[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentData Breaches
Ministry of Justice Breach Exposes Southport Victims' Files
The Ministry of Justice has apologized for a shocking breach that exposed sensitive files of Southport murder victims and their families, describing the incident as completely unacceptable. The Prime Minister has stepped in, ordering an urgent investigation overseen by the Lord Chancellor, with promises of swift and firm action against any wrongdoing.
CenterPoint Energy Breach Exposes Customer Data
CenterPoint Energy suffered a major breach, with a hacker claiming to have stolen 7.49 million customer records, including sensitive info like names, addresses, account numbers, and partial Social Security numbers. The breach, still under investigation, highlights the importance of protecting personal data.
Japan's Digital Agency Breach Exposes 246,000 Personnel Records
A shocking security breach at Japan's Digital Agency has exposed a staggering 246,000 personnel records after a third-party hacker exploited a vulnerability in a network-connected device to gain unauthorized access to the system. The breach was only discovered on July 9, after a large-scale file access was detected from a staff member's account on June 25.
MeshCentral Backdoor Exploited in 3BB Broadband Network Breach
Researchers uncovered a sneaky backdoor in 3BB's network, one of Thailand's largest broadband providers, where an attacker used MeshCentral, a legitimate remote-management tool, to maintain secret control of internal machines. The culprit installed MeshCentral agents on compromised servers, allowing them to run tools and gain full administrative control of at least one server.
Twitch Extension Exposes Users' OAuth Tokens
A popular browser extension with over 30,000 installs, marketed as Twitch Enhanced Viewer | JeetBot, has been found to be secretly forwarding users' sensitive Twitch OAuth session tokens to a third-party bot service. This alarming security risk has left users potentially vulnerable to unauthorized account access.
Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens
A malicious Twitch extension, known as Twitch Enhanced Viewer | JeetBot, has compromised the live OAuth session tokens of approximately 31,000 users, forwarding them to Russian proxy servers. This alarming security breach highlights the risks of third-party extensions, even those readily available on official app stores.
Revolut Breach Exposes Sensitive Customer Data via Fake Government Requests
A scammer impersonated a government agency, tricking Revolut staff into spilling sensitive customer info through fake requests - a clever tactic known as a sophisticated external impersonation scam. This breach put customer data at risk, highlighting the need for extra vigilance in protecting personal info.
Twitch Extension Exposes 31,000 Users' OAuth Tokens
A popular Twitch browser extension, JeetBot, has been exposing the OAuth tokens of over 31,000 users, putting their accounts at risk. The extension's code recovers and forwards these sensitive tokens to operator-controlled proxy servers, compromising user data.
Revolut Breach Exposes Sensitive Data of Customers Worldwide
A cunning email scam has led to a massive data breach at Revolut, exposing sensitive information of customers globally, with the scammer posing as a legitimate government agency to trick the fintech firm into sharing customer data. Over 80 million customers worldwide, including 800,000 businesses, may be affected.
Florida DMV Breach Exposed via Stolen Police Credentials
A data breach at the Florida DMV exposed sensitive information after an international cybercriminal group compromised the system using stolen police credentials. The breach was quickly identified and mitigated on September 4, 2026, and no further unauthorized access has occurred.
Trezor Phishing Attacks Target 347,000 Users After Brevo Breach
Phishing attacks have hit 347,000 Trezor users after a security breach at Brevo, the marketing platform used by Trezor for its newsletter campaigns, exposed sensitive email addresses. Trezor quickly sprang into action, suspending its Brevo account and taking down the malicious domain within 20 minutes to limit the damage.
Senator Hawley Probes OpenAI Over Hugging Face Breach
Senator Josh Hawley is demanding answers from OpenAI after a breach at Hugging Face raised serious concerns about AI safety, and he's launched a formal review to get to the bottom of it. The senator wants detailed information on the incident, including internal communications and technical details, by October 1.
Surfshark VPN Breach Exposes Internal Test Servers
A configuration mistake made by Surfshark's engineering team left an internal test server vulnerable to the internet, exposing sensitive data due to human error. The incident highlights the importance of robust security measures, even for trusted services.
AdaptHealth Data Breach Exposes 4.1M Records
A massive data breach at AdaptHealth has compromised the sensitive information of 4.1 million people, including names, contact details, demographics, and health and insurance data. The cyberattack exposed a wide range of personal records, putting millions of individuals at risk.
IDScan Breach Exposes 153 Million Driver's Licenses
A massive data breach at IDScan has exposed a staggering 153 million driver's license scans, which were allegedly advertised for sale on a dark-web forum, compromising sensitive information on a huge scale. The identity verification firm has confirmed unauthorized access to its cloud platform and is working with specialists to investigate the incident.
ShinyHunters Breach Exposes 6.4M in McKesson Cyberattack
A massive 6.4 million individuals have been impacted by the McKesson cyberattack, with exposed data including sensitive information like names, email and physical addresses, and more. The breach, leaked by ShinyHunters, affects a wide range of people, from patients and staff to marketing recipients and healthcare providers.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Anthropic Exposes AI Model Breach Involving Claude Opus 4.6
A recent breach involving Anthropic's AI model, Claude Opus 4.6, exposed sensitive third-party systems after a misconfiguration and naming error led to an unabortable task. The incident, which occurred in January 2026, was only discovered last month and prompted a massive scan of 481 million transcripts to assess the damage.
Contractor's Secret Account Exposes 4,000 Patient Records
A routine security review uncovered a shocking secret: a contractor's hidden admin account, left unchecked for years, had been exposing 4,000 patient records to potential breaches. Forgotten logins like this one can remain wide open, causing unseen damage and putting sensitive health information at risk.
AdaptHealth Breach Exposes 4.1 Million Patients' Data
A massive data breach at AdaptHealth has put the personal information of 4.1 million patients at risk after hackers compromised the company's systems in June and demanded a ransom. The breach was first disclosed in a July SEC filing, and it's been confirmed that the ShinyHunters threat group was behind the attack.
AI-Powered Attacks Target ID Databases
A staggering 153 million driver's licenses are now being sold on the dark web, highlighting the alarming vulnerability of our personal ID information. This massive breach is a wake-up call to rethink how we collect, store, and protect sensitive documents in the age of AI-powered attacks.
Veradigm Breach Exposes Patient Data After Third-Party Hack
Veradigm is alerting patients to a data breach caused by a third-party hack, which exposed sensitive patient information after a malicious actor stole credentials and accessed API environments. The breach, linked to a busy ransomware operation, has not disrupted Veradigm's operations.
Veradigm Breach Exposes Patient Data After Ransomware Attack
A recent ransomware attack on one of Veradigm's third-party vendors has led to a data breach, exposing sensitive patient information - but fortunately, the incident was contained and didn't disrupt the company's operations. Veradigm has already launched a response and notified law enforcement.
DoppelCart Network Exposes 119,000 Fake Shops Stealing Credit Cards
A massive network of 119,000 fake online shops, dubbed DoppelCart, has been uncovered, stealing credit card info and personal data on a huge scale. This enormous operation dwarfs previous scams, with over 105,000 of the shops still active and snaring unsuspecting victims.
ShinyHunters Breaches Florida DMV Database
A massive data breach has hit the Florida DMV, with hackers allegedly stealing over 200,000 driver records from the state's database after exploiting a password-reset flaw. The breach, which began on September 3rd, has been claimed by the notorious extortion gang ShinyHunters, who are now threatening to release the sensitive information unless they're paid.