Rappler
November 30, 2023
•[ hack, ddos, technology ]
Rappler, a digital media company in the Philippines, is hit by a massive series of crippling DDoS attacks.
Telecommunications companies in Sudan
November 30, 2023
•[ espionage, malware, technology ]
Researchers from Broadcom/Symantec discover a campaign carried on by the cyber-espionage group Seedworm, linked to Iran's intelligence service, targeting telecommunications companies in Egypt, Sudan and Tanzania via the MuddyC2Go framework and a custom keylogger.
SurvTech Solutions
November 28, 2023
•[ ransomware, leak, malware ]
The Play ransomware gang adds SurvTech Solutions to their leak site.
LY Corporation
November 27, 2023
•[ leak, technology ]
LY Corporation, the operator of the Line app, inform users about unauthorized access to its systems, which resulted in hundreds of thousands of user, business partner, and employee records being leaked.
General Electric
November 25, 2023
•[ hack, misconfiguration, technology ]
General Electric is investigating claims that a threat actor named IntelBroker breached the company's development environment in a cyberattack and leaked allegedly stolen data.
CTS
November 24, 2023
•[ ransomware, CitrixBleed, technology ]
CTS, a U.K.-based provider of managed IT services for law firms and the professional services industry, experiences a cybersecurity incident that is causing ongoing widespread disruption across the legal sector. Fingers are pointed to the Clop ransomware gang exploiting the CVE-2023-4966 CitrixBleed vulnerability.
Equaldex
November 24, 2023
•[ ransomware, malware, technology ]
The MEOW ransomware gang adds Backroads to their leak site.
Ethyrial: Echoes of Yore
November 24, 2023
•[ ransomware, malware, technology ]
A ransomware attack on the "Ethyrial: Echoes of Yore" MMORPG published by the Gellyberry Studios, destroys 17,000 player accounts, deleting their in-game items and progress in the game.
Feam Aero
November 23, 2023
•[ ransomware, technology ]
The ALPHV/BlackCat ransomware gang claims to have breached Feam Aero, the global aircraft maintenance and technical services company.
Autonomous Flight Technologies
November 20, 2023
•[ ransomware, malware, technology ]
Unmanned drone systems maker, Autonomous Flight Technologies (AFT), allegedly falls victim to a cyberattack orchestrated by the ALPHV/BlackCat ransomware group.
Blender
November 19, 2023
•[ hack, ddos, technology ]
Blender, a popular 3D design suite confirms that the recent site outages were caused by ongoing DDoS (distributed denial of service) attacks.
Systems East
November 16, 2023
•[ hack, technology ]
Systems East notifies 209,000 consumers after a database with some payment card info is hacked.
MeridianLink
November 15, 2023
•[ ransomware, leak, malware ]
The AlphV/BlackCat ransomware group adds MeridianLink to its leak site and reports its victim to the Securities Exchange Commission (SEC.)
Plume
November 15, 2023
•[ leak, technology ]
The smart Wi-Fi service provider, Plume, apparently falls victim to a data breach. The perpetrators, claiming responsibility for the incident, make their announcement on the notorious Breach Forums.
Studio D.E.L.L.A.
November 15, 2023
•[ ransomware, technology ]
The Knight ransomware group claims responsibility for a cyber attack to Studio D.E.L.L.A..
KitchenPal
November 14, 2023
•[ leak, misconfiguration, technology ]
In November 2023, the kitchen management application KitchenPal suffered a data breach that exposed 146k lines of data. When contacted about the incident, KitchenPal advised the corpus of data came from a staging environment, although acknowledged it contained a small number of users for debugging purposes and included passwords that could not be used. Impacted data included almost 100k email addresses, names, geolocations and incomplete data on dates of birth, genders, height and weight, social media profile identifiers and bcrypt password hashes.
Cloudflare
November 9, 2023
•[ hack, ddos, technology ]
Cloudflare is hit by a DDoS attack. The Pro-Russia group Anonymous Sudan claims responsibility for the attack.
OpenAI
November 8, 2023
•[ hack, ddos, technology ]
OpenAI addresses "periodic outages" due to DDoS attacks targeting its API and ChatGPT. The pro-Russia group Anonymous Sudan claims responsibility for the attack.
Chess.com (2023)
November 8, 2023
•[ leak, technology ]
In November 2023, over 800k user records were scraped from the Chess.com website and posted to a popular hacking forum. The data included email address, name, username and the geographic location of the user. A further 446k scraped records were later provided and added to HIBP.
LinkedIn Scraped and Faked Data (2023)
November 4, 2023
•[ leak, misconfiguration, technology ]
In November 2023, a post to a popular hacking forum alleged that millions of LinkedIn records had been scraped and leaked. On investigation, the data turned out to be a combination of legitimate data scraped from LinkedIn and email addresses constructed from impacted individuals' names.
