]
DeepSource resets the user logins after an employee falls for the Sawfish phishing campaign.
Promo
July 27, 2020
•[ leak, technology ]
Promo.com, an Israeli-based marketing video creation site, discloses a data breach after a database containing 22 million user records is leaked for free on a hacker forum.