ShapedPlugin update flow hacked to infect WordPress sites
…The security incident affected only three paid plugins: Product Slider Pro before 3.5.4 for WooCommerce, Real Testimonials Pro 3.2.5, and Smart Post Show Pro before 4.0.2…
Search
Top stories
Over 20,000 Instagram accounts stolen in Meta AI support hack
…It also enrolled all potentially stolen accounts into a mandatory security checkpoint and asked all affected users to reset their passwords again and re-authenticate to secure and regain control of the…
OpenAI agent used exposed credentials at 4 services in Hugging Face breach
…also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expanding the scope of the four-day security incident to other organizations.
Australian energy provider Origin says data breach exposes client data
…Yesterday, Origin announced that it had launched an investigation into “a potential security incident that may involve unauthorized access to some customers’ data.” An update published today confirms a data breach , listing…
Upbound says hack caused $13 million in fraudulent Acima leases
…Securities and Exchange Commission (SEC), the company says that it "experienced cybersecurity incidents in which certain non-sensitive customer information and other documents were obtained without authorization." The threat actor used the…
Unlimited Technology Systems breach impacts 3.8 million people
…healthcare providers Unlimited serves.” The data types that were potentially exposed in this incident include: Full names Social Security numbers Dates of birth Email and mailing addresses Phone numbers Demographic information Scans…
Microsoft blames macOS update for undismissible Teams location prompts
…incident report ( TM1315837 ) and blamed it on a recent macOS security update that prevents the operating system from retaining users' location-permission selections. "We've identified that a recent macOS security update…
Hackers backdoor Jscrambler npm package with infostealer malware
…Following the incident, additional security controls have been implemented for the publishing pipeline. Developers who have used the malicious npm packages should treat their environments as compromised, rotate all secrets, and restore…
OpenAI confirms security breach in TanStack supply chain attack
…In a security advisory published today, the company said the incident did not impact customer data, production systems, intellectual property, or deployed software. The company says the breach is linked to the…
23andMe to pay $18 million in new genetics data breach settlement
…The company initially denied that a breach had occurred, then blamed the incident on customers' account and password practices, according to Attorney General James. The settlement secures new security requirements at TTAM…