On Friday, Trezor, a prominent hardware wallet manufacturer, revealed that approximately 67,000 of its U.S. customers were affected by a data breach involving its shipping provider, ShipMonk. This incident follows a previous disclosure in which Trezor reported that 13,689 customer records were compromised due to similar vulnerabilities. The compromised data…
JetBrains Alerts Cadence Users After Security Breach In a significant security incident last month, JetBrains has urged its Cadence users to take immediate precautions by revoking and rotating all credentials. This advisory follows the exploitation of a critical vulnerability in TeamCity, which allowed unidentified threat actors to compromise JetBrains’ own…
Widespread Data Theft and Extortion Threat Targets Microsoft 365 Users Cybersecurity threat hunters have unveiled significant details regarding a large-scale data theft and extortion operation that is currently targeting Microsoft 365 and various software-as-a-service (SaaS) platforms. This operation is characterized by tactics such as vishing—voice phishing that dupes users into…
Cybersecurity Alert: Vulnerabilities in LiteLLM Gateway Software Expose Sensitive Data In a recent assessment by Wiz Research, a significant security issue has been identified in the LiteLLM gateway software, which facilitates connections between applications and AI model providers. The analysis revealed that nearly 10% of the LiteLLM servers publicly accessible…
On Thursday, Anthropic disclosed the disruption of an advanced threat campaign orchestrated by a Russian state-sponsored cyber espionage group known as GTG-20006, also referred to as the Generative Threat Group. This group has been linked to the broader operating framework of the notorious hacking collective known as Midnight Blizzard (APT29,…
A recently identified malicious browser extension targeting Twitch users has resulted in the unauthorized exposure of OAuth tokens for approximately 31,000 accounts. The extension, named “Twitch Enhanced Viewer | JeetBot,” allegedly routes these tokens to proxy servers controlled by a Russian bot service. Researchers have raised concerns regarding the effective…
Gyazo Suffers Significant Data Breach, Exposing Millions of User Records In a troubling announcement, Helpfeel, the organization behind the image-sharing service Gyazo, revealed that a recent security breach has compromised approximately 23.62 million user records. This incident, disclosed in a notice published on Wednesday, includes sensitive information such as email…
On September 18, CrowdSec, a French cybersecurity company, disclosed a significant data breach incident that occurred on May 22 when an attacker exploited the GitHub account of a recently departed employee. This unauthorized access allowed for the copying of approximately 170 private repositories, raising alarms about sensitive information being compromised.…
ShinyHunters Claim Breach of FBI’s Systems, Targeting Employee Data In a significant cybersecurity incident, the group known as ShinyHunters has asserted that it successfully infiltrated the U.S. Federal Bureau of Investigation (FBI) and compromised sensitive data belonging to current and former agency employees. On Tuesday, the group announced the breach…