…By July this year, DeadLock's data leak site listed 80 organizations, mostly from Europe. Victims include companies in the IT, mining, transportation, manufacturing, hospitality, and consumer goods sectors. Microsoft researchers observed…
…The affected factories are currently resuming normal production." Nitrogen also says on their dark web leak site that the stolen Foxconn files contain "confidential instructions, projects and drawings" from Apple, Intel, Google…
…flaw and 11 medium-severity issues, including command injection, missing authorization checks, cross-site scripting (XSS), cross-site request forgery (CSRF), and denial-of-service. While SAP hasn't found evidence that…
…Trust Pulse, albeit not confirming the impact on PushEngage. “We have since remediated the marketing site, migrated it to a new server, and rotated all credentials, including the CDN API key,” Awesome…
…BleepingComputer has learned that both the breach and defacements involved multiple cross-site scripting (XSS) vulnerabilities that enabled the attacker to obtain authenticated admin sessions. The second hack was to draw attention…
…After gaining access, the phishing site presents the victim with fake Microsoft-branded passkey registration pages, prompting them to save a fake BIP-39 recovery phrase and confirm one word from it…
…A relatively new extortion gang known as CoinbaseCartel has claimed the attack by adding Grafana to their data leak site (DLS), although no data has been leaked yet. Grafana Labs is the…
…Although the company didn't share further details on the breach and defacements, BleepingComputer has learned that the attacker exploited multiple cross-site scripting (XSS) vulnerabilities. ShinyHunters injected malicious JavaScript to exploit…
…After breaching their systems and exfiltrating sensitive documents, Clop publishes the stolen data on its dark web leak site, making it available for download via Torrent if victims refuse to pay a…
…Attackers are also making that infrastructure harder to analyze while it's live, combining trusted hosting platforms — Cloudflare Workers, Railway, Vercel, Microsoft Dynamics, SharePoint, Adobe, Google Firebase, Google Sites, Jotform, Linode, Azure…