500,000 Active Credentials Left Exposed on GitHub 2026-10-01 at 12:43 By Ionut Arghire Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default. The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
500,000 Active Credentials Left Exposed on GitHub Read More »
ShinyHunters Defiant After FBI Calls on Members to Come Forward 2026-09-30 at 13:20 By Ionut Arghire In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI. The post ShinyHunters Defiant After FBI Calls on Members to Come Forward appeared first on SecurityWeek. This article is […]
ShinyHunters Defiant After FBI Calls on Members to Come Forward Read More »
New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks 2026-09-29 at 20:00 By Eduard Kovacs Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel The post New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks […]
New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks Read More »
Windows, Linux, Android File Notification Systems Leak User Activity 2026-09-25 at 13:53 By Eduard Kovacs Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events. The post Windows, Linux, Android File Notification Systems Leak User Activity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Windows, Linux, Android File Notification Systems Leak User Activity Read More »
ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report 2026-09-23 at 10:13 By Eduard Kovacs The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information. The post ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report Read More »
Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom 2026-09-17 at 16:57 By Ionut Arghire Revolut allegedly fed customer information to hackers impersonating an Italian government agency for five months. The post Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom Read More »
Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data 2026-09-15 at 18:30 By Eduard Kovacs A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems. The post Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data Read More »
IDScan confirms breach after 153 million driver’s licenses leak on dark web 2026-09-11 at 11:39 By Sinisa Markovic Days after reports linked IDScan to a dark web database holding more than 153 million driver’s license scans, the identity verification company has confirmed hackers accessed customer data stored on its cloud platform. The Louisiana-based firm, which […]
IDScan confirms breach after 153 million driver’s licenses leak on dark web Read More »
Fortune 500 Companies Hit in Azure Data Theft Campaign 2026-08-17 at 09:51 By Ionut Arghire A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations. The post Fortune 500 Companies Hit in Azure Data Theft Campaign appeared first on SecurityWeek. This article is an excerpt from […]
Fortune 500 Companies Hit in Azure Data Theft Campaign Read More »
1.6 Million Likely Impacted by RingCentral Data Breach 2026-08-14 at 13:24 By Ionut Arghire The hackers published the allegedly stolen information, including names, addresses, email addresses, and phone numbers. The post 1.6 Million Likely Impacted by RingCentral Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
1.6 Million Likely Impacted by RingCentral Data Breach Read More »
A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months 2026-08-12 at 16:51 By Mirko Zorz Most security stories start with something broken. This one starts with everything working as designed. Researchers at Reco have been tracking a campaign they call City-Forum, named after a domain registered in 2002, abandoned, and now […]
A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months Read More »
Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft 2026-07-22 at 17:22 By Eduard Kovacs An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts. The post Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft appeared first on SecurityWeek. This […]
Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft Read More »
Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data 2026-07-21 at 13:19 By Eduard Kovacs A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure. The post Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data Read More »
What the Fortibleed campaign means for organizations running FortiGate firewalls 2026-06-23 at 17:46 By Zeljka Zorz A massive credential-harvesting campaign targeting FortiGate firewalls has exposed thousands of organizations to potential network compromise, and a trove of attacker tools, scripts, and credentials left inadvertently exposed on a server has given researchers an unusually detailed look at […]
What the Fortibleed campaign means for organizations running FortiGate firewalls Read More »
Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data 2026-06-22 at 16:22 By Eduard Kovacs Squidbleed, discovered with the aid of Claude Mythos Preview, has been described as a Heartbleed-style vulnerability. The post Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data Read More »
74,000 Fortinet firewall credentials exposed in FortiBleed data leak 2026-06-18 at 15:10 By Zeljka Zorz A Russian-speaking cybercriminal group has stolen credentials contained in the configuration files of nearly 74,000 Fortinet firewalls and VPN gateways around the world. The data was accidentally exposed by the group on a server, along with other artifacts and tools, […]
74,000 Fortinet firewall credentials exposed in FortiBleed data leak Read More »
Cybercrime Group Claims Novo Nordisk Hack 2026-06-16 at 15:32 By Ionut Arghire The hack-and-leak group FulcrumSec claims to have stolen 1.3TB of data from the pharmaceutical giant. The post Cybercrime Group Claims Novo Nordisk Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Cybercrime Group Claims Novo Nordisk Hack Read More »
Oracle PeopleSoft servers under attack, Oracle pushes out-of-band security alert 2026-06-11 at 15:41 By Zeljka Zorz A zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft PeopleTools is being exploited in the wild, Charles Carmakal, CTO at cybersecurity firm Mandiant, part of Google Cloud, warned today. The warning comes a day after Oracle published an out-of-band security alert […]
Oracle PeopleSoft servers under attack, Oracle pushes out-of-band security alert Read More »
Sensitive government personnel data posted online, Spanish police arrest suspect 2026-06-02 at 10:58 By Sinisa Markovic The Spanish National Police arrested a man in Granada for allegedly leaking personal data belonging to members of several sensitive state institutions. According to police, the suspect published the information on multiple online platforms, exposing personnel associated with organizations […]
Sensitive government personnel data posted online, Spanish police arrest suspect Read More »
185,000 Likely Impacted by 7-Eleven Data Breach 2026-05-26 at 17:32 By Ionut Arghire The allegedly stolen information leaked by ShinyHunters contains email addresses, names, addresses, and dates of birth. The post 185,000 Likely Impacted by 7-Eleven Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
185,000 Likely Impacted by 7-Eleven Data Breach Read More »