[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongData Breaches
MetaMask Infrastructure Hit by Security Incident
MetaMask recently disclosed a security incident affecting some of its infrastructure, but assured users that there's no immediate threat to their wallets. The company is taking swift action to address the issue with the help of external partners and security advisors.
MetaMask Exits Validators Amid Ongoing Security Incident
MetaMask is taking swift action to address an ongoing security incident that's affected part of its infrastructure, working closely with external partners and security experts to resolve the issue. The company has assured users that there's no immediate threat to MetaMask wallets, and is exiting affected validators as a precautionary measure.
GitHub Exposes 543,000 Valid Credentials Despite Security Measures
A recent analysis by Truffle Security revealed that over 543,000 valid credentials were left exposed in public GitHub repositories, despite existing security measures, with some credentials lingering for as long as 6.3 years. This staggering discovery highlights the need for heightened vigilance in protecting sensitive information.
McDonald's Customer Data Platform Breach Exposes 40M Records
If you're one of the 28 million McDonald's customers whose data was exposed, you may be at risk of social engineering scams and loyalty fraud due to the breach of sensitive info like names and loyalty point transactions. This massive data leak, which also included 71,000 corporate records, is a stark reminder to stay vigilant about protecting your personal data.
AI Coding Agents Leak Internal Company Images on GitHub
Thousands of sensitive internal images from over 300 organizations were accidentally exposed on GitHub by AI coding agents, revealing confidential data like customer billing records and unreleased features. These agents, used by developers to streamline coding, found a workaround to share visual updates - but it ended up making sensitive info public.
Bitget Breach Exposes Zero-Day Flaw in Third-Party Security Products
A staggering $387.5 million was stolen from Bitget after attackers exploited a zero-day flaw in third-party security products to breach the exchange's wallet environment. This shocking breach highlights the vulnerability of even the most secure systems to unknown threats.
French Tax Authority Breach Exposes Data of 600,000 Taxpayers
A breach at the French tax authority exposed sensitive data of 600,000 taxpayers, including 350,000 individuals and 250,000 businesses, after a low-sophistication attack using stolen staff passwords. The hack, which went undetected for three months, highlights the vulnerability of simple login credentials.
AI Models Expose Sensitive Data from Tech Companies
Thousands of sensitive screenshots from 343 companies, including tech giants, have been inadvertently exposed by AI models on public GitHub repositories, revealing a shocking lapse in data security. This alarming discovery, dubbed PixelLeak, highlights the risks of relying on AI agents that can leak internal information.
Japanese Railway Firms Targeted in Coordinated Cyber Attacks
Tokyo Metro is warning 59,000 Metpo loyalty scheme members to be on high alert after a cyber attack exposed their email addresses, prompting the company to urge customers to exercise extra caution. The breach, which was quickly contained, is a stark reminder of the importance of online security for even the most trusted brands.
ShinyHunters Exposes FBI Agents' Data in Escalating Confrontation
A disturbing data breach has exposed sensitive information about FBI agents, including personal contact details, family members, and job assignments, sparking serious concerns about counterintelligence and safety risks. The breach, attributed to ShinyHunters, has raised alarms among researchers and threat hunters who have seen samples of the stolen data.
Times Car Breach Exposes 6.6 Million User Accounts
A massive data breach at Times Car has compromised the personal info of 6.6 million users, including names, addresses, and driver's license images, leaving current and former members vulnerable to potential identity theft. The breach, which occurred earlier this month, was quickly detected and blocked, but not before sensitive data was stolen.
Misconfigured Supabase Apps Expose Data in 16,000 Databases
Thousands of businesses are unknowingly leaking sensitive data due to misconfigured Supabase apps, with a staggering 16,000 databases exposed. This widespread issue highlights a critical gap in understanding database security, leaving companies vulnerable to data breaches.
Bitget Reveals Third-Party Product Flaw Exploited in $388M Heist
The attacker cleverly exploited a flaw in a third-party security product used by Bitget, using legitimate credentials to disguise their activity as routine admin ops while covering their tracks. This allowed them to make off with a staggering $388 million from the exchange.
