Information security
fromSecurityWeek
2 days agoSailPoint Discloses GitHub Repository Hack
Unauthorized access to a subset of GitHub repositories was detected and contained, with no evidence of customer data access or service interruption.
#cybersecurity-incident
#cybersecurity-incident
[ follow ]
fromKotaku
1 month agoGacha Game Distributes Malware, Apologizes With 10 Free Pulls
Umbral Stealer is an infostealer virus that can record keystrokes and take screenshots. In basic terms, it attempts to harvest sensitive information from the machines it infects, as it's primarily geared towards stealing users' passwords and cryptocurrency. The virus was distributed via a patch to Duet Night Abyss' launcher, which went live on Steam at 7:39 am UTC on March 18.
Information security
#data-breach
Privacy professionals
fromSecurityWeek
1 month agoSecurity Firm Aura Discloses Data Breach Impacting 900,000 Records
Aura suffered a data breach affecting 900,000 records after a phishing attack compromised an employee account for approximately one hour, exposing names, email addresses, and contact information of roughly 35,000 customers.
Privacy professionals
fromComputerWeekly.com
1 month agoCompanies House restarts online services following cyber breach | Computer Weekly
Companies House restored its WebFiling service after discovering a security flaw that exposed personal data and allowed unauthorized actions to logged-in users with authorization codes.
Privacy professionals
fromSecurityWeek
2 months agoStarbucks Data Breach Impacts Employees
Starbucks experienced a data breach affecting approximately 900 employees through phishing attacks that compromised Partner Central accounts, exposing names, social security numbers, dates of birth, and financial information.
fromSecuritymagazine
1 month agoTargeted Phishing Attack Breaches Biotech Company Data
This phishing attack enabled the threat actor to access 'certain internal IT business applications.' The malicious actor gained unauthorized entry by compromising an employee's access to the organization's internal network for business administration.
Information security
#data-security-breach
Privacy professionals
fromwww.bbc.com
1 month agoFirms urged to check if other users edited their data on Companies House
Companies House experienced a security vulnerability in its WebFiling system that allowed logged-in users to view and edit other companies' sensitive data, including directors' home addresses and emails, before being resolved within three days.
Privacy professionals
fromTheregister
1 month agoUK's corporate registry fixes data exposing technical error
Companies House shut down its WebFiling platform for a weekend to fix a security flaw that exposed directors' personal details and allowed unauthorized modifications to company records for any logged-in user.
Information security
fromSecurityWeek
2 months agoPolyfill Supply Chain Attack Impacting 100k Sites Linked to North Korea
The 2024 Polyfill.io supply chain attack affecting over 100,000 websites involved both Chinese and North Korean threat actors, with Funnull serving as a corporate front for the operation.
fromSecurityWeek
2 months agoAd Tech Company Optimizely Targeted in Cyberattack
The threat actor gained access to Optimizely's systems through a sophisticated voice-phishing attack, but was unable to escalate privileges, install software, or create any backdoors in the Optimizely environment. The incident was confined to certain internal business systems including Zendesk, records in our Salesforce CRM, and a limited set of internal documents used for back-office operations.
Information security
[ Load more ]