Undisclosed third-party vendor
January 26, 2023
•[ leak, technology ]
Telecommunications company Charter Communications says one of its third-party vendors suffered from a security breach after data from the company showed up on a hacking forum.
Mscripts
January 17, 2023
•[ hack, misconfiguration, technology ]
Mscripts files notice of a data breach after determining confidential consumer information entrusted to the company was accessible by an unauthorized party.
Slovakian TV channels
January 14, 2023
•[ hack, ddos, technology ]
Anonymous Russia claims to have conducted DDoS attacks against the websites of four Slovakian TV channels.
AT&T
January 6, 2023
•[ leak, misconfiguration, technology ]
A threat actor named IntelBroker claims to have found a third-party vendor's unsecured cloud storage containing 37 million AT&T client records. The threat actor shares a sample of 5 million records.
T-Mobile
January 5, 2023
•[ hack, misconfiguration, technology ]
T-Mobile discloses a new data breach after a threat actor stole the personal information of 37 million current postpaid and prepaid customer accounts through one of its Application Programming Interfaces (APIs).
3Mob
January 5, 2023
•[ hack, ddos, technology ]
The Russian-affiliated People's CyberArmy claims to have conducted a DDoS attack against the website of a Ukrainian mobile operator.
DNV
January 7, 2023
•[ ransomware, malware, technology ]
About 1,000 vessels are affected by a ransomware attack against DNV, a major software supplier for ships.
CGM LLC
January 5, 2023
•[ ransomware, malware, technology ]
CGM LLC, a U.S. SaaS provider is hit by the Clop ransomware gang.
Advanced Systems
December 27, 2022
•[ ransomware, malware, technology ]
The Advanced Systems company, an Italian IT provider, informs that it has been the victim of a ransomware which has affected some company servers.
CircleCI
January 4, 2023
•[ hack, technology ]
CircleCI, a software development service discloses a security incident and is urging users to rotate their secrets.
Twitch
January 2, 2023
•[ hack, ddos, technology ]
Mirai, a KillNet-affiliated collective, claims to have conducted a DDoS attack against the website of a live streaming video game service.
Mozilla
December 28, 2022
•[ hack, ddos, technology ]
Mirai, a KillNet-affiliated collective, claims to have conducted a DDoS attack against the support webpage of a popular search engine.
CGM
December 28, 2022
•[ hack, misconfiguration, technology ]
CGM files a notice of data breach after learning that an unauthorized party was able to access confidential personal information stored on the company's computer system.
Slack
December 27, 2022
•[ hack, misconfiguration, technology ]
Threat actors gained access to Slack's externally hosted GitHub repositories via a "limited" number of Slack employee tokens that were stolen.
Youdo
December 22, 2022
•[ hack, ddos, technology ]
IT Army of Ukraine has conducted a DDoS attack against the servers of a Russian freelancing platform.
Spotify
December 19, 2022
•[ hack, ddos, technology ]
Mirai, a KillNet-affiliated collective, claims to have conducted a DDoS attack against the support webpage of a Swedish audio streaming and media services provider.
Astro
December 25, 2022
•[ leak, misconfiguration, technology ]
A website had listed details of 3.5 million Astro customers.
Cott Systems
December 26, 2022
•[ hack, technology ]
Cott Systems, a cloud-based solutions provider, informed its customers that an "organized cyberattack" had hit the company systems and resulted in "unusual activity" on its servers
Twitter
December 23, 2022
•[ hack, misconfiguration, technology ]
A threat actor claims to be selling public and private data of 400 million Twitter users scraped in 2021 using a now-fixed API vulnerability.
Social Blade
December 14, 2022
•[ hack, technology ]
Social media analytics platform Social Blade has confirmed they suffered a data breach after its database was breached and put up for sale on a hacking forum.