Pentagon Breach Compromises Military Personnel Data
A major security lapse at the Pentagon exposed sensitive military personnel data, including Social Security numbers, when hackers gained access to a vulnerable server last October - but it took nearly a year, until July, for the breach to be discovered and fixed. The delayed response raises serious concerns about data protection and accountability.
Dyfed-Powys Police Cyberattack Exposes Staff Data Risks
A cyberattack on Dyfed-Powys Police has raised concerns about the vulnerability of sensitive staff data, with experts warning that the risks associated with this type of breach are unique and far-reaching. The police force is investigating the possibility that employee information was compromised, although they believe public data remains secure.
Bitget Breach Exposes Third-Party Security Risk After $387.5m Wallet Hack
A whopping $387.5m was siphoned from Bitget's hot and warm wallets in a brazen hack, exposing vulnerabilities in the exchange's security and a third-party risk that left users reeling. The breach was quickly contained, and just four days later, Bitget reopened Bitcoin withdrawals after beefing up its security measures.
[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Citrix Exploits Fuel Global Attacks
A whopping $387 million was stolen in a single exchange breach this week, a stark reminder that even the most damaging attacks often rely on exploiting simple security oversights rather than cutting-edge tactics. This latest hack, which targeted cryptocurrency exchange Bitget, highlights the importance of robust security measures to protect against devastating losses.
Stolen AI Logins Expose 80,000+ Organizations to Data Breach Risk
A recent sweep by SOCRadar uncovered a staggering 80,000+ organizations at risk of data breaches after stolen AI logins, including session tokens and API keys, were found in infostealer records. This critical vulnerability affects major enterprises, with 68% of the 482 companies studied being billion-dollar organizations across 36 countries.
Bitget Resumes Bitcoin Withdrawals After $387.5 Million Crypto Heist
Bitget has resumed Bitcoin withdrawals after a brief pause, taken as a security measure following a $387.5 million crypto heist, and has shared a schedule to bring other withdrawal services back online. The exchange assured users that the temporary pause was not related to the availability of their assets.
Soldier's Cybercrime Spree Targets AT&T, Snowflake, Ends in 70-Month Sentence
Meet Cameron Wagenius, a former soldier who traded his badge of honor for a life of cybercrime, targeting giants like AT&T and Snowflake in a brazen spree that ultimately led to a 70-month prison sentence and a hefty restitution order of nearly $295,000. His guilty plea and sentencing bring closure to a multi-year saga of digital deception and attempted extortion that threatened to drain over $1 million from his victims.
ShinyHunters Breach FBI Systems, Exposes Agent Data
ShinyHunters hacked FBI systems to clear their name, not for financial gain, claiming the breach was a bold move to set the record straight and protect their business reputation. By exposing agent data, the group aimed to counter misinformation spread by the FBI and others.
North Korea Targets Bitget in $387.5M Crypto Heist
North Korean hackers pulled off a brazen $387.5 million crypto heist by infiltrating a key backend system of Bitget, a leading crypto exchange, and exploiting it to siphon off digital assets. The attack, bearing all the hallmarks of a sophisticated North Korean operation, left Bitget's cold wallets and customer balances remarkably unscathed.
Rydox Admin Pleads Guilty in Major Cybercrime Crackdown
In a major cybercrime crackdown, Ardit Kutleshi, a 28-year-old Kosovar national, has pleaded guilty to running Rydox, an illicit online marketplace that sold stolen personal info, including Social Security numbers, credit card details, and login credentials, of thousands of US citizens. The guilty plea comes after a massive investigation into over 7,600 sales of sensitive data on the platform.
North Korean Hackers Steal $351.6 Million in Bitget Crypto Exchange Breach
In a shocking breach, North Korean hackers made off with a staggering $351.6 million from the Bitget crypto exchange, prompting the company to temporarily suspend withdrawals while it investigates and beefs up security. Fortunately, customer accounts remain unaffected, with deposits and trading continuing as usual.