833 matches found
US Auto Insurance Platform ClaimPix Leaked 10.7TB of Records Online
Cybersecurity researcher Jeremiah Fowler discovered a massive 10.7TB ClaimPix leak exposing 5.1M customer files, vehicle data, and Power of Attorney documents. Read the full details...
Salesforce Patches Critical ForcedLeak Bug Exposing CRM Data via AI Prompt Injection
Cybersecurity researchers have disclosed a critical flaw impacting Salesforce Agentforce, a platform for building artificial intelligence AI agents, that could allow attackers to potentially exfiltrate sensitive data from its customer relationship management CRM tool by means of an indirect promp...
Gucci, Balenciaga and Alexander McQueen Breach Linked to ShinyHunters
ShinyHunters reportedly hacked Kering, exposing Gucci, Balenciaga and Alexander McQueen customer data, raising risks of scams and spear…...
Linux Distros Unpatched Vulnerability : CVE-2023-4198
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Access Control in Dolibarr ERP CRM = v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data CVE-2023-4198...
Linux Distros Unpatched Vulnerability : CVE-2023-33568
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects,...
Carmaker Portal Flaw Could Let Hackers Unlock Cars, Steal Data
A security vulnerability in a major carmaker's online portal exposed customer data and could have let hackers remotely…...
Bouygues Telecom Hit by Cyberattack, 6.4 Million Customers Affected
A cyberattack on Bouygues Telecom exposed data for 6.4 million customers. Find out what information was compromised and…...
ShinyHunters Target Chanel in Salesforce Linked Data Breach
ShinyHunters breached Chanel’s US client database via Salesforce-linked access, exposing limited customer details through social engineering tactics...
Pandora Cyber Attack Exposes Customer Data Via Third-Party Vendor
Pandora cyber attack exposes customer data via third-party breach. No passwords or payment info leaked, but phishing risks remain...
Spying on People Through Airportr Luggage Delivery Service
Airportr is a service that allows passengers to have their luggage picked up, checked, and delivered to their destinations. As you might expect, it's used by wealthy or important people. So if the company's website is insecure, you'd be able to spy on lots of wealthy or important people. And mayb...
Louis Vuitton UK Hit by Cyberattack, Third LVMH Breach in 3 Months
Louis Vuitton UK suffers cyberattack exposing customer data, marking the third LVMH breach in 3 months as retail sector faces ongoing security threats...
Qantas Confirms Major Data Breach Linked to Third-Party Vendor
Qantas has confirmed a data breach after attackers gained access through a third-party call centre platform, affecting millions…...
Qantas: Breach affects 6 million people, “significant” amount of data likely taken
Australia's largest airline Qantas has confirmed that cybercriminals have gained access to a third party customer servicing platform that contained 6 million customer service records. Qantas says the breach occurred after a cybercriminal targeted a call centre and managed to gain access to the...
AT&T to pay compensation to data breach victims. Here’s how to check if you were affected
AT&T is set to pay $177 million to customers affected by two significant data breaches. These breaches exposed sensitive personal information of millions of current and former AT&T customers. For those that have missed the story so far: Back in 2021, an entity named Shiny Hunters a known hacking...
InnoShop 安全漏洞
InnoShop is an open source e-commerce system based on Laravel 11 by InnoShop Open Source. A security vulnerability exists in InnoShop 0.4.1 and earlier versions, which stems from the presence of insecure direct object references in multiple locations in the front-end store, which could lead to th...
Researchers Uncover 20+ Configuration Risks, Including Five CVEs, in Salesforce Industry Cloud
Cybersecurity researchers have uncovered over 20 configuration-related risks affecting Salesforce Industry Cloud aka Salesforce Industries, exposing sensitive data to unauthorized internal and external parties. The weaknesses affect various components like FlexCards, Data Mappers, Integration...
Code Bug at Compliance Firm Vanta Leaks Customer Data to Other Clients
Compliance automation provider Vanta confirms a software bug exposed private customer data to other users, impacting hundreds of…...
Cyberattacks Hit Top Retailers: Cartier, North Face Among Latest Victims
North Face, Cartier, and Next Step Healthcare are the latest victims in a string of cyberattacks compromising customer…...
Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Access — Even When Uploading Just One File
Cybersecurity researchers have discovered a security flaw in Microsoft's OneDrive File Picker that, if successfully exploited, could allow websites to access a user's entire cloud storage content, as opposed to just the files selected for upload via the tool. "This stems from overly broad OAuth...