Advertisement
Nissan Breach: Oracle PeopleSoft Zero-Day Exploited by ShinyHunters
Nissan discloses a data breach impacting current and former employees, attributed to an exploited Oracle PeopleSoft zero-day vulnerability linked to the ShinyHunters…
_Aleksei_Gorodenkov_Alamy.jpg?width=720&quality=80&disable=upscale)
Education Sector Third-Party Risk: Protecting Student Data
The education sector confronts growing third-party breach threats, endangering student data.
Klue-Salesforce Breach Exposes Competitive Data; Threat Actors Hacked
Klue's Salesforce instance breach exposed customer competitive intelligence and contact data via an API vulnerability.
Millions of Passports Leaked via Low-Value Identity Verification Breach
A database of nearly a million passports globally was leaked online, originating from a breach in a low-value ID verification system, exposing high-value credentials.
Tata Electronics Confirms Cyberattack and Data Leak
Tata Electronics confirms a cyberattack impacting its IT infrastructure, leading to data leakage. Analysis of the breach and defense strategies.
TPWD Data Breach: Third-Party Vendor Compromise Impacts 3 Million
A significant data breach at a Texas Parks and Wildlife Department vendor exposed PII of 3 million individuals. Learn about the supply chain risks involved.
Advertisement
Klue OAuth Breach: Icarus Threat Group Targets Salesforce
Klue confirms an OAuth token breach by the Icarus group, potentially exposing customer Salesforce environments. Learn how to secure your integrations.
Texas Data Breach Exposes 3M Driver's Licenses via Vendor
A data breach at a third-party vendor of the Texas Parks and Wildlife Department exposed over 3 million driver's licenses, impacting Texans' PII.
Klue Security Incident: Mitigating Third-Party Risk in Intelligence
Analyze the impact of the Klue security incident on Recorded Future. Learn how to secure SaaS integrations and improve third-party vendor risk management.
Nintendo Confirms Third-Party TinyPulse Data Breach — Supply Chain Risks
Nintendo confirms employee survey data was stolen via a breach at TinyPulse, a third-party vendor owned by WebMD subsidiary Internet Brands.
Kodak Data Breach Confirmed: ShinyHunters Linked to Exfiltration
Kodak acknowledges a data breach after ShinyHunters claimed responsibility, with the threat actor reportedly exfiltrating sensitive company information.
Credential Harvesting Heist Compromises 30K+ Fortinet Devices
A widespread credential harvesting campaign has compromised over 30,000 Fortinet devices across 200 countries, enabling unauthorized access for threat actors.
iRhythm Data Breach: Ransomware Group Steals Healthcare Data
Digital health company iRhythm confirms a data breach following a ransomware attack, resulting in stolen patient and operational data. Learn mitigation.
China-Linked Espionage Targets REDCap Servers, Stealing Medical Data
China-linked threat actors breached exposed REDCap servers, deploying InfiniteRed malware to steal sensitive medical research from a North American institution.
Iranian Handala Group Claims Cal Water Hack, Exposing PII
Iranian cyber group Handala claims responsibility for breaching Cal Water, exposing 5GB of customer PII and RTKBase platform credentials.
Coupang Data Breach Leads to Record $409M Fine in South Korea
South Korea's PIPC fined e-commerce giant Coupang a record $409 million for a massive data breach affecting over 37 million customers.
SoFi Hong Kong Data Breach via Third-Party Vendor Compromise
Analysis of the SoFi Hong Kong data breach impacting customer information, stemming from a third-party vendor compromise. Includes mitigation strategies.
Oxford University Data Breach: CareerConnect Compromise Analysis
Oxford University warns of a data breach affecting CareerConnect, a platform managed by Group GTI. Personal data of students and alumni was compromised.
Instagram Account Hijacking: Meta AI Support Exploited by Attackers
Attackers manipulated Meta's AI-powered support system to hijack over 20,000 Instagram accounts via unauthorized password resets. Learn how to secure accounts.
RCI Hospitality Data Breach: 40,000 SSNs Exposed in Intrusion
RCI Hospitality Holdings confirms a network intrusion impacting 40,000 individuals, involving stolen Social Security numbers and employee data files.
WFP Palestine Breach: 600,000 Gaza Households' Data Exposed
The UN World Food Programme confirms a data breach in its Palestine registration portal, exposing sensitive data for 600,000 households in the Gaza Strip.
23andMe 2023 Data Breach: AG Sues Over Exposed Health Data
California AG sues 23andMe for a 2023 credential stuffing data breach exposing genetic and personal health data of 6.9 million users.
Charter Communications Data Breach: Millions of Records Exposed
ShinyHunters leaked data allegedly from Charter Communications, potentially exposing nearly 5 million customer records. Organizations must assess third-party risk.
Trump Mobile Data Breach and 2026 FIFA World Cup Phishing Risks
Analysis of the Trump Mobile data breach, upcoming 2026 FIFA World Cup phishing campaigns, and CISA's strategic response to recent supply chain attacks.