The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۰۳

Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights

Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affecting account and billing information, alongside secrets, datasets, and incomplete models for a "limited set of accounts." In a notice published on October 10, 2026, the company said it detected unauthorized use of internal Fireworks

Data Breach

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۳۰

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two

Malware & Threats Vulnerabilities & Zero-Day Programming & Languages

Source

eSecurityPlanet سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۳۰

Binance Denies Purported ShinyHunters 335.9M Record Claim

Binance denies a new breach after a seller advertised 335.9 million lines of alleged customer data for $900,000. Here's what remains unverified and why it matters.

Data Breach

Source

BleepingComputer سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۲۹

Binance warns of iOS flaw that could leak crypto wallet secrets

Binance is warning about a vulnerability in Apple's iOS 26.7.1, 27.0.1, and 27.2 that could allow third-party apps to read private files stored by other apps, including cryptocurrency seed phrases, secret keys, and login credentials. [...]

Vulnerabilities & Zero-Day Data Breach Mobile Development

Source

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۲۸

Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America

The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and administrative-themed phishing lures to deliver a remote access trojan (RAT) that shares its lineage with AsyncRAT and DCRat. "The campaign uses Portuguese and Spanish lures that resemble court notifications, fiscalía notices, tutela proceedings, and

Malware & Threats Phishing Threat Intelligence

Source