Carnival confirms data breach impacting nearly 6 million

Carnival Corporation, parent of Carnival Cruise Line, is sending out fresh “Notice of Cybersecurity Event” letters dated May 27, 2026. If you feel like you've read that sentence before, you're not imagining things. Over the last decade, the world’s largest cruise operator has accumulated a worryi...

Malicious code in @scdb/urban-carnival (npm)

The package @scdb/urban-carnival was found to contain malicious code...

Malicious code in @lbnqduy1/upgraded-carnival (npm)

The package @lbnqduy1/upgraded-carnival was found to contain malicious code...

MAL-2025-8365 Malicious code in @lbnqduy1/upgraded-carnival (npm)

The package @lbnqduy1/upgraded-carnival was found to contain malicious code...

MAL-2025-9283 Malicious code in @scdb/urban-carnival (npm)

The package @scdb/urban-carnival was found to contain malicious code...

carnival-t.jp Cross Site Scripting vulnerability OBB-3539885

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Carnival Cruise Cyber-Torpedoed by Cyberattack

Carnival Corp., the world’s largest cruise-ship operator, has sprung another leak: For the second time in a year, attackers have breached email accounts and accessed personal, financial and health information belonging to guests, employees and crew. Carnival has quite the armada: Its cruise brand...

Carnival Corp. Ransomware Attack Affects Three Cruise Lines

Hackers accessed personal information of guests, employees and crew for three cruise line brands and the casino operations of Carnival Corp. in a ransomware attack the company suffered on Aug. 15, officials have confirmed. Carnival Cruise Line, Holland America Line and Seabourn were the brands...

Facebook Finally Cracks Down on QAnon

Plus: A top-secret iPod, Carnival ransomware, and more of the week’s top security news...

carnival-tours.com Cross Site Scripting vulnerability OBB-1227868

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

carnivalkids.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1188787 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Zynga Faces Lawsuit Over Massive Words with Friends Breach

Mobile game developer Zynga could face a class-action lawsuit stemming from a massive data breach last September, which impacted 218 million users of the Words with Friends mobile app. The news comes as other big names face security incidents: T-Mobile and Carnival Cruise Lines have admitted this...

Zynga Faces Lawsuit Over Massive Words with Friends Breach

Mobile game developer Zynga could face a class-action lawsuit stemming from a massive data breach last September, which impacted 218 million users of the Words with Friends mobile app. The news comes as other big names face security incidents: T-Mobile and Carnival Cruise Lines have admitted this...

Hello Kitty Carnival - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Hello Kitty Carnival published at the 'play' market has multiple vulnerabilities...

Baby Hazel Carnival Fair - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Baby Hazel Carnival Fair published at the 'play' market has multiple vulnerabilities...

Candy Party: Coin Carnival - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Candy Party: Coin Carnival published at the 'play' market has multiple vulnerabilities...

Slot Carnival - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Slot Carnival published at the 'play' market has multiple vulnerabilities...

Farm Dozer: Coin Carnival - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Farm Dozer: Coin Carnival published at the 'play' market has multiple vulnerabilities...

Coin Party: Carnival Pusher - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Party: Carnival Pusher published at the 'play' market has multiple vulnerabilities...

Dark Arcana: The Carnival - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dark Arcana: The Carnival published at the 'play' market has multiple vulnerabilities...