Sydney Man Sentenced for Blackmailing Optus Customers After Data Breach

A Sydney man has been sentenced to an 18-month Community Correction Order CCO and 100 hours of community service for attempting to take advantage of the Optus data breach last year to blackmail its customers. The unnamed individual, 19 when arrested in October 2022 and now 20, used the leaked...

Sydney Man Sentenced for Blackmailing Optus Customers After Data Breach

A Sydney man has been sentenced to an 18-month Community Correction Order CCO and 100 hours of community service for attempting to take advantage of the Optus data breach last year to blackmail its customers. The unnamed individual, 19 when arrested in October 2022 and now 20, used the leaked...

Microsoft: Iranian Nation-State Group Sanctioned by U.S. Behind Charlie Hebdo Hack

An Iranian nation-state group sanctioned by the U.S. government has been attributed to the hack of the French satirical magazine Charlie Hebdo in early January 2023. Microsoft, which disclosed details of the incident, is tracking the activity cluster under its chemical element-themed moniker...

MAL-2023-67 Malicious code in @tangoch/add-two (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db14ce679d7f0dd262266021768200a695a57df3a2609fb5b98bd03ebca95d3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Instant Checkmate, TruthFinder Data Breach: 20M Accounts Leaked

By Deeba Ahmed Instant Checkmate and TruthFinder are two subscription-based services allowing users to carry out background checks on people. This is a post from HackRead.com Read the original post: Instant Checkmate, TruthFinder Data Breach: 20M Accounts Leaked...

Google Fi User Data Breached Through T-Mobile Hack

By Deeba Ahmed Google Fi customers are impacted by the recent T-Mobile breach, as Fi relies on T-Mobile and US Cellular for connectivity. This is a post from HackRead.com Read the original post: Google Fi User Data Breached Through T-Mobile Hack...

Up to 10 million people potentially impacted by JD Sports breach

Were at the start of February, and news of breaches keeps on coming. In this case, though, while the news that 10 million JD Sports customers may have been impacted by a cyber attack has only just arrived, the data potentially accessed in that attack is already several years old. The danger zone ...

Riot Games refuses to pay ransom to avoid League of Legends leak

After confirming threat actors were able to steal some of its code, Riot Games has also revealed that it received a ransom email from its attacker. The attackers demanding $10 million to stop them leaking source code from League of Legend's and other games. Riot's reply? Today, we received a rans...

U.S. Department of State: IDOR in TalentMAP API can be abused to enumerate personal information of all the users

An IDOR vulnerability was discovered in the Talentmap API that allowed guest users to enumerate personal information of all users. The vulnerability was due to the lack of access control mechanisms in the API endpoint. A malicious actor could exploit this vulnerability to fetch information of all...

GoTo’s LastPass Breach: Encrypted Customer Data Taken

By Deeba Ahmed GoTo-owned LastPass revealed that hackers stole customers' encrypted data in a November 2022 data breach. This is a post from HackRead.com Read the original post: GoTos LastPass Breach: Encrypted Customer Data Taken...

LastPass Parent Company GoTo Suffers Data Breach, Customers' Backups Compromised

LastPass-owner GoTo formerly LogMeIn on Tuesday disclosed that unidentified threat actors were able to steal encrypted backups of some customers' data along with an encryption key for some of those backups in a November 2022 incident. The breach, which targeted a third-party cloud storage service...

PSA: Your Site Isn’t Hacked By This Bitcoin Scam, Keep the Money

On January 19th, 2023, a member of the Wordfence Threat Intelligence team received an email from their personal blog, claiming the site had been hacked, and we received two reports from Wordfence users who received the same message. The email claimed that the site had been hacked due to a...

Flaw in Diksha App Exposed the Data of Millions of Indian Students

A mandatory app exposed the personal information of students and teachers across the country for over a year...

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->shalfloop(); component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCioparser function involves unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is related to the...

Vulnerability of the SNC_io parser function <EW>::read_sedge() seh->next() in the Nef_S2/SNC_io parser.h file of the Computational Geometry Algorithms library. This allows an intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, located in the CGAL algorithm library for computational geometry, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data,...

T-Mobile's New Data Breach Shows Its $150 Million Security Investment Isn't Cutting It

The mobile operator just suffered at least its fifth data breach since 2018, despite promising to spend a fortune shoring up its systems...

T-Mobile Hacked Again: 37 Million Accounts Compromised

By Deeba Ahmed According to T-Mobile, the data breach occurred in November of 2022, but the company only discovered the incident in January of 2023. This is a post from HackRead.com Read the original post: T-Mobile Hacked Again: 37 Million Accounts Compromised...

New T-Mobile Breach Affects 37 Million Accounts

T-Mobile today disclosed a data breach affecting tens of millions of customer accounts, its second major data exposure in as many years. In a filing with federal regulators, T-Mobile said an investigation determined that someone abused its systems to harvest subscriber data tied to approximately ...

PayPal Notifies 35,000 Users of Data Breach

By Habiba Rashid According to PayPal, hackers managed to access the personal information of 34,942 users; however, no transactions were performed from the breached accounts. This is a post from HackRead.com Read the original post: PayPal Notifies 35,000 Users of Data Breach...

Third-Party Firm Exposes Personal Info for Nissan Customers

By Habiba Rashid In total, 18,000 customers of Nissan North America, Inc. had their personal information exposed to the public by a third-party developer. This is a post from HackRead.com Read the original post: Third-Party Firm Exposes Personal Info for Nissan Customers...