همهٔ اخبار

'123456' password linked to Denmark data breach affecting 8.8M people

Local media reports three weakly protected accounts at small IT biz whose access to national register was abused

“Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations

A crypto security event that promised to teach attendees how to avoid scams is now the subject of scam allegations. The gathering, branded "Don't Get Played," was held as a side event during TOKEN2049 week in Singapore and co-hosted by groups operating under the names "Apex Accelerator" and "Stone Venture." According to a police report filed by one attendee with the Singapore Police Force, the organizers allegedly pr…

GTA 6 leaker threatens to release full playable version of game ahead of official launch

The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build. Read more in my article on the Hot for Security blog.

USN-8915-1: FFmpeg vulnerabilities

Momoko Shiraishi discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2026-30754) It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue…

12th October – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Denmark’s government has disclosed a breach involving its Central Register of Persons after unauthorized individuals exploited access provided to a private supplier. The incident reportedly exposed personal information, including names, addresses, and […] The post 12th…

These ARE the droids you’re looking for

There’s an old leadership fantasy that goes something like this: The CISO surveys a sprawling technology estate, discovers 11 tools doing the work of four, calculates the licensing savings, selects a shiny new strategic platform and declares that consolidation has begun. Six months later, all 11 tools are still running. The new platform is now number 12. I’ve seen variations of this throughout my career, from financi…

iRhythm Data Breach Impacts at Least 360,000 People

Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers. The post iRhythm Data Breach Impacts at Least 360,000 People appeared first on SecurityWeek.

Karaoke Giant Reveals Data Breach Impacting Eight Million

Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers

The 7 biggest issues CISOs and security teams face today

Year after year CISOs see the volume, velocity, and sophistication of attacks increase. They also see their attack surfaces expand and increase in complexity. Advances in artificial intelligence and the rapid growth of AI use in business are also impacting the security agenda, introducing novel attacks, broadening the attack surface to include AI infrastructure, and presenting governance and security control challeng…

Seoul National University Faces 588 Hacking Attempts in 2026

Seoul National University (SNU) has been struck by 28 hacking incidents since 2021, and more than 1,100 pieces of personal information belonging to students, faculty and staff were exposed along the way. The SNU cyberattack figures come from data the university submitted on Sunday to Rep. Baek Seung-ah of the Democratic Party. The breakdown shows eight attacks in 2021 and 10 in 2022, the highest annual total in the p…

Tabung Haji Services Back Online After October 8 Cyberattack, Depositors’ Savings Confirmed Safe

Lembaga Tabung Haji (TH) has resumed its key systems and services after a Tabung Haji cyberattack on Oct 8 led to a temporary suspension, and the agency says depositors’ savings are safe. In a statement issued today, TH said the reactivation followed comprehensive security checks, the strengthening of controls and system recovery measures. The agency also said it worked with national cybersecurity authorities to addr…

GTA 6 Leaker Demands $30M Meme Coin Market Cap to Release Full Game

CyberLeek threatens to leak a playable GTA 6 build if its Solana meme coin hits a $30 million market cap, but the build remains unverified. CyberLeek, the anonymous figure behind this summer’s wave of GTA 6 leaks, just raised the stakes considerably. After dropping 25 minutes of gameplay footage earlier last week, including nudity and […]

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 118

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure UAC-0277: ClickFix on compromised websites to spread LUNEXSTEALER MALFEX – A malicious npm postinstall no advisory has caught for fourteen months Canto incognito: tracking the PoeLLM malware […]

Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Anthropic Restricts Live Internet Access After Claude Evaluation Failures Silent Ransom Group Allegedly Extorted $207 Million Without […]

نشت اطلاعات حساس «شل» و «فیلیپس»؛ نقشه فنی دستگاه‌های پزشکی در دارک‌وب منتشر شد

گروه باج‌افزاری کلاپ بخشی از داده‌های منتسب به فیلیپس و شل شامل نقشه‌های فنی را پس از نفوذ از طریق یک رخنه نرم‌افزاری در دارک‌وب منتشر کرد.

`123456' password used in Danish CPR data breach

ASOS Breach Reveals the Risks in Customer-Facing SaaS

The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.

Hundreds of thousands impacted by data breach at biosensor firm iRhythm

Ransomware groups shift tactics: data theft instead of encryption

Ransomware consultant said he would decrypt data, is accused of paying ransoms instead

FBI touts another ShinyHunters arrest in response to data breach

Belarusian hacktivists admit to 2023 breach of Russian state healthcare network

$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack

The Cyber Express Weekly Roundup: US Puts $10 Million Bounty on Chinese Hacker, Japan Moves to Hunt Hidden Attackers and More

In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years

ASOS breach update: Hackers stole customer details and shopping searches

AI-Driven tool ARTEX used in attacks against South Korean Banks

Andover Confirms Cyberattack Reached Its Systems, Investigation Continues

Asos confirms breach of customer data after hackers send rogue app notification

ASOS Confirms Data Breach Linked to Stolen Employee Credentials