AlfaNet
October 7, 2023
•[ hack, ddos, technology ]
Hacktivists from the ThreatSec group claim to have taken down Alfanet, an internet service provider based in the Gaza Strip.
Facebook's official UK page
October 6, 2023
•[ hack, technology ]
Facebook's official UK page is taken over by an unknown third party who posts weird messages about cricket and the release from jail of Imran Khan former Pakistani prime minister.
Galxe
October 6, 2023
•[ hack, phishing, technology ]
Web3 credentials and rewards platform Galxe suffers a DNS attack, refunding 980 victims with a total cost for the company a little over $396,000 .
Cinepolis
October 4, 2023
•[ ransomware, malware, technology ]
The PLAY ransomware group adds the Cinepolis to the list of its victims.
BeyondTrust
October 2, 2023
•[ hack, misconfiguration, technology ]
BeyondTrust reveals to have detected an identity-centric attack on an in-house Okta administrator account
Zscaler
October 1, 2023
•[ hack, misconfiguration, technology ]
Zscaler says that they discovered an exposed "test environment" that was taken offline for analysis after rumors circulated that a threat actor was selling access to the company's systems.
Facebook Marketplace
October 1, 2023
•[ leak, hack, technology ]
In February 2024, 200k Facebook Marketplace records allegedly obtained from a Meta contractor in October 2023 were posted to a popular hacking forum. The data contained 77k unique email addresses alongside names, phone numbers, Facebook profile IDs and geographic locations. The data also contained bcrypt password hashes, although there is no indication these belong to the corresponding Facebook accounts.
Innovery
September 30, 2023
•[ hack, technology ]
Innovery, an Italian company delivering IT services, is hit with a cyber attack.
Lyca Mobile
September 30, 2023
•[ hack, technology ]
Lyca Mobile releases a statement about an unexpected disruption on its network caused by a cyberattack that may have also compromised customer data.
Dolly
September 30, 2023
•[ ransomware, malware, technology ]
On-demand moving and delivery platform Dolly.com is hit with a ransomware attack, allegedly pays a ransom but the threat actors find an excuse not to hold their end of the bargain.
Korek
September 30, 2023
•[ espionage, malware, technology ]
Researchers from Deep Instinct discover a new campaign from the "MuddyWater" group targeting Korek, an Iraqi Telecom provider using MuddyC2Go, a new C2 Framework.
1Password
September 29, 2023
•[ hack, misconfiguration, technology ]
1Password, a popular password management platform used by over 100,000 businesses, suffers a security incident after hackers gained access to its Okta ID management tenant.
Italtel
September 28, 2023
•[ ransomware, malware, technology ]
The Medusa ransomware gang claims to have hacked Italtel.
Leonardo
September 28, 2023
•[ hack, ddos, technology ]
Leonardo, the Russian flight booking system is hit by a DDoS attack, allegedly carried out by "foreign hackers,"
Shadow
September 28, 2023
•[ hack, social, technology ]
In September 2023, the cloud gaming provider Shadow suffered a data breach that exposed over half a million customer records. The data included email and physical addresses, names and dates of birth. The data was provided to HIBP by a source who requested it be attributed to "oathnet.ru".
European Telecommunications Standards Institute (ETSI)
September 27, 2023
•[ leak, technology ]
The European Telecommunications Standards Institute (ETSI) reveals that threat actors have stolen a database identifying its users.
NTT Docomo
September 26, 2023
•[ ransomware, malware, technology ]
In a development following the recent data leak from Sony, the notorious ransomware syndicate Ransomed.vc targets Japan's largest telecommunication giant, NTT Docomo.
Phil-Data Business Systems
September 25, 2023
•[ ransomware, malware, technology ]
The BlackCat ransomware gang adds Phil-Data Business Systems to the list of its victims.
Okta
September 23, 2023
•[ leak, technology, healthcare ]
Okta warns nearly 5,000 current and former employees that their personal information was exposed after Rightway Healthcare, a third-party vendor was breached.
Nansen
September 22, 2023
•[ leak, misconfiguration, technology ]
Ethereum blockchain analytics firm Nansen asks a subset of its users to reset passwords following a recent data breach at its authentication provider.
