Cinepolis
October 4, 2023
•[ ransomware, malware, technology ]
The PLAY ransomware group adds the Cinepolis to the list of its victims.
BeyondTrust
October 2, 2023
•[ hack, misconfiguration, technology ]
BeyondTrust reveals to have detected an identity-centric attack on an in-house Okta administrator account
Zscaler
October 1, 2023
•[ hack, misconfiguration, technology ]
Zscaler says that they discovered an exposed "test environment" that was taken offline for analysis after rumors circulated that a threat actor was selling access to the company's systems.
Facebook Marketplace
October 1, 2023
•[ leak, hack, technology ]
In February 2024, 200k Facebook Marketplace records allegedly obtained from a Meta contractor in October 2023 were posted to a popular hacking forum. The data contained 77k unique email addresses alongside names, phone numbers, Facebook profile IDs and geographic locations. The data also contained bcrypt password hashes, although there is no indication these belong to the corresponding Facebook accounts.
Lyca Mobile
September 30, 2023
•[ hack, technology ]
Lyca Mobile releases a statement about an unexpected disruption on its network caused by a cyberattack that may have also compromised customer data.
Innovery
September 30, 2023
•[ hack, technology ]
Innovery, an Italian company delivering IT services, is hit with a cyber attack.
Korek
September 30, 2023
•[ espionage, malware, technology ]
Researchers from Deep Instinct discover a new campaign from the "MuddyWater" group targeting Korek, an Iraqi Telecom provider using MuddyC2Go, a new C2 Framework.
Dolly
September 30, 2023
•[ ransomware, malware, technology ]
On-demand moving and delivery platform Dolly.com is hit with a ransomware attack, allegedly pays a ransom but the threat actors find an excuse not to hold their end of the bargain.
1Password
September 29, 2023
•[ hack, misconfiguration, technology ]
1Password, a popular password management platform used by over 100,000 businesses, suffers a security incident after hackers gained access to its Okta ID management tenant.
Leonardo
September 28, 2023
•[ hack, ddos, technology ]
Leonardo, the Russian flight booking system is hit by a DDoS attack, allegedly carried out by "foreign hackers,"
Italtel
September 28, 2023
•[ ransomware, malware, technology ]
The Medusa ransomware gang claims to have hacked Italtel.
Shadow
September 28, 2023
•[ hack, social, technology ]
In September 2023, the cloud gaming provider Shadow suffered a data breach that exposed over half a million customer records. The data included email and physical addresses, names and dates of birth. The data was provided to HIBP by a source who requested it be attributed to "oathnet.ru".
European Telecommunications Standards Institute (ETSI)
September 27, 2023
•[ leak, technology ]
The European Telecommunications Standards Institute (ETSI) reveals that threat actors have stolen a database identifying its users.
NTT Docomo
September 26, 2023
•[ ransomware, malware, technology ]
In a development following the recent data leak from Sony, the notorious ransomware syndicate Ransomed.vc targets Japan's largest telecommunication giant, NTT Docomo.
Phil-Data Business Systems
September 25, 2023
•[ ransomware, malware, technology ]
The BlackCat ransomware gang adds Phil-Data Business Systems to the list of its victims.
Okta
September 23, 2023
•[ leak, technology, healthcare ]
Okta warns nearly 5,000 current and former employees that their personal information was exposed after Rightway Healthcare, a third-party vendor was breached.
Nansen
September 22, 2023
•[ leak, misconfiguration, technology ]
Ethereum blockchain analytics firm Nansen asks a subset of its users to reset passwords following a recent data breach at its authentication provider.
Frax Outsourcing
September 21, 2023
•[ hack, technology ]
Frax Outsourcing files a notice of data breach after determining that it was the recent victim of a cyberattack.
Huawei
September 20, 2023
•[ espionage, malware, technology ]
China's Ministry of State Security (MSS) accuses the U.S. of breaking into Huawei's servers, stealing critical data, and implanting backdoors since 2009.
Cadre Services
September 19, 2023
•[ ransomware, technology ]
The ALPHV/BlackCat ransomware gang lists Cadre Services among its victims, claiming to have stolen 100 GB of files.
